Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32332d3234203d3e203634313233.roa
File:                     34352e3233352e39382e302f32332d3234203d3e203634313233.roa (raw, json)
Hash identifier:          fnqtqPYM/BKw1nDi967rXdRu33tMJda/Pqtg6W8P5E4=
Subject key identifier:   C0:69:EC:D8:E0:5A:E4:4B:C8:3A:4F:D9:45:94:9A:B9:04:6D:78:E5
Certificate issuer:       /CN=E99008F3C333627E9F8C6939370696F7049C22EB
Certificate serial:       5778E8B6B92ECFFF0793BF1DB98DF772050AE6AD
Authority key identifier: E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32332d3234203d3e203634313233.roa
Signing time:             Wed 02 Oct 2024 03:45:00 +0000
ROA not before:           Wed 02 Oct 2024 03:40:00 +0000
ROA not after:            Wed 01 Oct 2025 03:45:00 +0000
asID:                     64123
IP address blocks:        45.235.98.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Oct 2024 16:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:78:e8:b6:b9:2e:cf:ff:07:93:bf:1d:b9:8d:f7:72:05:0a:e6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E99008F3C333627E9F8C6939370696F7049C22EB
        Validity
            Not Before: Oct  2 03:40:00 2024 GMT
            Not After : Oct  1 03:45:00 2025 GMT
        Subject: CN=C069ECD8E05AE44BC83A4FD945949AB9046D78E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7c:01:75:d7:73:df:ce:f0:e1:b7:6b:b8:80:
                    e0:93:91:49:ca:d2:48:1c:51:83:1e:7a:30:d5:f0:
                    bf:fd:c6:34:2c:f9:03:c6:2c:0e:97:1a:b1:18:f2:
                    fe:22:fb:cb:a5:c4:26:af:32:d9:c6:34:90:b1:41:
                    ab:d7:ec:0e:97:0b:51:cb:35:05:3d:a4:4a:7f:1c:
                    c9:c1:a2:88:eb:86:7a:f8:a9:e4:1e:65:52:b9:45:
                    b0:ce:d0:0c:06:6e:d6:5d:86:2b:cb:82:03:d5:b5:
                    27:96:68:33:e5:de:f7:9e:62:79:66:1c:bf:2e:cc:
                    4f:4b:f0:d6:b8:50:12:30:8c:e3:fa:a4:b7:98:ae:
                    16:df:55:bd:14:ba:42:31:75:e0:4e:2f:55:24:6b:
                    b0:77:bc:1c:b7:e7:69:fb:6b:b5:03:54:5f:69:32:
                    45:7c:48:37:47:d4:5f:7c:29:94:35:88:8f:87:83:
                    2e:5e:31:2e:16:7f:69:e8:45:c0:27:31:0a:a1:b4:
                    1f:90:d6:ca:e0:7f:28:29:77:d0:b9:8f:79:ef:0f:
                    0e:fb:47:c3:9a:3d:78:23:7d:a3:5d:2c:be:36:68:
                    45:17:9b:46:13:f6:e2:f1:92:58:ec:06:2e:a5:22:
                    52:56:5f:d6:5f:83:7c:85:20:31:97:d6:ce:17:f9:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:69:EC:D8:E0:5A:E4:4B:C8:3A:4F:D9:45:94:9A:B9:04:6D:78:E5
            X509v3 Authority Key Identifier:
                keyid:E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32332d3234203d3e203634313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:58:44:b4:f9:95:11:38:8d:b5:d7:35:c3:f9:26:74:c3:15:
         40:5a:68:91:20:dd:9f:c3:d9:09:7b:9a:20:c7:c2:26:0a:ea:
         a2:16:dd:4d:5f:a0:85:9f:19:c8:03:61:25:6a:11:0f:07:80:
         8f:ba:89:ec:53:72:54:49:49:bf:b2:6a:79:17:35:e6:d0:8f:
         da:db:59:cb:f7:a6:08:88:ac:d0:db:ca:fe:70:54:cc:6c:a8:
         9f:0a:4f:02:45:32:ab:59:78:ba:60:4f:12:f4:eb:2a:a4:8b:
         3c:6f:96:00:13:b5:73:84:03:72:d4:bf:2d:3e:a4:5b:61:02:
         d6:6a:f6:50:7b:37:d5:f4:c8:7a:15:15:7f:4e:ee:be:f9:88:
         58:13:37:25:25:0a:c5:df:da:01:08:56:77:06:59:c8:0c:31:
         04:ce:42:01:b7:8d:8b:19:f3:64:03:f7:b4:36:ba:b9:a0:63:
         f8:19:a1:ad:f0:6a:ec:32:96:65:ab:a6:d1:67:70:77:12:41:
         1a:44:ae:68:48:75:be:61:e4:b2:d2:07:84:77:7e:76:86:1d:
         2b:88:9f:fe:d1:3b:4a:e1:c8:c4:ec:89:e9:d7:2e:bc:c1:b7:
         52:6e:ca:4c:99:ce:6f:ef:0e:ee:45:fe:e0:76:28:67:3f:b2:
         c4:c9:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 19:23:17 2024 by rpki-client on console-fra.rpki-client.org