Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e302f32332d3233203d3e20323634373430.roa
File:                     3137302e3233392e3138322e302f32332d3233203d3e20323634373430.roa (raw, json)
Hash identifier:          01iOv+M+ea9Ui8bRY7NERsBmQ9JWqTJVrgGB5ruWw1U=
Subject key identifier:   A4:8A:45:34:AD:3F:96:43:68:E6:29:6A:B0:E5:04:A3:BE:3E:91:08
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       3920039DD5A8B69790C5104248BB1953E6986E73
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e302f32332d3233203d3e20323634373430.roa
Signing time:             Fri 30 Aug 2024 13:30:00 +0000
ROA not before:           Fri 30 Aug 2024 13:25:00 +0000
ROA not after:            Fri 29 Aug 2025 13:30:00 +0000
asID:                     264740
IP address blocks:        170.239.182.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:20:03:9d:d5:a8:b6:97:90:c5:10:42:48:bb:19:53:e6:98:6e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Aug 30 13:25:00 2024 GMT
            Not After : Aug 29 13:30:00 2025 GMT
        Subject: CN=A48A4534AD3F964368E6296AB0E504A3BE3E9108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:13:83:18:35:74:67:73:07:d3:28:1a:63:
                    f4:bf:01:b8:38:26:40:67:be:c1:89:e8:f9:3c:bd:
                    0c:e2:9b:36:09:55:4c:4c:01:96:1b:b9:a0:64:80:
                    31:49:e0:5d:13:ce:27:38:85:5b:dc:4d:45:f7:26:
                    38:af:96:d6:b0:89:d3:ac:1c:ff:b8:2b:9d:3c:f8:
                    f7:7c:da:70:b2:12:2d:f6:0a:56:39:54:6d:fb:0b:
                    d9:04:0e:26:a7:78:03:61:d7:9c:05:dd:c6:ec:ac:
                    a4:f7:a5:e6:4c:34:1a:b8:9c:50:1c:e4:bb:21:55:
                    5a:99:f8:e3:e1:05:f0:e0:13:ec:97:0f:ae:8c:31:
                    90:a4:0f:b4:a4:fe:db:d6:9f:e9:c0:ca:d7:b1:db:
                    4a:a8:db:9e:8f:50:e0:0f:a1:bc:b1:41:8c:d7:81:
                    5d:96:0c:a5:5a:69:d6:97:d7:82:b5:2e:7c:d4:83:
                    fd:68:e4:3a:53:f4:c7:b3:9f:8a:87:2c:37:16:90:
                    11:4d:40:b9:24:bf:ad:9e:fc:13:fc:cb:00:d7:81:
                    a3:d5:a0:41:38:9e:37:4f:3d:fd:8b:5c:22:24:8d:
                    cd:93:d2:d7:95:9f:f0:54:c6:36:21:5c:05:ab:31:
                    67:c9:83:c4:65:2f:36:f7:f7:f2:76:08:9e:ff:32:
                    ee:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8A:45:34:AD:3F:96:43:68:E6:29:6A:B0:E5:04:A3:BE:3E:91:08
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e302f32332d3233203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:3b:61:be:1d:2b:fd:5d:09:7f:3e:9b:47:ef:81:b5:0a:5a:
         89:4e:53:24:71:a1:7d:08:30:09:66:c8:09:d8:b2:a0:3e:36:
         c2:c3:11:15:67:92:3f:fa:94:86:83:5d:f2:90:c4:e4:cb:5d:
         86:05:3d:89:2e:9a:6b:36:c4:79:28:35:cf:00:bf:96:05:e2:
         fa:66:37:68:d9:83:a4:e8:fa:6c:02:fd:28:85:d4:ff:1b:08:
         85:84:76:c7:30:6b:cd:0e:1d:16:e8:e8:df:59:73:8b:3c:d5:
         e2:76:63:bf:ed:71:0e:e2:24:86:4c:93:8b:d0:58:d3:b0:ef:
         9f:3d:1a:46:6b:e2:56:ab:fd:a7:56:2d:c9:5a:e0:d1:2c:b4:
         44:18:17:ec:38:4e:be:21:b0:f7:74:f2:ab:04:48:d6:40:11:
         ef:1b:ab:03:ec:9a:31:f1:69:38:41:ad:99:61:d9:61:8d:3e:
         2b:ff:7f:bc:99:2b:2e:16:49:85:22:08:bc:cc:0c:60:6f:27:
         82:81:00:87:f9:fa:39:07:01:86:b7:a8:ee:b7:ae:a2:3d:a3:
         74:87:22:59:40:96:5d:7b:4e:7d:dd:64:fd:2d:c2:fb:2e:ad:
         b8:1d:e1:e8:4b:89:07:87:8e:36:a0:e8:18:44:a7:f2:62:64:
         f0:b8:e7:ca
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUOSADndWotpeQxRBCSLsZU+aYbnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNGQzk0MjFFQkIzNzQ4NkNCMkQ4RkIxNzAyNTVBNzdD
MTNENjA5MTAeFw0yNDA4MzAxMzI1MDBaFw0yNTA4MjkxMzMwMDBaMDMxMTAvBgNV
BAMTKEE0OEE0NTM0QUQzRjk2NDM2OEU2Mjk2QUIwRTUwNEEzQkUzRTkxMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCruBODGDV0Z3MH0ygaY/S/Abg4
JkBnvsGJ6Pk8vQzimzYJVUxMAZYbuaBkgDFJ4F0Tzic4hVvcTUX3JjivltawidOs
HP+4K508+Pd82nCyEi32ClY5VG37C9kEDianeANh15wF3cbsrKT3peZMNBq4nFAc
5LshVVqZ+OPhBfDgE+yXD66MMZCkD7Sk/tvWn+nAytex20qo256PUOAPobyxQYzX
gV2WDKVaadaX14K1LnzUg/1o5DpT9Mezn4qHLDcWkBFNQLkkv62e/BP8ywDXgaPV
oEE4njdPPf2LXCIkjc2T0teVn/BUxjYhXAWrMWfJg8RlLzb39/J2CJ7/Mu5NAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUpIpFNK0/lkNo5ilqsOUEo74+kQgwHwYDVR0j
BBgwFoAUY/yUIeuzdIbLLY+xcCVad8E9YJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQUZDMTE0OUE2NEJCMzg0RkQxOTI4NzlGN0RDMTVBNzM1
QjU5QTA2ODIyQTJDNkVCODMzRThGQjZBNTVCMzg4LzAvNjNGQzk0MjFFQkIzNzQ4
NkNCMkQ4RkIxNzAyNTVBNzdDMTNENjA5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82M0ZDOTQyMUVCQjM3NDg2Q0Iy
RDhGQjE3MDI1NUE3N0MxM0Q2MDkxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUFGQzExNDlBNjRCQjM4NEZEMTkyODc5RjdEQzE1QTczNUI1OUEwNjgy
MkEyQzZFQjgzM0U4RkI2QTU1QjM4OC8wLzMxMzczMDJlMzIzMzM5MmUzMTM4MzIy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzQzNzM0MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGq
77YwDQYJKoZIhvcNAQELBQADggEBAG47Yb4dK/1dCX8+m0fvgbUKWolOUyRxoX0I
MAlmyAnYsqA+NsLDERVnkj/6lIaDXfKQxOTLXYYFPYkumms2xHkoNc8Av5YF4vpm
N2jZg6To+mwC/SiF1P8bCIWEdscwa80OHRbo6N9Zc4s81eJ2Y7/tcQ7iJIZMk4vQ
WNOw7589GkZr4lar/adWLcla4NEstEQYF+w4Tr4hsPd08qsESNZAEe8bqwPsmjHx
aThBrZlh2WGNPiv/f7yZKy4WSYUiCLzMDGBvJ4KBAIf5+jkHAYa3qO63rqI9o3SH
IllAll17Tn3dZP0twvsurbgd4ehLiQeHjjag6BhEp/JiZPC458o=
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:04:57 2024 by rpki-client on console-ams.rpki-client.org