Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/5dba362482b0af169b6afcaf8e4d0a4c6814119a.roa
File:                     5dba362482b0af169b6afcaf8e4d0a4c6814119a.roa (raw, json)
Hash identifier:          18AlfQXLSdVy+yctfMaBa2KShPvq7gLy8G71CDHX95A=
Subject key identifier:   5E:1F:3E:3F:ED:85:8A:29:AF:B8:45:C2:E1:1D:41:00:37:F8:23:EF
Certificate issuer:       /CN=37891eaab39a53321626b241200bbc4960887f67
Certificate serial:       0D93FD
Authority key identifier: 1F:89:B3:12:35:F6:85:3A:92:FD:07:B9:11:D7:1D:11:B2:3A:76:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37891eaab39a53321626b241200bbc4960887f67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/5dba362482b0af169b6afcaf8e4d0a4c6814119a.roa
Signing time:             Wed 24 Mar 2021 14:45:18 +0000
ROA not before:           Wed 24 Mar 2021 14:45:18 +0000
ROA not after:            Tue 24 Mar 2026 14:45:18 +0000
asID:                     64101
IP address blocks:        200.33.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 13:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889853 (0xd93fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37891eaab39a53321626b241200bbc4960887f67
        Validity
            Not Before: Mar 24 14:45:18 2021 GMT
            Not After : Mar 24 14:45:18 2026 GMT
        Subject: CN=5dba362482b0af169b6afcaf8e4d0a4c6814119a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:cc:2e:24:a3:63:b4:5d:47:ef:a5:70:5d:
                    25:0b:b4:cc:f3:1f:61:19:33:a7:0c:d6:39:54:e6:
                    2e:ec:4b:3e:e9:49:47:0d:da:4e:b7:33:5c:f3:60:
                    db:f6:32:d4:79:75:da:e8:58:d4:df:92:4a:72:ae:
                    49:24:fb:7d:97:af:f3:81:3d:5e:bd:1c:c7:1c:4c:
                    6f:ff:33:d1:ed:49:26:48:da:47:43:69:60:57:74:
                    a6:eb:f5:6a:9c:18:30:24:fd:fc:fc:da:fb:2d:02:
                    3a:b9:70:ee:44:64:4d:80:60:3c:8a:7d:39:0a:50:
                    18:00:6a:bb:ba:86:80:e2:03:a8:3d:ad:f6:53:78:
                    ff:2b:ca:b7:b1:be:c6:be:f5:e5:1f:8b:9c:39:4f:
                    7d:62:49:73:3c:82:b4:d3:98:da:13:2e:87:f2:80:
                    02:e3:02:02:d4:3f:ed:6e:7e:7b:b9:35:c7:bc:2d:
                    a2:34:01:c1:b6:db:b4:d7:51:a1:07:95:d3:72:66:
                    be:93:4c:19:aa:55:c6:33:08:56:bf:14:a3:cb:0d:
                    b5:1a:2b:8e:e7:83:93:3d:b3:d1:50:8d:d2:7e:4f:
                    d2:4a:65:2e:b2:f0:eb:71:a9:11:52:48:8f:9f:2c:
                    38:a7:68:80:3f:1b:12:2f:bc:60:c2:44:d7:1f:5d:
                    37:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1F:3E:3F:ED:85:8A:29:AF:B8:45:C2:E1:1D:41:00:37:F8:23:EF
            X509v3 Authority Key Identifier:
                keyid:1F:89:B3:12:35:F6:85:3A:92:FD:07:B9:11:D7:1D:11:B2:3A:76:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37891eaab39a53321626b241200bbc4960887f67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/5dba362482b0af169b6afcaf8e4d0a4c6814119a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/37891eaab39a53321626b241200bbc4960887f67.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:50:45:62:c6:e6:8b:33:f7:84:f0:93:0c:2a:a1:95:43:97:
         1c:b4:aa:cc:c4:0b:03:f5:4c:0c:e2:da:fd:b5:e7:9d:5f:1a:
         13:06:89:59:cf:2a:8f:54:9e:4f:81:31:e7:c3:87:60:01:a6:
         7e:0e:38:0a:07:57:9d:a4:1c:10:e2:d3:0f:65:08:6f:39:4f:
         b2:04:ec:78:f0:2c:bc:0b:86:f9:1e:57:8f:b5:bb:b7:f8:f9:
         05:ee:16:d5:75:bb:6f:a2:6d:86:42:a6:b2:1a:38:83:c5:f2:
         8f:cf:c4:9f:67:22:71:65:e1:e6:3f:bd:3b:21:db:3c:6d:47:
         b7:44:3a:b5:b0:ee:a4:0c:d7:1a:f7:ff:2e:20:58:0a:85:51:
         2a:79:60:b7:55:9d:53:d4:ed:59:7b:63:c6:76:84:22:d6:05:
         93:df:74:bd:c6:97:f5:3c:fe:6e:32:09:29:24:76:d6:36:8e:
         41:a5:63:9f:42:d8:ca:b8:2b:b8:c7:44:b1:3d:11:29:09:fc:
         0a:6e:0c:6e:8d:1a:4d:07:6e:da:a9:e9:53:86:61:0f:be:7d:
         b0:1d:ec:1c:b6:a0:fb:21:43:b8:8b:03:0d:f2:ec:d5:3b:41:
         5b:b6:93:11:6c:66:fd:3c:21:e6:cb:8c:7e:5c:19:b3:74:ab:
         79:51:d0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 17:06:33 2024 by rpki-client on console-ams.rpki-client.org