Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/34352e3136322e32302e302f32332d3233203d3e203531333936.roa
File:                     34352e3136322e32302e302f32332d3233203d3e203531333936.roa (raw, json)
Hash identifier:          UsC2lI1PpvfVwBfyHqFSPwL31cveMSsp+/xGeyr966E=
Subject key identifier:   5B:9F:B0:38:B1:5E:64:5A:EA:AF:49:5B:41:4E:69:B8:28:16:8A:08
Certificate issuer:       /CN=5806F9DC062DA88DF39329EB68D1552E70F91A7A
Certificate serial:       2DE7E4557D5F3FEEEF1A5500917DC0A36837BC57
Authority key identifier: 58:06:F9:DC:06:2D:A8:8D:F3:93:29:EB:68:D1:55:2E:70:F9:1A:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/34352e3136322e32302e302f32332d3233203d3e203531333936.roa
Signing time:             Tue 22 Apr 2025 14:20:00 +0000
ROA not before:           Tue 22 Apr 2025 14:15:00 +0000
ROA not after:            Tue 21 Apr 2026 14:20:00 +0000
asID:                     51396
IP address blocks:        45.162.20.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 23 Apr 2025 15:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e7:e4:55:7d:5f:3f:ee:ef:1a:55:00:91:7d:c0:a3:68:37:bc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806F9DC062DA88DF39329EB68D1552E70F91A7A
        Validity
            Not Before: Apr 22 14:15:00 2025 GMT
            Not After : Apr 21 14:20:00 2026 GMT
        Subject: CN=5B9FB038B15E645AEAAF495B414E69B828168A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:48:a5:97:13:ff:ae:8f:28:c2:0d:e3:7c:f7:
                    90:95:77:8b:3b:5c:63:bd:65:03:3d:9f:20:82:6b:
                    03:b4:ec:ae:b5:a2:e3:11:6f:9c:3f:1f:40:8c:dc:
                    3b:c4:61:28:04:1f:a8:64:cd:3f:f4:57:a4:c0:a5:
                    4d:4b:d9:25:99:12:fc:93:86:9a:d4:37:82:1b:33:
                    ae:b4:fb:6e:4e:01:c7:49:b2:81:8d:14:0f:de:4f:
                    47:6f:a5:a5:42:df:03:d8:74:c5:ec:0c:ec:e5:40:
                    14:67:fb:03:4c:b6:0d:43:e0:0b:27:85:82:52:50:
                    16:df:ca:f3:7d:69:46:13:a7:b6:78:2e:82:aa:e2:
                    87:5f:d2:8e:1c:d1:0c:84:16:4d:56:dd:36:6a:00:
                    4b:d2:7f:ac:aa:91:ae:de:2c:0d:aa:31:f9:70:2c:
                    d7:56:59:38:6e:21:97:6a:08:4a:7e:9d:56:5c:e1:
                    aa:5a:a3:88:f1:d6:92:80:e6:11:4c:ff:b9:7c:bb:
                    cc:e8:02:94:32:07:9b:ec:0a:5b:fd:64:c7:33:6e:
                    ed:9d:a2:34:e9:82:2e:a4:ae:3d:df:f5:6a:be:df:
                    27:8c:75:97:72:52:a3:c2:51:0c:b3:43:24:50:35:
                    03:aa:36:5e:7c:c1:ba:17:48:42:11:87:07:c9:b1:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9F:B0:38:B1:5E:64:5A:EA:AF:49:5B:41:4E:69:B8:28:16:8A:08
            X509v3 Authority Key Identifier:
                keyid:58:06:F9:DC:06:2D:A8:8D:F3:93:29:EB:68:D1:55:2E:70:F9:1A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/34352e3136322e32302e302f32332d3233203d3e203531333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:e2:70:b6:dc:9f:9d:28:5d:b0:d9:59:c8:7d:a8:f0:6e:e3:
         2d:37:f8:a8:ce:b0:65:b7:39:fb:a4:46:7a:ff:76:2b:91:68:
         9a:31:4e:d8:2e:6e:e3:fb:5f:1e:c3:7d:08:c2:6a:bb:f2:65:
         83:eb:f7:d0:0f:62:e7:4a:55:3c:da:d3:8d:d9:dd:27:ab:ab:
         0f:e6:f0:c1:8a:d0:36:72:b2:f4:63:20:53:7a:d7:fb:7c:95:
         3d:6b:c9:8d:72:ea:b6:4d:c6:f0:7f:d6:02:89:00:60:67:55:
         de:a7:7f:6d:1c:a8:f4:9a:ce:9f:a3:bb:1c:68:ca:24:21:aa:
         b4:be:c2:7c:b2:76:98:d7:b1:8f:d9:54:9b:9e:7b:37:c8:e0:
         d5:b5:0a:f5:b5:52:d4:67:5d:76:f6:34:e9:4d:f2:01:2a:5c:
         e4:db:69:40:46:1e:99:b1:94:0e:05:bb:36:31:32:43:73:20:
         a3:78:05:53:b0:98:c1:2d:2b:73:8a:03:7f:e2:5b:f2:a2:ca:
         34:fd:d1:92:c3:c6:5d:5c:c4:ab:97:5e:29:24:05:18:a2:f4:
         de:39:46:19:89:73:94:b1:9c:f7:f0:0a:7b:c3:a6:85:62:eb:
         88:4e:97:6c:d9:f3:a2:f6:31:0e:e4:e1:47:84:11:39:aa:f5:
         db:99:89:a7
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULefkVX1fP+7vGlUAkX3Ao2g3vFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNkY5REMwNjJEQTg4REYzOTMyOUVCNjhEMTU1MkU3
MEY5MUE3QTAeFw0yNTA0MjIxNDE1MDBaFw0yNjA0MjExNDIwMDBaMDMxMTAvBgNV
BAMTKDVCOUZCMDM4QjE1RTY0NUFFQUFGNDk1QjQxNEU2OUI4MjgxNjhBMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSKWXE/+ujyjCDeN895CVd4s7
XGO9ZQM9nyCCawO07K61ouMRb5w/H0CM3DvEYSgEH6hkzT/0V6TApU1L2SWZEvyT
hprUN4IbM660+25OAcdJsoGNFA/eT0dvpaVC3wPYdMXsDOzlQBRn+wNMtg1D4Asn
hYJSUBbfyvN9aUYTp7Z4LoKq4odf0o4c0QyEFk1W3TZqAEvSf6yqka7eLA2qMflw
LNdWWThuIZdqCEp+nVZc4apao4jx1pKA5hFM/7l8u8zoApQyB5vsClv9ZMczbu2d
ojTpgi6krj3f9Wq+3yeMdZdyUqPCUQyzQyRQNQOqNl58wboXSEIRhwfJscaXAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUW5+wOLFeZFrqr0lbQU5puCgWiggwHwYDVR0j
BBgwFoAUWAb53AYtqI3zkynraNFVLnD5GnowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkRBQjBERDYyNjNBRkY5OTA1NDU0NDU3QkVENDA3MDE5
NkREQjA0MUNDMEMwQjRCQzZDNjQ2MTFBNjI4NDQ3LzAvNTgwNkY5REMwNjJEQTg4
REYzOTMyOUVCNjhEMTU1MkU3MEY5MUE3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81ODA2RjlEQzA2MkRBODhERjM5
MzI5RUI2OEQxNTUyRTcwRjkxQTdBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJEQUIwREQ2MjYzQUZGOTkwNTQ1NDQ1N0JFRDQwNzAxOTZEREIwNDFD
QzBDMEI0QkM2QzY0NjExQTYyODQ0Ny8wLzM0MzUyZTMxMzYzMjJlMzIzMDJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDM1MzEzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtohQwDQYJ
KoZIhvcNAQELBQADggEBAIbicLbcn50oXbDZWch9qPBu4y03+KjOsGW3OfukRnr/
diuRaJoxTtgubuP7Xx7DfQjCarvyZYPr99APYudKVTza043Z3Serqw/m8MGK0DZy
svRjIFN61/t8lT1ryY1y6rZNxvB/1gKJAGBnVd6nf20cqPSazp+juxxoyiQhqrS+
wnyydpjXsY/ZVJueezfI4NW1CvW1UtRnXXb2NOlN8gEqXOTbaUBGHpmxlA4FuzYx
MkNzIKN4BVOwmMEtK3OKA3/iW/KiyjT90ZLDxl1cxKuXXikkBRii9N45RhmJc5Sx
nPfwCnvDpoVi64hOl2zZ86L2MQ7k4UeEETmq9duZiac=
-----END CERTIFICATE-----
Generated at Wed Apr 23 17:41:57 2025 by rpki-client on console.sobornost.net