Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137312e302f32342d3234203d3e20323639393138.roa
File:                     3133312e37322e3137312e302f32342d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          gWkZFgkQIuZl0ISlfBB9JDTzvmzEuhloHn+0lmCz5Kw=
Subject key identifier:   E9:FE:8A:6A:2A:DB:79:64:89:32:EC:37:53:42:66:BB:AE:1A:51:3A
Certificate issuer:       /CN=D439ACC51BC8AE7294E3E68A83FB67E034B93F54
Certificate serial:       6ACC46779FEB173FA1937FE76C4534C4B90472FF
Authority key identifier: D4:39:AC:C5:1B:C8:AE:72:94:E3:E6:8A:83:FB:67:E0:34:B9:3F:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137312e302f32342d3234203d3e20323639393138.roa
Signing time:             Tue 01 Apr 2025 16:15:00 +0000
ROA not before:           Tue 01 Apr 2025 16:10:00 +0000
ROA not after:            Tue 31 Mar 2026 16:15:00 +0000
asID:                     269918
IP address blocks:        131.72.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 25 Apr 2025 02:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:cc:46:77:9f:eb:17:3f:a1:93:7f:e7:6c:45:34:c4:b9:04:72:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D439ACC51BC8AE7294E3E68A83FB67E034B93F54
        Validity
            Not Before: Apr  1 16:10:00 2025 GMT
            Not After : Mar 31 16:15:00 2026 GMT
        Subject: CN=E9FE8A6A2ADB79648932EC37534266BBAE1A513A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:1e:be:d4:76:b5:93:00:7d:22:20:3a:a9:
                    e4:20:29:fe:26:83:db:5b:3f:a1:9c:e8:5b:d6:3c:
                    65:fb:b0:a0:86:9f:42:99:82:bc:bf:d1:55:37:af:
                    6d:7e:b7:43:4d:f4:4b:cc:76:74:f2:61:35:e6:4e:
                    4e:fb:ce:76:47:9c:f9:71:dc:f8:73:69:b3:75:41:
                    dd:94:c5:04:f7:78:9f:b2:72:f9:d7:42:06:39:64:
                    ea:ed:c5:58:cc:89:a6:19:3a:7a:43:89:6e:a3:e0:
                    6d:b5:31:e0:de:60:8f:68:95:09:38:2c:aa:ab:b3:
                    6d:45:24:d3:92:7f:65:21:98:bd:03:35:12:51:2e:
                    0b:06:74:b7:5c:1e:e9:cd:3b:03:63:98:c6:aa:86:
                    8a:54:99:db:45:ea:d0:cb:e0:c1:c5:64:f8:e5:33:
                    52:e6:2b:96:9c:34:cc:02:70:4b:cc:58:51:4a:bd:
                    f3:69:2c:65:86:fe:24:b9:69:d0:cd:bc:2c:ea:df:
                    01:77:42:12:6b:db:d4:4d:d8:e5:fd:93:ab:6d:1a:
                    b7:66:12:55:99:63:31:82:3d:3e:f1:a5:a2:d4:33:
                    5f:12:09:3f:10:ca:dc:96:56:c9:b5:31:1f:a7:74:
                    dc:ea:fb:9e:76:fa:03:36:bc:1c:c1:0e:bc:46:3e:
                    ab:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:8A:6A:2A:DB:79:64:89:32:EC:37:53:42:66:BB:AE:1A:51:3A
            X509v3 Authority Key Identifier:
                keyid:D4:39:AC:C5:1B:C8:AE:72:94:E3:E6:8A:83:FB:67:E0:34:B9:3F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137312e302f32342d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:4e:c6:a6:da:55:c5:83:43:e0:79:c6:ef:8e:dc:1b:41:f9:
         f8:2d:11:13:c6:b2:4b:98:3e:47:39:9c:84:00:5b:8b:14:d1:
         1b:5b:79:6f:f8:6d:98:98:75:69:4c:84:b5:58:a6:5e:9d:d8:
         f9:17:d4:2c:d7:46:9f:5b:94:5d:99:ed:e5:52:57:fd:d1:50:
         12:50:fb:88:d2:35:92:68:a0:d3:fd:08:9d:fd:87:cc:87:a6:
         95:15:7e:ac:8a:b4:26:d2:52:e6:66:34:ca:7f:fb:0f:40:25:
         b7:c5:2a:c8:7e:46:b5:30:90:d0:c1:7d:49:04:fe:ee:03:52:
         4a:8b:db:f6:46:9a:35:8e:57:9d:33:4a:1a:e2:75:55:70:7c:
         d8:20:8f:0a:db:70:4a:c7:96:5f:57:e0:7b:cf:af:59:2f:08:
         9e:29:47:c1:09:5a:ad:0f:7b:86:40:aa:2d:62:2f:0d:47:e3:
         ad:9f:9b:5c:6a:69:d5:86:a6:f7:99:35:e7:2a:d5:30:bd:c5:
         f4:37:3c:15:7a:0c:a4:4f:ad:5e:97:a3:88:1e:fb:e7:46:12:
         d1:77:60:1f:3b:4b:cc:0d:4e:6f:d2:02:ee:83:53:7d:b4:cb:
         a7:2a:63:ec:69:bf:61:30:dc:81:0f:3c:ae:5b:86:e6:c9:31:
         c0:0a:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:27:18 2025 by rpki-client on console.sobornost.net