Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/34352e3232342e3131362e302f32342d3234203d3e20323635383338.roa
File:                     34352e3232342e3131362e302f32342d3234203d3e20323635383338.roa (raw, json)
Hash identifier:          0+a9pJxqQ23Da3UkE0zbCYS8p6uxmgujYGs/D1dlXeE=
Subject key identifier:   6B:27:80:27:4F:6F:F8:DF:3B:BD:66:87:DC:9E:BF:EA:06:FD:D5:63
Certificate issuer:       /CN=3995180FA9FF9A6C4E022983421515BB8415A6D5
Certificate serial:       05FFB2AF40DCEEF50F6C14CBE4EE9D30B3AA3E6B
Authority key identifier: 39:95:18:0F:A9:FF:9A:6C:4E:02:29:83:42:15:15:BB:84:15:A6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/34352e3232342e3131362e302f32342d3234203d3e20323635383338.roa
Signing time:             Tue 05 Mar 2024 17:51:49 +0000
ROA not before:           Tue 05 Mar 2024 17:46:49 +0000
ROA not after:            Tue 04 Mar 2025 17:51:49 +0000
asID:                     265838
IP address blocks:        45.224.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ff:b2:af:40:dc:ee:f5:0f:6c:14:cb:e4:ee:9d:30:b3:aa:3e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3995180FA9FF9A6C4E022983421515BB8415A6D5
        Validity
            Not Before: Mar  5 17:46:49 2024 GMT
            Not After : Mar  4 17:51:49 2025 GMT
        Subject: CN=6B2780274F6FF8DF3BBD6687DC9EBFEA06FDD563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:2f:f2:39:3a:81:07:13:c0:fa:06:e9:28:
                    2c:3f:e8:85:0e:60:6e:bd:c9:53:75:20:f6:0b:fb:
                    ff:6b:25:d4:7d:fc:5c:8d:46:04:ae:b0:d8:7d:f9:
                    2f:e4:2a:98:f3:1d:4f:95:4c:61:d8:57:05:ed:e6:
                    b3:af:5e:68:f0:2d:b4:8c:fa:5f:7d:53:ca:81:6f:
                    dc:7c:5f:79:2c:61:72:a1:2a:0e:f7:51:26:90:78:
                    86:70:90:2f:29:d1:b7:02:95:31:6d:64:7f:b1:1b:
                    69:bd:fe:c1:b9:f7:1b:da:dc:42:a4:07:25:7a:38:
                    5f:3f:d3:06:9e:7b:da:a2:e7:d9:b6:e3:ff:5e:0a:
                    5b:ed:8c:7d:63:60:1f:64:ef:d1:39:6f:e0:b7:9f:
                    0c:0c:83:5c:a5:a3:da:64:ac:68:b7:79:17:63:7e:
                    ec:da:46:d5:2c:d8:7a:90:e7:ca:72:61:d9:f5:39:
                    84:31:08:6f:07:e8:2f:b5:29:0e:22:ab:f8:5b:09:
                    69:f0:26:38:54:5a:4c:58:f8:ac:80:1b:a4:cc:c8:
                    b2:2e:8c:52:2e:b4:ff:8e:7e:3d:3f:88:14:be:32:
                    7a:72:ac:69:1b:f9:ba:81:a7:e5:06:91:eb:b5:07:
                    71:1f:64:71:51:30:43:76:64:bc:85:18:3f:2e:bd:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:27:80:27:4F:6F:F8:DF:3B:BD:66:87:DC:9E:BF:EA:06:FD:D5:63
            X509v3 Authority Key Identifier:
                keyid:39:95:18:0F:A9:FF:9A:6C:4E:02:29:83:42:15:15:BB:84:15:A6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/34352e3232342e3131362e302f32342d3234203d3e20323635383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:36:7d:87:2a:1b:3c:de:a1:36:68:ea:1f:e4:20:7d:41:b9:
         bc:fb:bf:66:28:d5:d7:71:96:ab:c3:1a:59:b3:1e:d7:66:8b:
         a0:0f:87:36:38:36:af:e5:ad:3c:6b:a2:08:13:17:a7:43:0c:
         60:b0:0b:01:ff:7e:7b:f6:0c:89:18:f5:ce:18:56:36:a1:18:
         67:32:e5:c1:a0:62:a6:72:6b:63:83:47:88:6b:5e:1a:ca:19:
         0a:2f:72:d6:a4:3b:be:ca:d2:b3:d2:c4:c8:10:f4:23:d5:4a:
         99:06:91:27:d5:b7:28:46:af:12:5e:df:39:51:c2:7a:08:ec:
         7f:82:18:34:7e:d7:6c:7b:37:6a:9a:38:52:e2:e2:58:6f:96:
         34:22:ac:a2:ca:3d:e1:49:ba:66:03:6a:c2:0e:52:1c:5c:64:
         be:3e:55:a4:11:f5:4a:e2:42:9d:87:3e:ad:5b:92:17:70:72:
         a5:f0:95:f3:04:20:de:93:ec:07:fe:3e:b6:e0:f9:48:32:9c:
         e0:8d:f2:55:ff:d2:cb:5f:ac:a1:c4:41:32:d4:76:1d:4a:60:
         17:f0:c7:46:91:0a:f7:b7:10:29:a4:55:c7:bc:80:c5:fd:6c:
         9f:51:0e:60:ae:3e:c7:04:ce:91:68:52:14:95:27:e2:6a:95:
         90:9c:f3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org