Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/323830333a663836303a3a2f33322d3332203d3e20323632353839.roa
File:                     323830333a663836303a3a2f33322d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          RMI3kFwP9HPG+lYDQBs8CB1MV2VVVjF+k4YrCuAn8ls=
Subject key identifier:   F4:20:0B:C2:18:9F:F2:E2:35:11:80:FF:17:FC:D8:6D:76:15:50:85
Certificate issuer:       /CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
Certificate serial:       28AD527B15BCCA119113B33B27B85FC274D3EC32
Authority key identifier: 42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/323830333a663836303a3a2f33322d3332203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:43:58 +0000
ROA not before:           Tue 05 Mar 2024 17:38:58 +0000
ROA not after:            Tue 04 Mar 2025 17:43:58 +0000
asID:                     262589
IP address blocks:        2803:f860::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 17:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ad:52:7b:15:bc:ca:11:91:13:b3:3b:27:b8:5f:c2:74:d3:ec:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
        Validity
            Not Before: Mar  5 17:38:58 2024 GMT
            Not After : Mar  4 17:43:58 2025 GMT
        Subject: CN=F4200BC2189FF2E2351180FF17FCD86D76155085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fe:45:c0:fc:4f:25:ed:83:81:70:1b:70:e2:
                    a0:1b:fe:b2:76:07:2e:c7:c7:32:9c:19:5c:68:67:
                    1f:81:e8:c8:08:05:35:13:51:6c:b3:1c:dc:1f:df:
                    35:5f:83:93:dd:34:8d:0d:aa:e9:d2:9d:66:af:e8:
                    56:3b:e5:5a:a7:eb:e4:4e:e3:0b:32:84:eb:29:e5:
                    ca:ef:99:bd:de:9e:b8:89:5f:ae:26:11:f6:ce:83:
                    bf:33:ba:2e:1e:e0:b7:85:be:bf:05:d6:11:86:5c:
                    f7:37:d7:9e:90:a6:c2:08:c5:cd:67:eb:23:18:96:
                    49:15:a5:a2:17:7c:e5:a9:c7:63:a3:ea:7d:72:8f:
                    b7:08:71:e2:08:7f:d8:ef:41:e4:36:4d:2c:31:20:
                    0d:ca:71:9b:53:44:bf:11:f7:c2:d7:78:e8:c7:1e:
                    7e:d4:75:0a:c8:ce:6f:81:17:bd:04:17:f4:b3:b4:
                    10:80:d1:c1:f1:3a:b8:9b:aa:7b:8a:4a:a9:e1:f5:
                    7f:e1:77:71:ba:49:21:56:de:8b:03:be:60:c3:de:
                    68:b3:7f:b1:34:9f:e3:57:61:95:13:8d:07:84:5b:
                    76:76:86:cf:d6:bf:bb:06:57:0d:d4:62:2b:cd:e7:
                    b3:bb:b1:b1:9e:b1:87:fc:5a:74:63:14:88:81:92:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:20:0B:C2:18:9F:F2:E2:35:11:80:FF:17:FC:D8:6D:76:15:50:85
            X509v3 Authority Key Identifier:
                keyid:42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/323830333a663836303a3a2f33322d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f860::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:b4:5d:af:46:06:0f:9a:48:6b:09:89:15:1e:61:39:d3:84:
         89:cb:b6:ee:57:e5:06:7a:95:e3:ea:25:d1:50:70:71:22:fc:
         df:26:f2:eb:94:78:7a:ed:c8:46:91:2c:83:03:0f:50:1a:65:
         6e:eb:e5:c6:a2:e7:be:8a:16:51:c8:3f:42:17:df:28:8a:c9:
         ca:f5:4d:77:32:8b:42:09:df:83:ef:ae:66:21:9f:fd:c1:40:
         b9:ba:c4:84:ef:c2:e2:72:44:96:ce:c1:95:6d:2f:f5:1b:5c:
         6e:9b:d3:65:00:c9:c0:ae:89:e6:5a:26:16:fd:63:80:59:21:
         25:26:8e:10:42:7b:d7:f1:ab:35:b9:fa:7d:a9:d5:ae:86:d4:
         29:61:c7:ed:39:fd:5d:6d:56:34:91:ba:8b:3f:e7:c7:3e:27:
         07:14:9a:fd:3e:c0:03:46:da:5e:7e:a6:e6:2b:66:fd:1e:c5:
         47:1c:22:b0:08:eb:aa:5f:f2:c1:1c:1b:09:6a:f7:9d:9a:b7:
         95:59:e3:52:02:7c:79:43:39:96:7a:0d:52:98:90:7e:8d:57:
         b9:d8:14:44:ce:96:18:5e:88:71:f0:c1:b3:6a:8a:e2:e5:68:
         7d:ff:27:e2:4e:10:4a:5e:2c:ec:5c:ba:7c:3a:30:6a:8a:ab:
         03:d0:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org