Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e3132382f32352d3235203d3e20323634373430.roa
File:                     3137302e3233392e3138302e3132382f32352d3235203d3e20323634373430.roa (raw, json)
Hash identifier:          m9m66Ot6o4eMUSYKu4i31GlzQyTCH0iBTvY9RkrXwvs=
Subject key identifier:   3A:42:36:EB:9B:EF:8B:03:32:34:0F:61:19:3B:CE:E1:3B:B7:1D:F4
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       362A77928E4A1876918C512960429CFB53D2EEEB
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e3132382f32352d3235203d3e20323634373430.roa
Signing time:             Fri 30 Aug 2024 13:30:02 +0000
ROA not before:           Fri 30 Aug 2024 13:25:02 +0000
ROA not after:            Fri 29 Aug 2025 13:30:02 +0000
asID:                     264740
IP address blocks:        170.239.180.128/25 maxlen: 25

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2a:77:92:8e:4a:18:76:91:8c:51:29:60:42:9c:fb:53:d2:ee:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Aug 30 13:25:02 2024 GMT
            Not After : Aug 29 13:30:02 2025 GMT
        Subject: CN=3A4236EB9BEF8B0332340F61193BCEE13BB71DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dd:ca:89:f3:1c:89:5d:18:01:cd:92:69:40:
                    3e:71:be:05:b5:94:a2:ac:f8:51:59:48:c7:9e:0a:
                    0b:3e:f7:98:c0:5b:ce:11:4f:65:93:f0:ea:32:7a:
                    74:08:0c:4d:54:90:18:d4:89:24:55:c2:e3:bb:45:
                    e0:d4:b3:d4:37:58:18:26:c9:7d:a9:1a:08:e3:81:
                    b4:13:96:70:b4:1e:a6:d9:19:c3:30:ff:08:43:0a:
                    88:12:b2:86:c8:be:02:5f:ca:fa:93:da:ab:d2:04:
                    ae:87:7e:5b:28:4b:4f:fe:27:53:0f:c4:a9:9c:ef:
                    4d:60:ae:b1:72:56:f2:b8:c5:38:f6:5f:5d:94:67:
                    d2:21:5b:8f:ca:10:54:75:3a:3c:56:dd:1e:66:ef:
                    b1:e9:f7:de:1f:7c:96:c9:d4:be:3a:4b:66:15:98:
                    73:ac:51:a3:2d:4e:a4:c1:cc:32:26:36:26:00:fb:
                    c3:b9:55:34:89:5c:99:89:a4:24:76:e6:f3:72:27:
                    35:52:31:06:81:55:6e:3a:0a:16:e4:23:a9:64:93:
                    c3:68:d2:5a:86:3d:a5:03:05:fd:c9:c5:e1:8e:83:
                    be:bc:f4:49:0f:01:d0:91:f9:71:3f:54:5b:fa:bb:
                    78:fa:2f:5d:c8:76:37:48:fb:30:dc:f9:4d:1d:85:
                    1e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:42:36:EB:9B:EF:8B:03:32:34:0F:61:19:3B:CE:E1:3B:B7:1D:F4
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e3132382f32352d3235203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.180.128/25

    Signature Algorithm: sha256WithRSAEncryption
         48:cf:10:08:88:ca:66:dc:db:14:94:4e:88:67:55:dc:42:26:
         58:63:8e:53:51:41:e8:77:9f:b0:a8:e6:c3:0a:aa:22:25:62:
         d8:37:64:45:75:69:42:7e:97:45:f7:60:fc:07:29:3c:72:65:
         85:ee:84:03:20:f8:20:78:35:5e:32:50:8e:d9:7b:fe:1a:10:
         a8:01:36:80:c7:d2:c3:e1:bf:d7:d9:5c:b8:41:46:2b:a1:a6:
         be:75:ce:27:47:40:08:67:22:40:1b:81:0c:32:cc:a5:22:8c:
         c8:ec:25:f2:c8:f0:7a:1b:fd:a5:31:36:ab:4f:3e:c3:06:3f:
         79:33:d8:fb:5e:d2:70:c3:50:c5:e3:f5:4f:b3:54:a0:b2:7e:
         3a:76:0b:44:e1:82:45:18:07:9f:bc:14:9d:28:68:a9:3e:03:
         90:90:04:78:a5:d7:fb:16:63:8f:a0:96:6f:f2:c2:5b:99:2d:
         e5:a6:f8:14:2e:9e:09:45:f7:b1:4f:23:03:d2:bd:53:bd:14:
         8c:52:48:21:b2:6a:b2:8c:4d:da:e9:8b:16:6f:fb:9c:e8:29:
         d4:26:0f:4d:24:a4:eb:47:48:b9:36:f3:5e:75:dd:f2:88:4f:
         b2:fb:90:07:57:20:ff:39:de:cd:e8:2c:b3:05:07:6f:bb:67:
         62:91:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:04:57 2024 by rpki-client on console-ams.rpki-client.org