Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10a66029-9837-460d-b4c0-76df2d5a1730/8a087a8183de5e2a8e7d0ef87100949ea1d8da8f.roa
File:                     8a087a8183de5e2a8e7d0ef87100949ea1d8da8f.roa (raw, json)
Hash identifier:          fM0pvP6PSAviYxu1d3/NL2TywjbCU1paWa+3vAxwGeY=
Subject key identifier:   2B:45:60:EA:92:96:7D:05:15:A1:1E:0D:5C:E2:28:FE:48:72:B6:12
Certificate issuer:       /CN=919b8ddca443dca5af7dde710225040d3f9e4ebb
Certificate serial:       23AC6D
Authority key identifier: CB:68:9E:CC:9E:81:F1:02:85:6E:91:05:D9:6F:7F:4C:51:64:01:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/919b8ddca443dca5af7dde710225040d3f9e4ebb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10a66029-9837-460d-b4c0-76df2d5a1730/8a087a8183de5e2a8e7d0ef87100949ea1d8da8f.roa
Signing time:             Sat 19 Aug 2023 08:30:01 +0000
ROA not before:           Fri 18 Aug 2023 08:30:01 +0000
ROA not after:            Sun 17 Aug 2025 08:30:01 +0000
asID:                     28007
IP address blocks:        190.113.80.0/24 maxlen: 24
                          190.113.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2337901 (0x23ac6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919b8ddca443dca5af7dde710225040d3f9e4ebb
        Validity
            Not Before: Aug 18 08:30:01 2023 GMT
            Not After : Aug 17 08:30:01 2025 GMT
        Subject: CN=8a087a8183de5e2a8e7d0ef87100949ea1d8da8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:84:85:fd:f3:2d:90:23:cf:48:65:30:3e:
                    0c:63:6a:61:31:43:a5:9c:8c:7a:f5:72:a6:a3:8a:
                    80:34:18:10:73:5c:27:e0:e9:a8:a8:0a:bc:97:b0:
                    6c:18:b2:bf:0f:5d:ec:dc:47:f8:f9:2e:d8:53:27:
                    d7:74:0c:61:09:78:0e:49:ae:df:48:91:31:98:40:
                    c4:94:3b:7b:58:0e:28:af:78:59:ee:b2:eb:52:82:
                    e0:38:0a:b2:31:a7:07:1e:2e:c8:a4:52:4b:e1:a5:
                    77:c4:74:07:8e:9d:68:94:cf:3b:90:1b:c5:28:f1:
                    3a:f5:04:04:ce:82:22:93:6a:8e:2d:2a:cf:ce:4d:
                    db:cb:42:a1:74:8d:24:5b:ba:24:bc:a9:be:12:de:
                    bd:6c:fe:be:19:59:8e:05:a4:ac:9f:6e:0f:05:5a:
                    00:53:9c:29:85:c4:a2:e5:31:62:71:28:96:79:90:
                    df:b4:17:22:57:91:33:c2:bb:5f:6a:eb:c0:d9:5f:
                    73:a1:4c:fa:8d:c9:26:7a:1a:9a:60:55:11:91:9f:
                    03:69:34:1e:06:41:4e:81:1e:cd:5b:fd:15:b0:e5:
                    af:8d:38:e6:1a:32:2d:4a:0a:bb:75:bf:d6:39:50:
                    6a:11:ae:cb:22:d0:7a:8b:d6:e6:54:5b:52:ef:10:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:45:60:EA:92:96:7D:05:15:A1:1E:0D:5C:E2:28:FE:48:72:B6:12
            X509v3 Authority Key Identifier:
                keyid:CB:68:9E:CC:9E:81:F1:02:85:6E:91:05:D9:6F:7F:4C:51:64:01:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/919b8ddca443dca5af7dde710225040d3f9e4ebb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10a66029-9837-460d-b4c0-76df2d5a1730/8a087a8183de5e2a8e7d0ef87100949ea1d8da8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10a66029-9837-460d-b4c0-76df2d5a1730/919b8ddca443dca5af7dde710225040d3f9e4ebb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.80.0/24
                  190.113.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:47:d1:8a:86:7d:3d:f4:f1:53:bb:94:09:91:55:71:a2:78:
         d9:b7:97:6b:99:94:d7:73:e8:dd:f3:79:1f:6a:19:ff:41:cc:
         c6:1c:2c:0b:02:21:0e:af:b0:e3:01:1d:84:37:35:ac:40:4f:
         06:6e:61:a1:a3:13:a2:87:01:f3:4f:56:7f:11:32:17:b6:de:
         4f:bd:da:62:ac:6f:67:6a:22:2e:e4:5b:f4:c1:84:f6:c2:ba:
         a9:3a:ab:ad:36:89:9f:e1:7b:7e:9c:bb:30:ca:1d:f4:6f:d0:
         7a:8c:3d:40:74:17:57:61:25:e6:b8:c6:9e:c6:7f:15:2d:6d:
         9f:d2:b6:77:28:31:53:a8:b3:49:c3:17:d9:32:16:da:20:1d:
         e3:27:7a:d6:d2:e2:a4:60:22:fe:e8:19:ae:1a:72:c9:d3:f4:
         44:2f:1d:d3:ad:29:dd:a2:f7:9f:0f:d6:e3:92:a1:c7:5c:2e:
         97:ba:04:0f:be:b8:38:01:5a:ff:a1:6b:ce:d5:51:c8:a4:72:
         ed:33:38:7a:a9:68:c3:a5:6a:f8:71:fb:91:7e:5f:15:d9:5d:
         a5:60:b3:35:50:2f:e4:0a:f6:cb:1c:80:5c:fd:42:ca:26:0b:
         9b:c6:86:32:8e:0f:03:1e:89:56:f1:72:dd:fc:c4:38:4b:8f:
         6a:c0:b6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 19:13:55 2023 by rpki-client on console-ams.rpki-client.org