Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/3137372e37332e3135392e302f32342d3234203d3e20323730313035.roa
File:                     3137372e37332e3135392e302f32342d3234203d3e20323730313035.roa (raw, json)
Hash identifier:          Rq9ygxNHplQp72aN15IQhbaPKZpfpXMtU6Ov9I8pRL4=
Subject key identifier:   C9:5F:53:52:BE:36:9D:2F:17:B7:BD:E2:B6:31:B0:E8:6C:7B:CE:EE
Certificate issuer:       /CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
Certificate serial:       718C85DA93FF0A1CE3F2E72866BCF5DA9A437273
Authority key identifier: D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/3137372e37332e3135392e302f32342d3234203d3e20323730313035.roa
Signing time:             Tue 05 Mar 2024 17:44:03 +0000
ROA not before:           Tue 05 Mar 2024 17:39:03 +0000
ROA not after:            Tue 04 Mar 2025 17:44:03 +0000
asID:                     270105
IP address blocks:        177.73.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 00:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8c:85:da:93:ff:0a:1c:e3:f2:e7:28:66:bc:f5:da:9a:43:72:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
        Validity
            Not Before: Mar  5 17:39:03 2024 GMT
            Not After : Mar  4 17:44:03 2025 GMT
        Subject: CN=C95F5352BE369D2F17B7BDE2B631B0E86C7BCEEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:73:77:6d:ce:85:45:7f:a1:ed:c6:48:f0:
                    90:98:fb:92:74:8b:88:c2:34:e5:be:d3:43:9c:92:
                    2e:c8:23:16:a6:50:9e:fa:12:69:7a:f0:7b:f1:f2:
                    f6:f1:92:aa:60:e9:c1:8f:8f:69:0d:0f:e5:cb:27:
                    7f:95:39:a9:af:0d:63:ee:e2:16:26:df:5a:c7:9c:
                    05:17:56:70:44:57:40:49:d3:00:6b:b1:8b:21:9c:
                    89:65:cb:fd:da:18:99:57:8a:b6:fc:43:52:74:05:
                    74:2e:89:4d:fc:64:ff:63:6a:31:e2:32:67:a5:a5:
                    8b:0e:36:62:57:84:3f:7d:b6:6f:0c:ee:bd:a0:02:
                    0d:4e:bc:38:e3:22:33:6c:98:cd:c2:df:51:31:33:
                    ab:8d:d8:45:b1:a5:8d:d6:23:1d:7d:d3:d1:7e:25:
                    16:82:f8:8d:01:4f:a1:66:25:54:05:7a:30:51:a5:
                    6e:ef:20:da:97:ad:53:90:99:6b:00:f0:20:d4:db:
                    bb:34:05:60:81:b9:ff:52:80:ec:cd:a9:0e:9b:cd:
                    ae:f2:71:41:e4:59:14:87:c1:9f:d0:c9:87:e0:ae:
                    83:67:ff:29:fe:f2:e9:5f:84:1b:c9:6a:e4:82:79:
                    84:64:df:77:c7:24:47:18:47:af:32:9e:53:4f:4b:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5F:53:52:BE:36:9D:2F:17:B7:BD:E2:B6:31:B0:E8:6C:7B:CE:EE
            X509v3 Authority Key Identifier:
                keyid:D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/3137372e37332e3135392e302f32342d3234203d3e20323730313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:98:d6:72:06:10:7c:02:4b:ce:0f:63:71:71:5c:c3:80:6f:
         0e:fe:42:f3:ed:e3:2a:eb:55:02:0f:e8:a2:9b:20:7c:ac:13:
         01:89:f6:e8:eb:5b:d4:16:88:c4:a0:3f:4b:52:03:8d:7d:94:
         5d:c1:49:dd:74:4f:2d:be:29:05:18:55:8f:cf:0c:45:6c:45:
         e1:c0:3a:ba:30:4f:28:e5:41:9d:3b:c4:88:9b:0f:9d:35:25:
         8a:ae:f0:5e:5c:eb:80:6f:65:6e:17:25:3c:e9:f6:db:c1:78:
         1b:1b:2b:19:a4:6f:6d:04:51:86:01:75:bd:52:04:c8:bf:cc:
         2e:97:4b:3c:21:69:6b:8b:23:be:c7:7f:9b:26:4a:73:04:42:
         16:ab:3e:dd:99:fb:d4:25:58:cc:76:92:e6:67:e4:df:b8:f2:
         b7:e4:0f:60:87:48:1d:85:da:50:ac:14:94:f3:4d:3d:fd:09:
         87:11:eb:5e:17:7a:36:e7:ab:f1:0e:51:e4:81:5d:58:b9:37:
         ce:11:24:7b:b1:10:d6:da:c8:f4:4c:85:9b:c9:7b:56:bd:31:
         d0:04:f9:4b:57:f9:d4:0a:69:df:f9:a5:11:b4:d2:d3:3e:94:
         16:e0:8d:e5:3d:32:76:b5:89:32:bd:06:b6:0b:7d:f2:1e:99:
         ed:0c:46:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 05:26:11 2024 by rpki-client on console-fra.rpki-client.org