Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/34352e3232342e3131392e302f32342d3234203d3e20323635383338.roa
File:                     34352e3232342e3131392e302f32342d3234203d3e20323635383338.roa (raw, json)
Hash identifier:          JOIqA3tXsmOiedbMV6jrKdVDyOkYphjGWHxaGkgP6B4=
Subject key identifier:   E7:3E:25:B4:46:59:12:7A:38:AD:0F:E1:69:5F:CE:68:9F:E8:9C:6B
Certificate issuer:       /CN=3995180FA9FF9A6C4E022983421515BB8415A6D5
Certificate serial:       17C4976AA9191FD1493B66388F8CBAFC0CD2AA8C
Authority key identifier: 39:95:18:0F:A9:FF:9A:6C:4E:02:29:83:42:15:15:BB:84:15:A6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/34352e3232342e3131392e302f32342d3234203d3e20323635383338.roa
Signing time:             Tue 05 Mar 2024 17:51:48 +0000
ROA not before:           Tue 05 Mar 2024 17:46:48 +0000
ROA not after:            Tue 04 Mar 2025 17:51:48 +0000
asID:                     265838
IP address blocks:        45.224.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c4:97:6a:a9:19:1f:d1:49:3b:66:38:8f:8c:ba:fc:0c:d2:aa:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3995180FA9FF9A6C4E022983421515BB8415A6D5
        Validity
            Not Before: Mar  5 17:46:48 2024 GMT
            Not After : Mar  4 17:51:48 2025 GMT
        Subject: CN=E73E25B44659127A38AD0FE1695FCE689FE89C6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:3a:56:9d:ee:0c:2f:1c:e8:22:d8:23:7c:
                    7e:33:91:f3:96:82:72:86:4c:c5:7e:c8:78:23:b5:
                    5d:e6:1e:f4:d6:82:bc:6c:b6:26:c0:e0:4b:63:59:
                    e0:67:81:d3:56:1b:d6:a2:2a:c1:0f:bd:13:76:dc:
                    22:67:c9:08:01:1b:5e:3a:11:50:b6:5a:35:48:75:
                    bd:fd:6c:cc:58:6a:64:14:d3:e3:57:1f:d7:40:f5:
                    fa:3f:b7:9f:60:91:29:94:4b:07:3c:fc:8f:07:12:
                    cd:42:65:74:9a:ac:ae:e8:0d:ba:cb:54:3e:00:4b:
                    ef:fc:66:f6:dd:a9:89:b9:54:40:5b:40:ec:be:08:
                    f8:f9:70:ce:3f:67:6c:d4:f7:67:e5:e1:79:c0:5a:
                    60:b6:a8:a0:c4:cf:8d:67:41:9c:04:f3:21:bd:72:
                    29:7c:38:e3:9e:b6:57:9e:8b:75:56:b3:33:68:8c:
                    6c:ff:1f:84:08:e1:51:1b:ad:7b:5e:ad:4d:13:29:
                    e4:d5:9b:5a:f4:57:7a:41:b1:eb:24:cd:4c:77:39:
                    27:fa:be:b1:3e:52:f3:f8:74:4e:6c:51:07:03:ff:
                    41:2d:0b:34:d3:a4:4d:6c:d0:a6:f4:8c:a9:fa:23:
                    7e:93:b7:c2:c2:58:af:47:40:9c:02:c7:bb:54:a2:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3E:25:B4:46:59:12:7A:38:AD:0F:E1:69:5F:CE:68:9F:E8:9C:6B
            X509v3 Authority Key Identifier:
                keyid:39:95:18:0F:A9:FF:9A:6C:4E:02:29:83:42:15:15:BB:84:15:A6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/34352e3232342e3131392e302f32342d3234203d3e20323635383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:47:cf:f9:33:41:4b:6c:9c:7e:67:3c:4c:80:e7:63:f4:f8:
         7a:1e:14:57:e2:55:88:bc:66:bb:f9:71:13:80:3f:b8:04:ff:
         7e:0a:5a:b5:c4:c6:54:01:06:04:43:73:3c:c1:51:7e:e6:0d:
         80:67:ef:c6:30:50:1f:a0:52:3d:a3:69:de:5d:27:04:ea:77:
         34:06:a1:93:76:fe:6f:32:ca:c7:18:21:e7:ca:bb:cc:92:72:
         b7:6d:85:69:be:b4:1b:dd:33:19:df:77:56:c2:48:e0:ba:44:
         05:33:a7:0a:b8:2f:7e:0a:45:f9:d7:0c:be:43:8e:cf:01:f0:
         c3:7e:13:be:ae:c8:64:69:b9:ce:78:ea:d8:73:48:47:f0:ba:
         77:1c:20:12:69:26:63:24:89:5e:6c:c4:7c:83:71:69:de:76:
         ce:5e:cc:fe:88:66:51:d7:3b:93:6c:26:0f:b5:06:66:a8:33:
         f1:73:b3:76:a2:43:b5:c0:d7:47:97:09:d7:3e:18:07:d1:44:
         ac:16:0a:b3:3e:eb:15:d3:94:90:f0:00:00:f3:ef:e0:44:f9:
         75:58:0e:40:fa:a6:45:b3:ad:8e:d0:9c:81:26:19:f9:4e:28:
         41:96:99:89:45:09:77:82:05:82:d1:ed:3e:e1:88:38:bb:63:
         ad:2e:bd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org