Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/e82ed51357a215a2629d10a7c10d476bb4909d32.roa
File:                     e82ed51357a215a2629d10a7c10d476bb4909d32.roa (raw, json)
Hash identifier:          f/UfCTf5BN8Z6VXBQeTdjOKufyQ6RrX7fJQGH3YCEVg=
Subject key identifier:   6B:DD:90:D1:1C:12:CB:78:56:FB:D3:50:AF:CA:29:48:3F:8A:D4:8C
Certificate issuer:       /CN=0eefd3ca564e9210c3e5d7e79504f7fd6e635260
Certificate serial:       1F5175
Authority key identifier: EE:82:5D:83:CE:B3:3E:5B:AF:24:99:89:04:8D:ED:3F:92:5C:20:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eefd3ca564e9210c3e5d7e79504f7fd6e635260.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/e82ed51357a215a2629d10a7c10d476bb4909d32.roa
Signing time:             Thu 23 Mar 2023 08:30:20 +0000
ROA not before:           Wed 22 Mar 2023 08:30:20 +0000
ROA not after:            Fri 21 Mar 2025 08:30:20 +0000
asID:                     27659
IP address blocks:        190.14.48.0/23 maxlen: 23
                          190.14.50.0/23 maxlen: 23
                          190.14.52.0/23 maxlen: 23
                          190.14.56.0/23 maxlen: 23
                          190.14.58.0/23 maxlen: 23
                          190.14.60.0/23 maxlen: 23
                          190.14.62.0/23 maxlen: 23
                          200.6.100.0/23 maxlen: 23
                          200.6.102.0/23 maxlen: 23
                          200.6.104.0/23 maxlen: 23
                          200.6.106.0/23 maxlen: 23
                          200.6.108.0/23 maxlen: 23
                          200.6.110.0/23 maxlen: 23
                          200.6.112.0/23 maxlen: 23
                          200.6.114.0/23 maxlen: 23
                          200.6.116.0/23 maxlen: 23
                          200.6.118.0/23 maxlen: 23
                          200.6.120.0/23 maxlen: 23
                          200.6.122.0/23 maxlen: 23
                          200.6.124.0/23 maxlen: 23
                          200.6.126.0/23 maxlen: 23
                          200.6.96.0/23 maxlen: 23
                          200.6.98.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052469 (0x1f5175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eefd3ca564e9210c3e5d7e79504f7fd6e635260
        Validity
            Not Before: Mar 22 08:30:20 2023 GMT
            Not After : Mar 21 08:30:20 2025 GMT
        Subject: CN=e82ed51357a215a2629d10a7c10d476bb4909d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:06:1f:70:ea:79:d4:4d:01:55:e8:a8:e5:72:
                    c2:d6:c3:42:5c:01:c1:bd:1a:92:01:90:5f:a9:ba:
                    65:23:ae:83:71:b6:ae:51:66:b5:ce:de:ad:77:ae:
                    24:ec:5e:84:91:fa:c8:57:ff:c5:28:bf:5a:ca:8c:
                    70:20:f0:fd:36:c4:e7:6b:13:45:8f:2e:85:9c:6e:
                    eb:8d:3e:61:6d:e0:08:3d:35:82:da:08:76:dc:6c:
                    a9:c1:ab:b0:c4:80:46:1d:ac:e1:d8:46:6b:ef:30:
                    a5:6b:44:08:4d:1c:fe:ab:3b:40:2f:60:1e:8c:40:
                    c8:51:97:2e:00:07:cb:3b:6b:09:d4:dd:73:69:3e:
                    2a:58:05:f2:34:47:3b:62:a4:3c:ca:0a:9e:74:f0:
                    7f:ce:a9:5c:b5:4f:fa:4c:f4:eb:c1:dc:f9:ba:54:
                    ff:95:2d:99:87:22:ed:31:f9:4a:3b:90:72:ee:d2:
                    7b:24:a6:31:2b:96:62:79:09:ad:64:65:5e:74:97:
                    14:ad:fe:6b:b6:27:0d:a0:a1:23:2e:34:ce:0f:a7:
                    3f:12:2b:ab:aa:db:bc:7d:92:26:9d:f6:04:84:15:
                    02:08:bf:5e:33:8e:68:db:6b:bd:00:1d:b1:b4:f7:
                    d7:2c:1d:09:9a:45:e2:d7:5e:38:61:67:20:90:06:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DD:90:D1:1C:12:CB:78:56:FB:D3:50:AF:CA:29:48:3F:8A:D4:8C
            X509v3 Authority Key Identifier:
                keyid:EE:82:5D:83:CE:B3:3E:5B:AF:24:99:89:04:8D:ED:3F:92:5C:20:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eefd3ca564e9210c3e5d7e79504f7fd6e635260.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/e82ed51357a215a2629d10a7c10d476bb4909d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/0eefd3ca564e9210c3e5d7e79504f7fd6e635260.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.48.0-190.14.53.255
                  190.14.56.0/21
                  200.6.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:2c:76:e9:50:d2:57:b8:2c:dd:e5:64:34:72:14:60:1e:d4:
         97:41:77:a2:2d:e1:c2:d9:79:48:cb:b9:f8:96:73:fa:32:ba:
         6a:7a:5b:2a:6c:e4:d0:6b:0b:3d:e3:e1:d3:1c:2b:64:69:3a:
         d2:47:f2:cc:36:c0:73:7c:78:a0:6f:59:50:70:57:5d:7d:86:
         1b:ab:aa:7a:7a:e5:58:e8:1e:e1:8e:7e:5e:54:40:fe:09:74:
         07:2d:c0:8e:f6:44:ae:a4:a5:0f:4c:43:d0:3c:5a:5d:29:eb:
         95:4f:36:33:d1:a5:1e:93:7b:12:66:62:0f:b6:65:cd:da:a1:
         b6:75:b8:40:5e:fc:25:6d:39:0c:56:86:ed:bc:9e:ef:49:24:
         01:16:99:02:47:cf:2e:da:81:be:e5:0c:b7:04:99:67:4c:88:
         f5:b4:23:0e:e5:65:c5:0c:75:dc:cb:ab:6b:58:75:af:ed:7a:
         91:0c:62:80:06:aa:61:bc:aa:d6:df:85:05:d3:c6:91:24:66:
         34:4b:9a:0b:ab:55:94:f0:bd:5e:15:19:d9:84:73:2e:ef:02:
         25:43:c0:8b:84:7b:a2:d2:1e:ec:3d:c3:5c:5a:4c:69:66:ec:
         ee:6c:1b:02:66:87:26:d3:f2:43:28:e1:7d:ac:13:40:bf:fc:
         36:99:e9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 18:47:34 2023 by rpki-client on console-fra.rpki-client.org