Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3137392e36302e302e302f31392d3139203d3e203131383135.roa
File:                     3137392e36302e302e302f31392d3139203d3e203131383135.roa (raw, json)
Hash identifier:          qJBqjYH5ntqbOILvmWlYNArj7VYKX2ItNzElNyTZP0E=
Subject key identifier:   5B:33:69:BF:D6:2B:57:F8:B4:23:D4:71:DB:F0:72:BD:26:2D:48:EC
Certificate issuer:       /CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
Certificate serial:       611C9CE2286EA9EA25BB724AC15C9418EA4BB432
Authority key identifier: D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3137392e36302e302e302f31392d3139203d3e203131383135.roa
Signing time:             Tue 05 Mar 2024 18:22:35 +0000
ROA not before:           Tue 05 Mar 2024 18:17:35 +0000
ROA not after:            Tue 04 Mar 2025 18:22:35 +0000
asID:                     11815
IP address blocks:        179.60.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 17:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1c:9c:e2:28:6e:a9:ea:25:bb:72:4a:c1:5c:94:18:ea:4b:b4:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
        Validity
            Not Before: Mar  5 18:17:35 2024 GMT
            Not After : Mar  4 18:22:35 2025 GMT
        Subject: CN=5B3369BFD62B57F8B423D471DBF072BD262D48EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:30:ef:22:75:a3:92:d2:a4:41:63:77:83:a3:
                    2b:38:7c:d9:ec:9f:0b:a9:f5:8d:09:6a:bc:b9:7f:
                    ba:a4:38:83:be:dd:a2:48:c1:fc:45:09:3a:54:00:
                    96:9d:d1:5c:c0:49:5a:30:1d:15:4d:81:68:cb:2d:
                    58:a3:c3:61:c9:f6:b7:fd:f4:21:a6:53:1c:87:60:
                    6b:60:65:0c:99:06:e6:53:df:85:33:88:56:45:d2:
                    5c:f2:c5:b3:59:fb:6e:82:b6:7d:22:c2:26:d4:5c:
                    09:ed:00:42:a7:f4:dd:44:6a:64:7e:b4:d5:c7:9d:
                    ba:f5:76:32:35:29:98:9d:47:e4:82:9b:c2:9b:b7:
                    1c:ed:23:f9:ad:10:9f:b4:f9:c5:c6:6b:09:4c:96:
                    fd:85:aa:70:e9:c8:63:9d:6d:d1:a2:ea:b9:2c:b4:
                    c9:c1:04:d0:9e:2b:d3:1f:14:29:30:92:48:d8:c5:
                    df:ca:a8:f7:92:af:74:78:64:84:6a:28:40:f7:5d:
                    fe:bb:9e:13:f9:38:cd:e6:84:01:75:a9:d4:e7:59:
                    f4:35:93:28:8a:7a:29:bf:f1:98:77:08:af:e7:6f:
                    36:20:dc:0f:e7:2c:f6:96:3b:a2:36:47:cc:38:51:
                    98:21:b9:d5:20:ec:47:c5:71:35:15:e4:06:c2:f4:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:33:69:BF:D6:2B:57:F8:B4:23:D4:71:DB:F0:72:BD:26:2D:48:EC
            X509v3 Authority Key Identifier:
                keyid:D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3137392e36302e302e302f31392d3139203d3e203131383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:af:1a:7c:e2:c0:8d:27:a9:73:af:10:52:c8:46:76:33:38:
         85:b4:54:af:ad:c9:c9:a2:65:94:cf:77:a5:75:c1:5a:6b:4d:
         52:af:fe:95:28:b1:2d:3a:ff:92:f8:dd:e6:b5:45:95:11:08:
         65:fb:79:a4:89:a1:25:19:57:5b:d2:69:2e:a4:f2:9e:4a:1b:
         ae:d8:53:65:70:29:c6:4e:d4:79:28:da:1d:07:26:52:ec:af:
         45:f2:85:3b:b0:40:86:e0:5c:ba:ad:3c:fa:6f:f8:35:62:9b:
         02:66:5a:b4:f5:0c:cf:9d:ff:a5:30:aa:5e:e4:8d:83:c0:16:
         35:77:ed:c9:23:37:dc:04:1b:87:32:2a:72:bf:16:ed:a9:71:
         83:54:f4:97:de:be:e8:d8:7d:fb:14:84:03:8d:83:35:17:e4:
         0f:36:50:ae:a0:47:b4:3b:86:33:e7:31:8c:ba:2d:f6:74:ba:
         9d:01:f1:35:84:03:ee:b3:82:90:8f:9e:d8:aa:46:ee:f3:cc:
         ad:fe:f8:ea:dd:ef:b8:b9:de:20:94:40:d3:62:9e:88:c1:9d:
         23:fc:7c:35:85:77:2e:ff:83:d5:c3:83:ab:0c:8b:54:11:3a:
         83:5a:f7:75:e8:38:61:1b:d3:b2:1f:bf:b5:0d:1c:df:87:72:
         4d:bf:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 20:13:35 2024 by rpki-client on console-fra.rpki-client.org