Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3233203d3e20323636373931.roa
File:                     34352e3233362e33322e302f32322d3233203d3e20323636373931.roa (raw, json)
Hash identifier:          50OYhgMhMzBSgJbF4P7BIqJsbOh47rPSIMfzIAPCXYA=
Subject key identifier:   62:AC:9B:50:34:F4:28:21:46:BC:C6:0F:AB:97:B8:A8:EA:14:DB:2C
Certificate issuer:       /CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
Certificate serial:       76B4D8E8CE47C21E9332594C5A40631873325074
Authority key identifier: F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3233203d3e20323636373931.roa
Signing time:             Tue 05 Mar 2024 17:49:15 +0000
ROA not before:           Tue 05 Mar 2024 17:44:15 +0000
ROA not after:            Tue 04 Mar 2025 17:49:15 +0000
asID:                     266791
IP address blocks:        45.236.32.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 16:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b4:d8:e8:ce:47:c2:1e:93:32:59:4c:5a:40:63:18:73:32:50:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
        Validity
            Not Before: Mar  5 17:44:15 2024 GMT
            Not After : Mar  4 17:49:15 2025 GMT
        Subject: CN=62AC9B5034F4282146BCC60FAB97B8A8EA14DB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:69:84:60:e2:da:98:0d:2d:e4:eb:4d:9f:
                    b6:d4:d1:1e:7c:e0:d4:52:6d:9a:3f:1f:63:8c:7a:
                    68:39:72:d9:57:57:cf:6a:dc:8e:e3:86:62:de:86:
                    47:86:c3:9b:51:6d:83:61:97:37:7d:e3:79:87:52:
                    a3:cc:7a:ff:7e:ed:44:7c:c1:11:3a:ca:eb:79:cc:
                    da:76:ee:ae:89:f7:94:91:42:4c:2c:b7:26:31:44:
                    82:0a:75:82:be:cd:29:fc:4b:3a:14:33:5f:f0:40:
                    2f:28:5d:4c:f2:8d:b7:9d:80:db:e2:1a:93:a4:c4:
                    63:5f:e4:a3:cf:1f:54:c8:df:d1:dd:b3:e4:5a:37:
                    a7:b3:6f:0b:c8:d9:3d:9e:34:6d:73:71:fe:6f:38:
                    53:84:cd:b9:9d:2d:a5:e1:11:6e:da:f5:df:11:66:
                    70:3a:20:12:8d:a3:b0:0b:56:6a:7b:6a:15:0b:99:
                    10:0c:0a:e6:e4:8b:1d:50:14:de:49:00:a2:61:5b:
                    22:c0:fe:65:92:2a:7e:60:d8:bb:43:76:53:cf:4f:
                    5c:b4:d3:96:e3:19:91:37:0a:48:b3:26:c3:19:9b:
                    0b:16:c3:f7:cb:c1:1c:48:a9:78:78:99:94:f2:11:
                    33:f4:f9:47:f3:40:bf:93:47:66:59:96:5a:55:4f:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AC:9B:50:34:F4:28:21:46:BC:C6:0F:AB:97:B8:A8:EA:14:DB:2C
            X509v3 Authority Key Identifier:
                keyid:F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3233203d3e20323636373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:08:a8:bb:be:61:e3:f6:26:d3:15:2a:ec:67:ec:b3:3c:
         84:9a:60:7e:1a:c1:62:fe:f6:6b:4e:07:b7:d0:99:8b:67:7f:
         ef:78:46:0c:46:8a:9a:de:34:eb:f0:a8:ef:7b:f7:a0:12:7c:
         2a:70:c5:e2:99:d6:2f:78:f2:ba:dd:33:a3:ee:05:df:99:d6:
         34:82:16:23:8d:93:c0:3e:34:ed:8b:d4:10:89:b2:ea:e9:0b:
         71:99:3a:5d:7d:77:06:2a:1d:bf:42:5f:ab:55:4a:ff:5b:96:
         a3:c1:b2:b0:8c:84:d6:9a:2e:65:c8:a0:20:45:e5:ba:5b:b4:
         f6:06:69:b3:f7:85:2a:06:77:9d:63:ec:07:48:c0:c5:a0:b9:
         e2:80:80:74:c8:d6:f3:37:ee:3a:f5:e2:71:b3:53:59:e4:34:
         c1:7a:b9:23:54:cd:e8:e7:f6:4a:2e:9a:25:22:3f:47:35:83:
         dd:f2:f1:b8:90:9d:6e:f8:cc:d3:58:62:78:d1:19:d5:41:38:
         fa:f7:ad:79:10:41:1f:86:5b:db:5e:42:07:f9:a5:a2:68:dd:
         42:15:17:87:83:37:09:d2:d8:4c:61:7a:fc:f7:03:26:f3:8e:
         3b:a4:25:5f:10:3b:ab:fe:32:03:aa:8c:1e:06:1a:82:95:cd:
         ff:7a:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org