Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3230313a3a2f34382d3438203d3e20323732383639.roa
File:                     323830333a373239303a3230313a3a2f34382d3438203d3e20323732383639.roa (raw, json)
Hash identifier:          gbuD16kQx9k2H7Ge9B8+DceM5oIsplbIDgJq7eU5T9w=
Subject key identifier:   97:4E:3A:42:26:6B:5E:41:46:35:AA:E9:65:26:3A:C4:2B:4F:83:DA
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       4E5EFA6E1692269932663D8B5069FF34BBFA93FC
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3230313a3a2f34382d3438203d3e20323732383639.roa
Signing time:             Tue 05 Mar 2024 17:50:03 +0000
ROA not before:           Tue 05 Mar 2024 17:45:03 +0000
ROA not after:            Tue 04 Mar 2025 17:50:03 +0000
asID:                     272869
IP address blocks:        2803:7290:201::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 03:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5e:fa:6e:16:92:26:99:32:66:3d:8b:50:69:ff:34:bb:fa:93:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar  5 17:45:03 2024 GMT
            Not After : Mar  4 17:50:03 2025 GMT
        Subject: CN=974E3A42266B5E414635AAE965263AC42B4F83DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:9e:9e:08:03:d7:27:4b:1b:dd:dc:43:65:
                    ef:29:5e:dc:ec:b9:40:db:56:01:00:b1:6b:8f:0b:
                    99:6d:47:fe:88:6d:90:b0:7b:b1:cf:de:14:3e:f6:
                    19:2b:21:54:9c:93:3b:c4:71:b0:e8:4e:34:26:c4:
                    c3:9e:33:2c:de:53:fd:ac:bc:85:af:ea:07:d5:21:
                    23:16:6b:68:45:03:bd:70:e1:6e:8e:16:75:12:ca:
                    d9:bc:20:f7:90:78:50:f9:93:1a:c2:aa:69:72:ad:
                    ef:82:bb:37:a9:f1:40:de:c2:95:b9:c2:dc:44:58:
                    24:a1:85:5a:70:16:9f:dd:c5:6a:53:ad:96:fa:02:
                    a0:19:8d:b1:86:0c:f6:99:26:df:ca:bc:7e:15:79:
                    7f:9e:69:d0:48:cd:ac:b2:26:d8:e6:73:f3:6f:0a:
                    6b:8b:2b:65:6f:55:5d:bd:f1:0e:94:8d:45:7a:3d:
                    f3:00:3e:6f:c4:c4:bd:50:5b:59:e7:49:a9:bd:23:
                    d0:3b:c9:b6:20:96:22:61:3a:5a:95:ec:c1:d5:5c:
                    45:87:db:29:ca:c3:ae:31:56:fe:d3:9c:f9:67:aa:
                    29:d9:a0:0e:5e:69:33:6a:84:0d:83:1b:f1:3a:07:
                    c0:bc:46:d2:0d:8d:df:c2:19:c8:58:fe:92:ab:d6:
                    8b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4E:3A:42:26:6B:5E:41:46:35:AA:E9:65:26:3A:C4:2B:4F:83:DA
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3230313a3a2f34382d3438203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:201::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:88:e9:88:f5:5d:f3:59:23:43:d3:68:dc:ad:65:d6:0e:37:
         4c:d8:3e:2f:0a:f0:ba:e4:65:0e:ed:0a:42:19:8b:f6:e1:89:
         de:6a:21:86:c2:d3:6d:0b:73:e1:0b:e6:b2:2a:60:f6:ba:24:
         2f:6d:10:8c:88:7b:75:6e:d1:fc:b3:f0:e7:96:8d:3d:5f:a9:
         f9:94:92:3b:e5:fb:28:54:bb:7d:c4:f0:3b:91:4c:1a:41:67:
         a0:24:f6:fe:c7:64:37:6f:b1:0a:c6:e6:ee:89:af:94:ac:9a:
         ff:45:86:97:41:e1:21:b4:aa:2e:b3:63:23:f4:39:fe:18:35:
         af:ec:47:9f:79:a8:de:02:b2:e8:65:ae:dd:0d:11:9d:ed:b3:
         99:b5:7f:e9:60:bb:5d:18:ff:80:74:e5:6c:0b:c8:61:42:af:
         db:c0:ca:5c:8a:42:45:b6:48:88:6a:54:14:ca:1a:94:51:dd:
         db:22:7b:a3:34:d2:9e:27:12:a4:fc:61:29:bc:c2:7a:b1:a5:
         22:59:40:96:d0:10:a4:31:1f:cf:9e:9b:35:a0:dc:ad:50:1a:
         fe:5f:89:87:e7:de:fe:d7:e7:5d:fe:fb:7f:97:1d:be:cb:8b:
         6c:a4:59:c8:85:2b:da:83:eb:e2:3a:e8:78:c1:73:6d:c3:4e:
         58:aa:5b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org