Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/34352e3136392e3136332e302f32342d3234203d3e20323635373033.roa
File:                     34352e3136392e3136332e302f32342d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          sYalgwdsuML630IR0wEcyjpZJ/y5eXQe9qfTUedUENU=
Subject key identifier:   9C:59:10:4E:4D:CF:A8:8A:23:42:DC:DC:00:07:B0:05:C3:B7:1E:1E
Certificate issuer:       /CN=BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6
Certificate serial:       3E2963DA413C6298518320154B7ABF253ECC4E86
Authority key identifier: BA:6D:20:BA:A9:6B:C8:F1:7C:49:28:A4:ED:0F:18:86:73:9B:35:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/34352e3136392e3136332e302f32342d3234203d3e20323635373033.roa
Signing time:             Tue 04 Feb 2025 18:17:12 +0000
ROA not before:           Tue 04 Feb 2025 18:12:12 +0000
ROA not after:            Tue 03 Feb 2026 18:17:12 +0000
asID:                     265703
IP address blocks:        45.169.163.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:29:63:da:41:3c:62:98:51:83:20:15:4b:7a:bf:25:3e:cc:4e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6
        Validity
            Not Before: Feb  4 18:12:12 2025 GMT
            Not After : Feb  3 18:17:12 2026 GMT
        Subject: CN=9C59104E4DCFA88A2342DCDC0007B005C3B71E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:17:c7:20:06:12:12:8e:32:47:55:26:20:
                    9f:c4:ff:97:63:f2:4f:8a:eb:8c:d6:77:ee:60:29:
                    ef:8b:73:1a:18:22:17:c9:0a:98:74:4b:0f:df:63:
                    6f:cb:c0:15:ad:75:15:8e:7a:79:f0:91:c1:44:bf:
                    bb:51:d5:53:ee:12:67:6a:fb:7f:be:61:d8:99:67:
                    13:e2:e2:ac:a3:7c:6e:af:b7:02:ba:f7:2b:0e:02:
                    45:c0:cd:1f:61:16:a0:6d:17:44:8d:2d:ba:a6:54:
                    c0:91:3c:a8:6d:1d:77:c0:c8:72:ac:77:bc:0c:d0:
                    cd:1d:f3:03:c7:b2:cb:b1:60:93:5e:80:f1:bd:15:
                    a4:71:27:fd:0e:49:c1:35:54:5e:66:24:92:ce:1e:
                    8c:5e:00:f9:54:78:b2:2f:ce:85:c4:d4:49:bb:f0:
                    09:c5:a9:39:60:bc:d2:29:d8:a7:68:22:2b:fa:75:
                    1d:a9:92:cf:1f:cc:3f:1b:7e:c7:a9:0d:5a:70:44:
                    ce:d3:e9:bb:53:07:91:dd:4d:7d:4f:bc:90:70:07:
                    cb:ec:e7:6d:62:f9:85:be:35:a3:af:2a:cd:02:97:
                    44:d6:7a:0d:57:2b:38:c1:67:9f:d7:08:d2:52:3b:
                    f2:66:e7:c2:c9:8b:2a:f8:c8:bf:0d:c9:78:f2:8d:
                    fd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:59:10:4E:4D:CF:A8:8A:23:42:DC:DC:00:07:B0:05:C3:B7:1E:1E
            X509v3 Authority Key Identifier:
                keyid:BA:6D:20:BA:A9:6B:C8:F1:7C:49:28:A4:ED:0F:18:86:73:9B:35:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/34352e3136392e3136332e302f32342d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:03:2f:8e:cd:7d:13:6e:45:c2:ee:dd:16:26:7d:8a:d4:b7:
         ec:db:61:7e:3a:ef:9e:8f:22:55:21:1b:1e:ef:ae:c3:4c:68:
         23:86:68:6e:df:06:e3:ca:f6:63:1a:8f:20:83:a0:9e:b1:92:
         ea:07:c2:12:6f:84:64:fd:d5:af:f9:0c:e3:74:3a:01:88:01:
         7f:a5:dc:1f:24:c3:58:b4:af:99:0d:d0:c2:c4:72:38:fc:fb:
         7a:7d:4d:6c:94:54:b6:9a:74:0e:da:e3:06:64:04:bb:89:ac:
         a4:89:73:96:62:14:09:17:e9:e6:ea:a6:79:95:17:6a:a9:a3:
         41:d0:c2:13:a5:94:32:19:c5:fa:c2:a3:0e:b9:81:74:c9:ae:
         a7:00:06:1e:86:4f:2a:6b:3a:bf:49:87:65:99:87:aa:da:b8:
         6a:cb:ef:bf:54:82:4f:de:68:2e:ca:aa:46:08:50:78:e0:31:
         63:ec:70:f9:0d:4d:27:dc:e9:21:8c:cd:7a:a8:55:82:d1:85:
         67:f3:65:f3:b3:71:2d:9c:5b:eb:38:17:f6:91:f9:d3:d2:e8:
         4a:4a:bd:1e:39:70:58:5c:c1:31:6a:ea:c8:bc:d5:99:80:41:
         8d:72:03:e7:02:be:42:38:91:de:32:64:05:04:ee:1c:d9:ea:
         45:0e:e9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:09:44 2025 by rpki-client