Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/323830303a3234303a3a2f33322d3634203d3e203132393536.roa
File:                     323830303a3234303a3a2f33322d3634203d3e203132393536.roa (raw, json)
Hash identifier:          daeETf0KCPlZrSx3WFzGhhqhSrPqAFzhPOdFj6ezdqY=
Subject key identifier:   5E:13:AE:B8:5E:84:C9:42:E1:6A:F4:6C:39:F7:8F:B9:C5:BA:C7:F6
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       5BD9A3389D9B1FD60DCF3E0EE3F7ADD8F6EAA13A
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/323830303a3234303a3a2f33322d3634203d3e203132393536.roa
Signing time:             Tue 05 Mar 2024 18:18:38 +0000
ROA not before:           Tue 05 Mar 2024 18:13:38 +0000
ROA not after:            Tue 04 Mar 2025 18:18:38 +0000
asID:                     12956
IP address blocks:        2800:240::/32 maxlen: 64

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 10:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d9:a3:38:9d:9b:1f:d6:0d:cf:3e:0e:e3:f7:ad:d8:f6:ea:a1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Mar  5 18:13:38 2024 GMT
            Not After : Mar  4 18:18:38 2025 GMT
        Subject: CN=5E13AEB85E84C942E16AF46C39F78FB9C5BAC7F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:aa:d3:76:2f:d4:2e:5d:ce:2a:dc:24:e1:77:
                    14:7f:e7:1d:f0:df:27:32:74:04:bb:b0:67:c3:38:
                    d1:81:0d:49:28:bb:29:df:a5:2d:31:a3:0e:e2:ec:
                    a8:b0:98:19:fc:50:61:4c:cb:fd:1b:a3:dd:05:30:
                    ab:6a:69:5c:96:95:f4:61:0f:de:03:0d:08:89:36:
                    98:71:67:4d:c7:df:a9:1e:bb:de:ec:a5:7f:26:4e:
                    a8:d4:f8:31:8a:81:93:8f:69:b9:ce:d4:0d:d3:6f:
                    00:96:57:e9:f6:da:e9:42:06:41:17:b1:11:91:da:
                    bc:1c:e1:c3:f6:12:da:d2:6b:e3:ef:38:06:44:71:
                    60:2c:a2:bb:60:82:3e:7c:5e:49:0a:f4:60:5b:85:
                    34:c1:72:2e:b9:f1:56:b0:60:0d:3b:e0:4e:88:f8:
                    3c:c8:19:c1:83:b9:1f:8d:4c:9e:3c:0c:a5:a6:14:
                    61:46:1b:af:17:30:b2:79:5a:ed:b9:1c:87:ae:dd:
                    33:6b:a0:29:a5:2c:b1:f6:50:c0:4e:4e:df:1f:ca:
                    0d:fe:9a:dd:bc:91:61:d2:5c:aa:ac:6a:2e:f3:8c:
                    f2:89:51:c7:d4:51:04:c5:10:39:75:31:42:cb:b5:
                    19:22:df:42:a1:d1:13:79:5d:ec:b8:70:a7:ce:4b:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:13:AE:B8:5E:84:C9:42:E1:6A:F4:6C:39:F7:8F:B9:C5:BA:C7:F6
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/323830303a3234303a3a2f33322d3634203d3e203132393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:45:9d:25:29:af:60:56:3d:dd:0c:1c:27:38:50:67:52:33:
         4c:45:d3:f9:c5:6c:53:97:74:eb:51:af:df:4a:03:4c:85:06:
         b5:03:13:70:93:fc:75:96:5a:5e:cd:51:f7:1a:78:18:7a:c8:
         82:f8:31:61:a0:1f:cd:f7:df:1e:1f:cf:44:46:ba:64:90:54:
         f6:b3:5d:a7:cf:9c:89:f3:22:ba:29:99:ec:0b:74:2c:1e:7a:
         c2:02:3c:0c:b1:fc:46:15:c3:85:db:d5:52:a7:35:31:37:d1:
         c1:e0:12:c3:fa:d5:a8:78:0a:b9:ea:c3:fa:e5:29:b4:aa:60:
         ba:51:d9:a8:e6:2c:ef:09:df:b2:ee:32:8c:e3:c9:fb:43:d6:
         29:3f:37:9e:a1:8e:ae:eb:fa:04:e7:aa:32:bf:3c:2b:32:e9:
         0c:11:18:78:5e:89:db:46:00:c2:29:d0:e2:3e:95:cb:c3:4b:
         3b:45:cd:8e:3b:92:f1:83:14:2d:2a:8a:10:96:79:23:6f:c3:
         92:d2:28:72:d8:de:22:8d:4f:fb:4a:b5:1b:1c:9a:55:97:b7:
         13:8a:ca:b1:54:05:2d:8d:3b:4b:34:ac:18:bf:9a:27:0b:18:
         d9:2e:c4:1a:21:a2:42:de:00:82:4d:f8:db:c0:e3:ba:7c:9b:
         31:dc:8b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 13:23:24 2024 by rpki-client on console-fra.rpki-client.org