Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/34352e3138362e352e302f32342d3234203d3e20323639383036.roa
File:                     34352e3138362e352e302f32342d3234203d3e20323639383036.roa (raw, json)
Hash identifier:          1UrP9cn1ISv3B9ZYyBrQzdagv6CrympdyudoeHA9HSM=
Subject key identifier:   AF:4C:45:63:B8:B0:3B:9F:C7:32:C5:03:B6:7B:FB:11:D8:CC:04:3D
Certificate issuer:       /CN=87919A3C59C067523C21EF70A596F0B7F9C09798
Certificate serial:       236585C81B7889A6EE8EF11126CD44D499F923CD
Authority key identifier: 87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/34352e3138362e352e302f32342d3234203d3e20323639383036.roa
Signing time:             Tue 05 Mar 2024 17:51:18 +0000
ROA not before:           Tue 05 Mar 2024 17:46:18 +0000
ROA not after:            Tue 04 Mar 2025 17:51:18 +0000
asID:                     269806
IP address blocks:        45.186.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 18:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:65:85:c8:1b:78:89:a6:ee:8e:f1:11:26:cd:44:d4:99:f9:23:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87919A3C59C067523C21EF70A596F0B7F9C09798
        Validity
            Not Before: Mar  5 17:46:18 2024 GMT
            Not After : Mar  4 17:51:18 2025 GMT
        Subject: CN=AF4C4563B8B03B9FC732C503B67BFB11D8CC043D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:85:3f:e2:1b:00:4e:66:d7:b7:f0:db:93:
                    79:76:b7:8a:60:65:0d:7f:c1:b9:81:b6:53:6c:60:
                    91:b1:a7:43:41:59:7a:c5:26:21:d2:35:04:40:40:
                    f0:b7:33:26:23:7d:74:a8:d6:a2:1c:d1:60:3d:f4:
                    5c:45:17:5c:3d:84:b0:8b:4c:ad:c4:cd:3f:12:1b:
                    f4:e9:79:81:4a:23:94:09:c1:85:e0:b3:d6:f8:71:
                    25:98:00:88:15:1b:07:4f:73:8c:da:9e:f2:25:30:
                    37:38:5c:0b:3b:13:d2:6a:23:b0:7c:62:42:f6:7a:
                    03:57:af:c5:13:77:8b:57:9f:04:92:7c:ad:76:ac:
                    c8:85:60:69:8f:a7:60:8b:60:33:01:c2:81:87:90:
                    19:12:84:43:dc:f9:39:00:8f:b9:18:7c:e0:97:3b:
                    ba:a1:83:27:a6:5d:9d:6b:38:b8:a3:63:c2:da:f6:
                    5c:44:37:7d:34:0f:29:6e:fb:20:a1:13:f0:83:c9:
                    b0:6a:49:81:83:07:63:c7:4c:3f:ae:d0:25:30:6d:
                    2d:9c:2e:ed:9a:4e:8c:92:cc:e5:01:d4:de:77:b0:
                    8d:ea:5d:46:e5:26:dd:1b:22:3b:26:37:b1:e3:bd:
                    37:42:c8:1d:16:d9:c3:01:2a:6d:45:50:75:1b:c0:
                    ec:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4C:45:63:B8:B0:3B:9F:C7:32:C5:03:B6:7B:FB:11:D8:CC:04:3D
            X509v3 Authority Key Identifier:
                keyid:87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/34352e3138362e352e302f32342d3234203d3e20323639383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:8b:55:5c:84:12:4b:b0:93:3e:55:d8:f4:9a:b4:18:f0:7c:
         f8:0b:52:13:62:49:30:4d:d7:03:50:81:be:97:76:67:a2:f2:
         70:ca:8d:69:8e:f9:d9:d2:45:d5:65:a6:fb:8d:e8:49:94:d4:
         bd:d4:8f:71:fc:5c:88:9f:cf:c7:28:b8:4e:ae:76:f5:fd:4a:
         ce:60:aa:4e:c0:51:1e:35:d1:e0:10:57:ae:9d:22:12:a4:4f:
         21:aa:f1:f1:94:41:97:67:44:8b:6f:65:93:2a:1d:a8:fb:e5:
         10:a2:a6:53:7c:7b:a6:73:2f:8a:b5:b2:41:7a:ad:28:a9:49:
         02:57:7c:66:19:98:84:77:c6:9a:63:53:e2:d8:51:ac:69:8a:
         3f:22:3c:bb:55:5b:8b:5a:a4:c1:87:ea:16:7d:6e:eb:cb:6c:
         30:58:4d:72:90:77:0d:d8:7d:15:a2:cc:89:12:f8:01:49:84:
         a2:cf:da:70:6f:b2:f1:7a:5f:95:94:c4:ba:5f:6c:a7:83:ec:
         3f:15:6b:d1:88:23:17:22:49:53:74:11:92:5b:de:d2:d9:ac:
         37:7c:fe:5b:43:96:24:aa:b1:ec:af:84:55:c9:6e:50:a5:ce:
         d1:4c:65:28:51:9f:88:03:d9:0e:9d:bc:8e:6b:91:f2:ad:76:
         92:9d:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:48:46 2024 by rpki-client on console-fra.rpki-client.org