Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132312e302f32342d3234203d3e203138363738.roa
File:                     3139302e39302e3132312e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          guS4Rr8UNOPcCJhy7wGPGjXz2dQP7TSHctClJcc4LOw=
Subject key identifier:   53:2A:33:55:6E:E3:01:79:44:23:3D:0B:02:B2:A9:4B:75:BB:90:A6
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       0314041378F7819AAEEC6C48730B8CBA5EC3792B
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132312e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 18:00:33 +0000
ROA not before:           Tue 05 Mar 2024 17:55:33 +0000
ROA not after:            Tue 04 Mar 2025 18:00:33 +0000
asID:                     18678
IP address blocks:        190.90.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:14:04:13:78:f7:81:9a:ae:ec:6c:48:73:0b:8c:ba:5e:c3:79:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:33 2024 GMT
            Not After : Mar  4 18:00:33 2025 GMT
        Subject: CN=532A33556EE3017944233D0B02B2A94B75BB90A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:22:99:8f:2d:ad:90:38:5b:70:44:cd:30:
                    bb:eb:36:93:6e:aa:85:db:24:91:82:d2:7c:c1:c9:
                    ee:83:30:76:30:bd:1b:d9:4e:e8:71:b7:34:52:a1:
                    7a:de:8f:6b:91:34:66:f3:78:4a:81:03:4d:fa:ba:
                    0e:ac:3c:13:9d:75:3b:e7:8f:94:37:c8:db:ff:8c:
                    94:1d:dc:20:24:92:ef:8a:84:56:64:c2:b3:56:b5:
                    9b:8f:06:47:6a:8d:db:20:7e:20:cc:aa:78:ea:75:
                    32:3c:40:68:4e:c3:73:27:f5:35:3a:2b:7d:a6:31:
                    21:0e:58:7b:1f:9f:92:e0:ea:5d:83:11:b0:c7:9f:
                    25:b5:98:2f:bc:a3:bf:f5:4d:8e:6b:95:f3:56:0c:
                    34:dd:e7:7c:9b:aa:a5:38:5a:73:d4:ca:47:24:c9:
                    ea:f4:51:12:ff:5f:4c:ee:58:06:a4:f8:4e:92:c0:
                    82:9c:e0:ef:0d:ab:aa:57:5e:9a:c6:b9:eb:a7:0d:
                    c7:11:6f:28:95:21:4f:5c:56:cc:a6:d6:40:c4:96:
                    60:b5:de:f5:21:2b:05:7c:ae:3a:70:62:2e:25:ef:
                    a0:f0:dd:08:01:cc:27:22:47:51:02:49:4b:2a:84:
                    b6:f2:2a:3e:b0:79:21:a9:29:f7:89:1f:39:82:58:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2A:33:55:6E:E3:01:79:44:23:3D:0B:02:B2:A9:4B:75:BB:90:A6
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132312e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:97:8e:9e:d6:91:da:c9:a1:ec:81:e5:2c:4c:b2:c8:8b:5d:
         c9:be:7c:67:4e:20:2c:45:b7:21:7a:4e:53:00:63:9c:cf:4f:
         6e:a0:be:bf:e2:23:f6:f9:bf:34:e4:87:9e:0d:69:3c:e9:cf:
         ee:62:3d:ac:53:aa:10:c4:b0:40:6c:7d:75:00:b4:c9:0e:33:
         02:f6:6f:a4:25:f6:b8:d2:d0:65:34:99:b4:ad:57:0c:ea:44:
         d3:9d:da:32:4f:d1:63:3c:76:35:ad:b8:3f:bc:b1:31:5a:38:
         1b:50:6b:c6:b6:19:9e:4a:6c:4d:19:e5:d3:0a:2f:07:ee:7c:
         38:16:d9:be:f3:d3:c0:e0:ca:bb:1d:3e:64:0f:f0:14:2c:33:
         65:b6:67:d9:80:40:12:c1:d2:be:8f:1a:05:c3:1f:80:95:fc:
         5c:3b:6b:29:fe:f3:0b:65:8f:61:a6:e3:09:2d:b1:9c:65:66:
         41:f3:1d:ab:ad:82:6a:07:2e:a5:70:d6:c7:3f:95:0f:67:fc:
         e6:4f:43:50:99:11:fe:04:36:ab:ee:41:77:bd:b3:47:b2:da:
         51:ab:75:6a:c6:b3:d9:db:23:18:1a:76:4b:12:40:d4:13:89:
         f2:26:9b:60:6b:1c:b6:2c:96:c9:7d:f8:2c:e3:d0:63:24:3c:
         bf:9f:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 18:57:40 2024 by rpki-client on console-fra.rpki-client.org