Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/37b4689707f2c0565272e41184a739990e613d0d.roa
File:                     37b4689707f2c0565272e41184a739990e613d0d.roa (raw, json)
Hash identifier:          An8DvZOydeyyj3fPISyCobubEHvu/s/71oLORPIjhtM=
Subject key identifier:   07:B9:D8:94:F5:16:B7:57:B4:C9:6D:45:FF:D4:0A:D9:9A:39:92:02
Certificate issuer:       /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial:       27B9FC
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/37b4689707f2c0565272e41184a739990e613d0d.roa
Signing time:             Thu 08 Feb 2024 15:03:09 +0000
ROA not before:           Thu 08 Feb 2024 15:03:09 +0000
ROA not after:            Sun 08 Feb 2026 15:03:09 +0000
asID:                     265855
IP address blocks:        181.118.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Feb 2024 19:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2603516 (0x27b9fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
        Validity
            Not Before: Feb  8 15:03:09 2024 GMT
            Not After : Feb  8 15:03:09 2026 GMT
        Subject: CN=37b4689707f2c0565272e41184a739990e613d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:60:5c:0e:c0:e9:31:a0:82:a9:60:b4:35:
                    83:5e:6b:d4:09:34:79:2e:f2:15:da:55:e9:38:3f:
                    fe:cd:86:de:e4:fa:ef:c3:0c:69:66:44:b9:e6:75:
                    b8:21:18:3f:d1:c0:66:a8:37:03:c0:95:11:1d:03:
                    1f:13:03:07:b7:76:f1:3e:36:18:58:98:9c:3e:aa:
                    b9:5d:1e:09:b3:11:92:b7:cb:97:c6:ee:0e:55:2b:
                    aa:4f:25:48:bb:b5:fc:95:65:6d:4f:df:57:b7:e0:
                    71:47:99:88:c5:ac:ff:77:05:c8:59:c6:fb:84:28:
                    27:1f:4e:84:b8:f2:06:e3:89:24:e0:53:79:e3:f6:
                    30:3b:c8:99:d8:65:91:32:13:2e:0f:40:ce:9b:f1:
                    70:6a:3c:65:f8:91:be:71:6f:42:cb:1a:e8:71:d2:
                    40:1d:3c:37:23:bb:51:1e:fd:0d:70:e3:17:7a:b9:
                    52:72:58:9d:63:7b:2c:5b:25:37:fb:9e:e1:42:20:
                    ae:09:44:32:a4:48:60:87:44:13:64:7e:1e:9d:5d:
                    4b:44:73:b7:ca:dd:f9:47:ba:b2:54:db:7b:f3:31:
                    aa:4c:1f:3c:fe:81:85:55:ac:41:5b:5f:9f:1d:39:
                    9f:0b:cb:93:a6:9c:57:4d:5b:a5:2a:6e:7d:8a:28:
                    57:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B9:D8:94:F5:16:B7:57:B4:C9:6D:45:FF:D4:0A:D9:9A:39:92:02
            X509v3 Authority Key Identifier:
                keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/37b4689707f2c0565272e41184a739990e613d0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:6c:1d:d9:f8:c2:0a:7b:57:fe:70:6a:20:a7:fb:b7:b3:e5:
         95:4d:a1:f7:b1:19:be:6b:4f:f8:4f:b4:0c:f1:c9:82:b3:a7:
         6d:8f:21:28:3a:1e:9a:04:23:e9:1f:61:99:8c:67:6f:20:06:
         b3:8d:c7:35:26:f5:e3:08:98:48:9e:38:31:d6:2d:6d:1b:6c:
         69:e0:71:65:9e:cf:cf:9a:3a:bd:70:f3:d6:47:9d:6e:f6:0c:
         bd:c4:cc:1b:4d:07:ca:d0:91:06:69:89:9e:11:5d:85:dc:cb:
         84:86:7c:03:f6:4b:fa:d2:8a:eb:ff:91:50:b8:f0:80:bc:1c:
         5c:92:74:f4:8b:bf:a4:d5:d8:ce:43:9e:8d:63:ae:a5:e8:b1:
         f6:67:88:16:38:27:44:7b:01:36:dc:9c:53:dd:ac:66:63:4b:
         37:9e:72:83:9b:73:09:1a:69:b9:5a:f9:ff:fc:5e:9e:7c:f1:
         ba:65:a7:19:26:1f:e0:1f:c0:17:7d:1e:cf:c7:08:26:7d:15:
         5d:61:3e:13:89:b8:aa:db:a2:ac:b5:ae:23:18:94:c9:94:28:
         61:b8:8c:c4:6a:63:76:87:b1:ea:41:d3:6e:a3:51:39:ae:0b:
         85:74:e4:70:ee:60:70:11:44:b4:c7:95:0e:82:8f:77:6a:4a:
         b8:09:8e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 01:09:32 2024 by rpki-client on console-ams.rpki-client.org