Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39332e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e39332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          n/xdowr6PFJn1qzAwLvvxCNp7jCBe0dIw8KsTANjmBI=
Subject key identifier:   E0:2A:AD:41:1C:72:B3:88:2E:84:DE:D3:8C:E4:EE:CF:3C:E6:AB:63
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       1F71BD6B902ABECB1A871EAFD4E936153EAAAAB1
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39332e302f32342d3234203d3e20383334.roa
Signing time:             Wed 01 May 2024 13:55:00 +0000
ROA not before:           Wed 01 May 2024 13:50:00 +0000
ROA not after:            Wed 30 Apr 2025 13:55:00 +0000
asID:                     834
IP address blocks:        190.93.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 May 2024 11:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:71:bd:6b:90:2a:be:cb:1a:87:1e:af:d4:e9:36:15:3e:aa:aa:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: May  1 13:50:00 2024 GMT
            Not After : Apr 30 13:55:00 2025 GMT
        Subject: CN=E02AAD411C72B3882E84DED38CE4EECF3CE6AB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:d6:9c:04:04:f4:4d:fa:b9:46:21:65:e1:
                    d4:49:1f:ba:b7:81:fa:16:83:07:d1:ce:60:72:91:
                    3c:4e:11:95:3c:25:92:04:bd:ac:ff:11:f0:77:74:
                    21:77:30:4f:77:0f:55:c8:44:65:bc:d2:e8:0a:15:
                    64:7e:9d:7c:b0:63:a0:50:d8:de:50:3e:4e:06:5f:
                    1d:b6:05:74:72:21:4f:f5:51:c9:a7:31:59:73:0d:
                    67:39:a2:74:05:e5:82:2f:74:2a:fd:17:ed:cf:3f:
                    d9:42:05:d1:8c:90:54:13:29:ee:40:da:20:a8:dc:
                    02:6d:44:59:52:d6:1a:05:20:67:8f:90:be:a8:05:
                    b8:16:fc:23:81:d4:1e:c3:19:08:7d:84:e4:2d:33:
                    9e:01:18:56:58:4a:cc:e8:6c:a0:84:ce:35:06:45:
                    74:0c:17:7b:4e:d1:96:8d:1d:2a:bd:6a:8c:03:46:
                    33:46:39:01:9d:83:20:f3:0a:4b:bf:77:61:bd:48:
                    48:32:7b:8f:1a:4a:8c:c2:22:49:fc:69:03:46:b5:
                    16:8b:3e:42:ea:bc:76:59:37:96:25:6b:c8:43:53:
                    b9:29:9c:f1:e4:3f:da:34:29:98:3d:e4:d3:12:ee:
                    c2:6b:9c:d1:7f:c8:f8:d8:c9:70:9e:5f:49:f6:55:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2A:AD:41:1C:72:B3:88:2E:84:DE:D3:8C:E4:EE:CF:3C:E6:AB:63
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:8c:13:ce:17:fc:2c:fc:98:6d:fb:eb:cf:29:13:63:2f:48:
         10:15:aa:c4:81:0a:ae:08:a5:89:8d:f8:3a:d0:8c:f3:65:a3:
         5f:86:c5:7c:d1:63:4d:74:dd:6c:b2:12:46:a1:d1:4b:5d:2d:
         b7:e4:2f:9c:8c:6c:6e:53:cf:99:93:01:85:b4:e6:48:6a:e3:
         ee:49:a1:c6:76:b9:08:aa:08:ec:f8:9c:9c:50:56:87:a1:5f:
         f5:91:b2:90:54:7f:40:f6:00:db:0a:6a:67:33:e7:d6:8d:de:
         40:05:54:3d:a0:2e:bf:b3:ba:94:47:49:91:49:9a:80:06:c7:
         34:9f:15:86:b9:f5:39:75:bf:c2:66:af:1d:18:8b:cb:c0:fc:
         2e:57:ad:02:32:34:61:97:c4:d1:28:90:31:f1:da:cb:aa:f9:
         71:1b:0a:cc:f4:13:84:5d:a4:82:c6:e2:2d:9e:16:bf:80:bc:
         b1:60:ad:a6:c0:fb:79:c6:38:b2:f5:01:4e:90:f8:ef:f5:42:
         19:7c:2a:90:1a:68:4e:86:57:14:97:5c:c6:02:ce:d2:15:f4:
         b0:c9:72:c3:a3:fd:a9:44:c5:e8:37:ce:b0:be:ff:9a:54:10:
         fb:b4:1a:69:53:37:9a:9c:66:53:d9:6d:eb:06:c1:3e:03:bb:
         78:99:9a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org