Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39342e302f32342d3234203d3e20323632323632.roa
File:                     34352e3136362e39342e302f32342d3234203d3e20323632323632.roa (raw, json)
Hash identifier:          qezdPYaBe8LCzduY3hkJL8AmXNwhTr/5O3uFr4ieWds=
Subject key identifier:   63:76:F3:9E:64:30:71:7A:82:98:8E:0C:2E:2E:68:60:29:54:5C:E1
Certificate issuer:       /CN=303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB
Certificate serial:       4C6A11C407143B18293E2C61932D9D15C9AFC286
Authority key identifier: 30:3D:DB:5D:60:F7:11:45:08:9E:EA:3B:03:DB:CD:CF:BC:0D:E3:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39342e302f32342d3234203d3e20323632323632.roa
Signing time:             Tue 05 Mar 2024 18:02:14 +0000
ROA not before:           Tue 05 Mar 2024 17:57:14 +0000
ROA not after:            Tue 04 Mar 2025 18:02:14 +0000
asID:                     262262
IP address blocks:        45.166.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6a:11:c4:07:14:3b:18:29:3e:2c:61:93:2d:9d:15:c9:af:c2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB
        Validity
            Not Before: Mar  5 17:57:14 2024 GMT
            Not After : Mar  4 18:02:14 2025 GMT
        Subject: CN=6376F39E6430717A82988E0C2E2E686029545CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:e3:b4:4c:61:eb:8c:e5:eb:5e:1f:72:88:
                    54:00:df:5d:0a:f9:6e:98:26:99:f3:23:a7:2d:e4:
                    51:50:65:6f:9c:d7:8f:e0:d4:15:59:c1:a6:fd:d1:
                    4c:92:a8:02:f4:b2:39:c5:7e:97:33:74:44:e3:af:
                    95:73:e5:66:46:2e:3c:6c:6a:87:77:4e:84:bb:f2:
                    8a:77:a6:e5:58:9a:8b:7a:c6:1f:99:1c:14:d6:f2:
                    51:a6:ce:55:3f:e8:61:d6:5f:ca:cb:b3:62:50:d3:
                    9e:76:2f:be:69:9f:68:c0:bb:a2:49:4a:ea:c4:31:
                    d1:48:11:f7:61:8c:ec:c4:6a:02:b4:9b:81:b9:4a:
                    e3:86:b9:70:35:31:70:44:14:73:04:a5:b0:1f:5f:
                    34:a1:b1:1c:ee:18:53:4a:32:a0:14:6a:2c:c7:81:
                    f7:dc:7b:3d:d2:40:0f:cd:82:13:a4:c1:3e:f7:89:
                    9c:e0:86:6e:11:1e:5f:c9:4a:24:31:35:41:9a:d3:
                    2b:24:b5:8b:02:fc:bb:f4:4a:3e:92:db:a2:c9:34:
                    da:55:49:b2:72:47:c3:ed:2f:7c:74:a3:d2:05:9d:
                    81:81:d4:5c:2c:a1:71:af:ca:d1:90:7a:11:a0:7f:
                    89:17:b1:1f:f7:92:c4:a9:e5:62:9b:cf:ff:35:3e:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:76:F3:9E:64:30:71:7A:82:98:8E:0C:2E:2E:68:60:29:54:5C:E1
            X509v3 Authority Key Identifier:
                keyid:30:3D:DB:5D:60:F7:11:45:08:9E:EA:3B:03:DB:CD:CF:BC:0D:E3:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39342e302f32342d3234203d3e20323632323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:dd:1b:d8:88:9a:30:fd:8a:50:81:9a:fa:d9:7b:cf:22:ee:
         32:6a:c5:e1:ad:02:ed:0c:92:b1:71:cb:20:28:05:b4:59:53:
         01:a9:49:13:c7:89:7a:50:e4:3b:3b:e3:8c:c0:5d:d0:ad:d6:
         03:b2:85:40:c6:f9:e9:27:5b:d4:2a:b1:b4:f8:22:f4:4b:e1:
         b0:08:01:df:de:29:e6:0f:e6:97:e1:71:eb:9c:d1:36:59:16:
         b1:27:10:24:c0:d7:5c:7b:88:f9:e9:9a:1f:97:b0:e1:a9:bb:
         5e:1c:49:68:83:b5:e1:fd:22:1b:ed:f7:3c:b4:3b:33:5d:5b:
         76:c5:a4:db:dc:50:bd:f7:9d:fe:ac:ae:bb:b3:a9:4a:08:e8:
         de:63:ce:9a:72:1d:84:0e:89:2f:4c:50:f2:d0:2b:55:a2:dc:
         29:33:2d:3d:f0:3b:b8:4e:05:b4:7c:3a:78:b1:fd:0b:e3:0d:
         b9:9e:1a:f5:05:8d:2a:59:af:25:d5:94:51:c8:7e:de:7a:cc:
         c1:a3:9c:cf:b1:3c:0e:77:27:dd:ae:82:5e:7e:ae:39:ed:5e:
         06:66:06:de:f5:62:17:fa:aa:4d:91:21:8b:e4:5a:34:4d:e0:
         e2:4b:81:47:89:17:c0:60:98:4d:7b:e8:f9:af:92:13:b8:ba:
         67:1d:19:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 18:52:43 2024 by rpki-client on console-fra.rpki-client.org