Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326338303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a326338303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          nxeWUdZVM2e4AGYy1g6htaz6j8wxymdaiVXDAtgFiww=
Subject key identifier:   E8:CF:F6:AB:4D:CC:CE:0F:E7:4A:88:5F:E4:A7:98:F4:FF:A0:9B:7C
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       5AB0BB4DC559F091ACF4401563A4991B9C23ACBD
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326338303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 28 May 2024 02:40:03 +0000
ROA not before:           Tue 28 May 2024 02:35:03 +0000
ROA not after:            Tue 27 May 2025 02:40:03 +0000
asID:                     64120
IP address blocks:        2803:f080:2c80::/43 maxlen: 64

Validation:               Failed, certificate revoked on Thu 11 Jul 2024 19:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b0:bb:4d:c5:59:f0:91:ac:f4:40:15:63:a4:99:1b:9c:23:ac:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: May 28 02:35:03 2024 GMT
            Not After : May 27 02:40:03 2025 GMT
        Subject: CN=E8CFF6AB4DCCCE0FE74A885FE4A798F4FFA09B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:35:7b:38:8b:f4:e8:36:a6:5f:d1:ce:f9:
                    46:e8:2f:28:ea:f6:e7:c4:0b:20:79:a3:c4:a4:28:
                    8e:1d:da:5b:1c:ef:40:8a:b2:93:92:53:db:0e:4e:
                    60:6b:59:2a:d0:48:41:ab:09:9e:c1:8f:ed:db:d3:
                    c5:c7:3c:e0:43:b3:48:5d:aa:96:34:ef:92:05:cc:
                    e0:2c:7b:1d:0d:86:7e:17:0b:32:67:c2:81:c3:7f:
                    03:52:c3:c4:fa:a7:af:c9:71:6d:a1:98:c4:a2:ad:
                    e6:00:26:75:9d:01:a3:8f:3f:b9:29:56:5a:ea:72:
                    77:91:5c:8a:bd:1e:46:b4:0c:8a:b5:d8:f1:dc:18:
                    6f:d8:7b:1c:bc:80:c7:f5:5a:76:a0:4c:26:4b:6c:
                    e6:5c:00:b2:c3:8d:db:df:0e:a7:45:a8:75:ca:a5:
                    12:0c:63:f9:33:af:5c:55:4e:88:ce:eb:90:16:92:
                    1d:66:d7:a2:47:88:46:ea:49:c7:3c:e9:94:e5:91:
                    ab:c2:25:b0:f4:d0:22:e5:2f:7c:8c:32:59:75:56:
                    ab:53:7c:1d:0c:13:00:6b:54:57:ca:ac:2e:04:7b:
                    e6:58:10:c8:54:a5:43:f4:b3:51:3c:92:30:ee:b3:
                    f6:e9:56:a9:15:8e:07:e4:a9:5b:72:5b:55:eb:2d:
                    ac:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CF:F6:AB:4D:CC:CE:0F:E7:4A:88:5F:E4:A7:98:F4:FF:A0:9B:7C
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326338303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2c80::/43

    Signature Algorithm: sha256WithRSAEncryption
         7f:47:99:f9:ea:1f:91:4b:dd:21:7c:49:e0:b5:59:77:70:52:
         57:89:78:45:b9:46:c4:2d:2d:e5:29:11:72:02:a0:e7:bb:d5:
         b0:12:cf:fc:3f:13:46:7b:be:b5:86:d3:48:c4:4c:ac:99:26:
         41:bd:02:a8:e9:21:bb:44:f2:e6:c8:70:ea:e3:f6:81:bd:98:
         78:9c:0c:39:80:ea:b8:cb:a4:d7:2a:32:d2:d8:46:10:f2:ec:
         f9:d0:3c:d2:e5:53:62:95:42:97:e2:30:cb:3f:11:46:9b:e3:
         ee:a4:59:db:46:b4:56:e5:56:54:fa:e3:ac:5e:d6:6b:87:f5:
         a4:60:94:98:c4:f3:56:4a:b2:39:b5:3a:e3:c0:00:a2:7e:0c:
         f9:c0:1d:57:63:64:64:33:b0:19:a7:89:34:7a:22:f7:ff:a4:
         e7:88:4e:a0:e7:d4:74:8d:41:c2:57:fa:ef:4b:f0:89:5d:ce:
         08:8b:e2:bc:1d:06:5e:66:8d:c4:6a:b4:0e:d3:b3:11:f8:2c:
         a6:05:b2:01:e5:e5:04:8a:9c:07:5c:3c:ca:b8:92:4e:48:f3:
         b1:fb:77:a8:f1:81:05:5b:26:56:14:83:6c:35:a5:da:fc:8a:
         54:23:97:73:2f:e5:35:12:93:6c:50:08:02:f7:f3:d1:da:58:
         3a:0b:eb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 22:38:09 2024 by rpki-client on console-ams.rpki-client.org