Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          iINdeaz5j3Q70x95NVqbNxU93aUdSrD3JCh9c0z5eM0=
Subject key identifier:   BE:37:D2:8D:C6:32:73:57:E3:2F:EA:6E:0B:7D:FC:1E:DF:46:58:64
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       042827720DF57DBBA522E01FF0657F5FAD952FDA
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 05 Mar 2024 17:50:05 +0000
ROA not before:           Tue 05 Mar 2024 17:45:05 +0000
ROA not after:            Tue 04 Mar 2025 17:50:05 +0000
asID:                     272869
IP address blocks:        2803:7290::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sun 28 Apr 2024 15:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:28:27:72:0d:f5:7d:bb:a5:22:e0:1f:f0:65:7f:5f:ad:95:2f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar  5 17:45:05 2024 GMT
            Not After : Mar  4 17:50:05 2025 GMT
        Subject: CN=BE37D28DC6327357E32FEA6E0B7DFC1EDF465864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:84:b2:81:67:b7:97:7c:45:59:a9:f0:1b:a7:
                    77:49:07:fe:d2:ac:63:d5:24:a4:19:1a:62:ba:88:
                    d7:0b:e4:3c:eb:99:f4:90:e4:57:3b:ea:b1:26:2b:
                    86:90:dd:b0:36:b7:48:8b:d0:50:3f:8b:8e:d7:25:
                    2c:5a:53:5a:03:47:27:c4:65:04:28:70:1f:74:fb:
                    de:85:22:10:32:b5:f1:22:3c:fd:ac:31:67:e8:f0:
                    27:ca:1c:e5:30:d1:bb:41:84:ab:02:44:93:1d:5a:
                    90:ef:aa:f8:30:61:63:4b:4b:77:e1:fc:92:3c:08:
                    fc:6c:b0:77:38:3c:8a:4a:02:de:2d:b1:93:84:a8:
                    6d:31:cd:5a:7d:cd:f4:eb:7e:fb:a6:4e:98:2c:f7:
                    b7:1d:b4:77:10:53:06:3c:21:ce:c7:92:23:2a:25:
                    d4:9a:8c:7f:d4:ae:0d:66:3f:0b:ad:e4:7c:c3:9e:
                    96:51:ab:de:e1:1f:08:b4:f5:c5:24:f9:a6:e1:a5:
                    b7:05:6f:63:cb:23:a0:15:18:a9:2a:da:04:a9:b7:
                    7d:1e:71:a4:8d:86:36:da:ab:3c:97:2d:ba:af:97:
                    03:34:6e:89:87:c8:26:e6:b2:d0:39:c2:44:e0:80:
                    f2:6a:86:1b:03:86:7b:36:97:f2:0c:7e:0e:f8:d1:
                    90:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:37:D2:8D:C6:32:73:57:E3:2F:EA:6E:0B:7D:FC:1E:DF:46:58:64
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:04:a6:fe:b8:50:2a:91:b2:e9:22:bd:0c:48:ba:6c:e1:24:
         6e:e9:cf:dc:38:b3:07:ef:87:c8:b7:fc:b9:50:ae:8c:82:73:
         80:7e:06:fd:6b:04:4e:af:46:fe:41:09:d3:cf:38:76:73:eb:
         55:cc:da:86:5c:1f:25:c5:a7:e8:bf:b1:b9:12:2d:ea:5f:3e:
         b4:cc:ab:9a:82:54:19:f2:80:07:7c:93:2a:08:79:ce:8f:56:
         a6:2c:8c:65:04:03:c8:eb:33:cf:43:3d:6d:d2:f3:6c:99:a1:
         f4:4a:d9:6b:01:62:e6:f9:4f:03:8b:96:59:29:08:29:62:7c:
         10:06:54:6d:fc:27:c8:00:48:67:e0:4d:3c:ba:73:59:3b:91:
         c4:f1:23:3d:1c:68:b7:74:8d:de:10:f1:9f:91:1a:60:3e:d5:
         21:e4:6f:fc:65:08:99:4a:37:75:e8:d2:0a:5c:06:5b:29:d2:
         5e:79:e1:8d:97:9d:ab:44:3f:c8:fb:00:0d:0e:f6:46:7e:09:
         ec:1c:42:fb:2f:bb:20:6a:6a:68:e9:7d:74:c3:c4:fc:3a:63:
         a5:66:c8:43:44:d3:98:71:21:38:f8:a5:e6:cf:98:0a:14:ce:
         4b:71:32:24:9c:6d:14:e3:4b:af:47:53:e7:87:a9:71:3f:83:
         8d:65:9c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org