Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/3137372e37332e3135322e302f32342d3330203d3e20323731383730.roa
File:                     3137372e37332e3135322e302f32342d3330203d3e20323731383730.roa (raw, json)
Hash identifier:          ZiNLRBPep4bEZJVdteCTmmJ/h49ezJNb6UvtdUd9PUs=
Subject key identifier:   94:FD:23:12:BE:6A:B7:0E:89:94:E2:B5:CE:9C:E7:DD:CA:AC:F4:00
Certificate issuer:       /CN=1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8
Certificate serial:       4A7852D9A82235FA66C79F710C3C090D1CEF4DC5
Authority key identifier: 1E:C7:B3:1A:1A:B1:BB:CD:34:3A:42:B4:F1:AC:4D:6E:DB:3B:3D:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/3137372e37332e3135322e302f32342d3330203d3e20323731383730.roa
Signing time:             Tue 05 Mar 2024 18:21:16 +0000
ROA not before:           Tue 05 Mar 2024 18:16:16 +0000
ROA not after:            Tue 04 Mar 2025 18:21:16 +0000
asID:                     271870
IP address blocks:        177.73.152.0/24 maxlen: 30

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:78:52:d9:a8:22:35:fa:66:c7:9f:71:0c:3c:09:0d:1c:ef:4d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8
        Validity
            Not Before: Mar  5 18:16:16 2024 GMT
            Not After : Mar  4 18:21:16 2025 GMT
        Subject: CN=94FD2312BE6AB70E8994E2B5CE9CE7DDCAACF400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:5b:a6:7f:47:5d:2e:b9:34:f8:cd:c4:b7:
                    d2:4b:b2:05:ba:8d:46:11:11:b0:83:3b:38:4f:2f:
                    5b:55:f4:19:92:29:b8:bc:56:3d:83:a6:cd:56:d5:
                    5d:d4:71:c7:2a:c9:1d:43:1d:40:59:3a:2f:cc:94:
                    fa:da:5f:e7:a3:0c:71:0e:e8:9f:f6:71:94:21:93:
                    29:1e:93:5d:d6:92:da:80:88:e6:44:53:4e:61:e6:
                    52:06:de:64:82:cc:78:49:22:00:6a:c0:48:8d:b5:
                    c5:76:33:33:84:1d:db:c4:72:b1:41:28:76:1e:c4:
                    ef:dc:58:ce:83:39:26:a6:98:9d:2f:f1:bf:a7:3a:
                    2d:7b:2a:39:33:b9:9f:50:15:a9:20:1a:a5:51:0f:
                    9c:49:4f:d9:4a:f5:76:54:3d:7b:eb:c7:55:30:e6:
                    6e:0a:ba:1e:df:88:e6:77:7a:e9:21:a4:a6:db:eb:
                    9f:20:64:0c:6b:1d:d0:d6:91:3f:30:97:86:15:6c:
                    86:45:1b:27:72:63:ca:36:6a:9d:82:f2:04:f6:ee:
                    19:a8:a2:03:0e:0c:3b:fc:59:ef:e9:da:da:7a:ea:
                    88:e1:f6:39:25:a1:fa:03:56:94:83:3a:40:f7:17:
                    4f:4a:a6:e1:a6:e4:06:c3:bf:f5:b7:e2:52:e7:e0:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FD:23:12:BE:6A:B7:0E:89:94:E2:B5:CE:9C:E7:DD:CA:AC:F4:00
            X509v3 Authority Key Identifier:
                keyid:1E:C7:B3:1A:1A:B1:BB:CD:34:3A:42:B4:F1:AC:4D:6E:DB:3B:3D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/3137372e37332e3135322e302f32342d3330203d3e20323731383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:05:95:a0:80:3c:23:9a:de:f6:dd:ee:db:47:42:df:e1:8d:
         7b:69:44:cd:dd:dc:ee:dc:23:0a:0a:0d:5d:38:11:a9:eb:cc:
         71:bb:e3:33:03:91:6c:e7:e6:c4:e8:20:f6:e4:df:80:3a:c2:
         a9:99:6f:58:97:6b:d4:58:25:5a:7a:84:f9:76:33:47:35:80:
         2a:3b:bb:e8:c4:f7:af:51:f3:30:49:da:ec:ac:b4:c0:86:a2:
         d9:9b:42:4e:f7:6e:bf:c3:bd:8d:24:67:6c:4d:ef:89:8d:e2:
         97:bc:34:62:85:0e:b6:b3:52:e9:f7:bb:60:5c:68:10:cd:8c:
         1f:bb:e8:fe:8e:5c:23:d1:69:f6:18:bb:6c:f3:05:a6:74:c9:
         24:3b:1a:33:f2:c8:16:d9:20:ba:45:db:53:6a:7f:fb:20:06:
         f1:62:de:64:cd:a5:20:b4:ff:04:fb:ff:0b:c6:86:39:7a:ef:
         b4:5f:3d:3f:f9:65:4f:3b:f9:44:17:75:dc:fe:b9:e6:66:ad:
         0f:4e:4a:46:f4:24:6d:5d:47:29:dd:64:84:d5:22:38:2e:40:
         a4:df:a9:bb:5c:bc:75:e0:bd:0c:b7:ca:1b:95:0f:54:ad:09:
         9c:59:86:f2:df:78:60:b2:76:18:94:cc:2d:16:5d:a0:bb:f7:
         c6:94:11:88
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSnhS2agiNfpmx59xDDwJDRzvTcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVDN0IzMUExQUIxQkJDRDM0M0E0MkI0RjFBQzRENkVE
QjNCM0RDODAeFw0yNDAzMDUxODE2MTZaFw0yNTAzMDQxODIxMTZaMDMxMTAvBgNV
BAMTKDk0RkQyMzEyQkU2QUI3MEU4OTk0RTJCNUNFOUNFN0REQ0FBQ0Y0MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCVumf0ddLrk0+M3Et9JLsgW6
jUYREbCDOzhPL1tV9BmSKbi8Vj2Dps1W1V3UcccqyR1DHUBZOi/MlPraX+ejDHEO
6J/2cZQhkykek13WktqAiOZEU05h5lIG3mSCzHhJIgBqwEiNtcV2MzOEHdvEcrFB
KHYexO/cWM6DOSammJ0v8b+nOi17KjkzuZ9QFakgGqVRD5xJT9lK9XZUPXvrx1Uw
5m4Kuh7fiOZ3eukhpKbb658gZAxrHdDWkT8wl4YVbIZFGydyY8o2ap2C8gT27hmo
ogMODDv8We/p2tp66ojh9jklofoDVpSDOkD3F09KpuGm5AbDv/W34lLn4PERAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlP0jEr5qtw6JlOK1zpzn3cqs9AAwHwYDVR0j
BBgwFoAUHsezGhqxu800OkK08axNbts7PcgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMjY0MDk5NERBRDA4MjNGNDZDMkY1RTFCNzMxQzA2QUE3
ODBFNjM2MTM2QUZBNDAyQjYzMTk5RUMxMzY0MzY0LzAvMUVDN0IzMUExQUIxQkJD
RDM0M0E0MkI0RjFBQzRENkVEQjNCM0RDOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRUM3QjMxQTFBQjFCQkNEMzQz
QTQyQjRGMUFDNEQ2RURCM0IzREM4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjI2NDA5OTREQUQwODIzRjQ2QzJGNUUxQjczMUMwNkFBNzgwRTYzNjEz
NkFGQTQwMkI2MzE5OUVDMTM2NDM2NC8wLzMxMzczNzJlMzczMzJlMzEzNTMyMmUz
MDJmMzIzNDJkMzMzMDIwM2QzZTIwMzIzNzMxMzgzNzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsUmY
MA0GCSqGSIb3DQEBCwUAA4IBAQBtBZWggDwjmt723e7bR0Lf4Y17aUTN3dzu3CMK
Cg1dOBGp68xxu+MzA5Fs5+bE6CD25N+AOsKpmW9Yl2vUWCVaeoT5djNHNYAqO7vo
xPevUfMwSdrsrLTAhqLZm0JO926/w72NJGdsTe+JjeKXvDRihQ62s1Lp97tgXGgQ
zYwfu+j+jlwj0Wn2GLts8wWmdMkkOxoz8sgW2SC6RdtTan/7IAbxYt5kzaUgtP8E
+/8LxoY5eu+0Xz0/+WVPO/lEF3Xc/rnmZq0PTkpG9CRtXUcp3WSE1SI4LkCk36m7
XLx14L0Mt8oblQ9UrQmcWYby33hgsnYYlMwtFl2gu/fGlBGI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org