Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e39312e302f32342d3234203d3e20323634383434.roa
File:                     3137302e3234342e39312e302f32342d3234203d3e20323634383434.roa (raw, json)
Hash identifier:          s8EIqeTND3WafhXWQf6V17ME/blBruBsD2UJ9USg5bc=
Subject key identifier:   E1:E7:93:1A:D5:E2:17:A1:72:8B:95:97:79:DE:44:E7:FF:93:26:34
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       76198D88538271C4158C682E8848557A927FFFE4
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e39312e302f32342d3234203d3e20323634383434.roa
Signing time:             Tue 05 Mar 2024 18:23:34 +0000
ROA not before:           Tue 05 Mar 2024 18:18:34 +0000
ROA not after:            Tue 04 Mar 2025 18:23:34 +0000
asID:                     264844
IP address blocks:        170.244.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:19:8d:88:53:82:71:c4:15:8c:68:2e:88:48:55:7a:92:7f:ff:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Mar  5 18:18:34 2024 GMT
            Not After : Mar  4 18:23:34 2025 GMT
        Subject: CN=E1E7931AD5E217A1728B959779DE44E7FF932634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:3f:cc:05:45:80:7b:9a:c4:20:67:fe:4b:
                    db:fd:1e:5b:97:00:36:71:33:5d:2f:e6:8a:96:2e:
                    3d:18:73:ed:ec:0e:db:41:ba:d9:b7:dc:a2:05:5b:
                    78:42:94:f4:d1:fa:4f:51:65:66:9c:d8:c8:c0:4c:
                    40:bd:3a:14:71:8a:b0:98:c3:d7:dc:e7:4c:1b:cb:
                    30:88:39:ee:63:5e:72:be:dd:fa:ab:a3:11:11:68:
                    b6:7c:85:d6:0b:65:ee:90:90:87:df:fb:cf:af:bc:
                    3f:c4:b6:5a:7c:32:32:11:20:64:c8:16:0e:b4:c3:
                    8b:3c:48:ad:f5:a8:69:34:5f:7b:46:99:2f:0e:5f:
                    08:49:af:30:be:df:ed:da:45:0e:c7:74:a4:11:f8:
                    4c:75:52:a0:bb:97:cb:97:d3:d8:00:b8:d0:98:66:
                    ee:d3:87:82:37:d0:ff:6e:fc:53:a7:1d:3c:79:dd:
                    2a:9c:1a:ca:13:4f:f0:57:25:a7:4b:be:5a:c2:11:
                    07:7e:0d:45:4a:8f:a0:1c:e3:14:cd:84:5a:44:8b:
                    f7:91:ce:bf:7f:d3:e8:ae:6a:bb:7e:3a:49:cb:a6:
                    dc:dd:90:b1:49:fd:40:6d:e8:4e:c1:6b:37:6e:40:
                    72:2d:7e:bd:70:0b:28:2a:47:54:c0:05:eb:ef:82:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E7:93:1A:D5:E2:17:A1:72:8B:95:97:79:DE:44:E7:FF:93:26:34
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e39312e302f32342d3234203d3e20323634383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:d8:a8:cc:d4:d9:bf:37:7b:a6:6e:d1:1b:a7:9c:62:40:b6:
         12:12:5b:d7:0a:14:3a:da:8e:f4:9f:7c:9e:a9:63:a2:19:05:
         11:5b:50:4c:28:2f:f9:2e:bb:38:c3:a1:03:3c:fd:19:26:76:
         c4:cb:20:d1:8f:3c:29:cc:c4:f5:5b:cf:74:c7:2c:0c:28:3d:
         12:be:f6:c7:c6:b8:2a:ec:92:b4:63:b0:2d:9d:78:4a:2e:04:
         f0:e7:86:e8:77:70:8d:46:a9:07:48:d3:98:17:42:e1:d0:87:
         b5:14:3a:66:da:af:5a:9f:7b:0d:80:dd:93:fd:1f:4d:b7:44:
         d4:67:ae:db:6e:0a:1c:12:95:a8:2f:a9:a7:6f:88:6e:89:63:
         7c:dc:c4:d2:31:b9:ca:11:ab:4e:0b:83:4a:fc:36:f5:20:64:
         3f:a2:83:57:5f:c9:87:4e:6f:e4:46:60:c2:41:d4:95:1b:1d:
         32:c5:63:1f:d2:8f:20:d5:d7:e1:15:fb:98:95:ed:7a:94:02:
         6d:c5:47:44:44:ee:4c:9e:fe:91:d8:83:7f:e7:88:e3:85:e3:
         4b:65:b6:60:bd:de:62:08:f2:88:30:ad:0c:45:6a:f0:fb:72:
         8e:97:01:27:c0:e8:2a:a0:2c:0e:97:73:33:5d:97:07:43:7c:
         44:43:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org