Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e39342e302f32342d3234203d3e203138363738.roa
File:                     3139302e39302e39342e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          /+TsohurDDuwsnmYhqe99ks0ttI7XmfexDjwwkTsv7A=
Subject key identifier:   65:24:10:C5:72:AA:5F:0A:59:9E:B7:0B:FE:FD:84:EF:E6:E2:4D:A4
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       440120F0FDD9C31237EB7C7957AE79E6E07515C4
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e39342e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 18:00:49 +0000
ROA not before:           Tue 05 Mar 2024 17:55:49 +0000
ROA not after:            Tue 04 Mar 2025 18:00:49 +0000
asID:                     18678
IP address blocks:        190.90.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:01:20:f0:fd:d9:c3:12:37:eb:7c:79:57:ae:79:e6:e0:75:15:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:49 2024 GMT
            Not After : Mar  4 18:00:49 2025 GMT
        Subject: CN=652410C572AA5F0A599EB70BFEFD84EFE6E24DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:2d:63:af:07:9c:06:0b:48:6a:d3:07:ff:
                    c7:a9:60:86:1f:88:fe:7c:59:f6:87:d0:43:8e:5a:
                    fd:2f:31:6f:1a:dc:f6:c2:b3:30:60:7f:c5:ba:44:
                    5d:e2:db:24:d0:95:b2:de:0e:13:1b:99:46:53:45:
                    30:bd:bb:0c:7f:5e:45:9c:bd:a9:02:c8:12:a0:5a:
                    4d:f1:6c:cf:4b:ca:cb:c9:56:2d:7d:ec:40:a5:7e:
                    a2:a4:9b:0d:40:c2:62:40:8e:a0:47:a4:6d:30:7f:
                    ba:7c:5e:e0:9a:6e:ca:e9:26:04:12:35:1e:1a:af:
                    2e:58:7a:f0:72:1e:bc:47:ed:9d:c8:9a:dc:9d:3d:
                    1e:08:92:53:44:55:6b:2c:77:53:97:82:94:58:27:
                    20:86:08:f0:8c:06:ee:14:8f:d7:89:6e:9d:cf:f0:
                    99:05:42:20:79:aa:66:e2:33:0a:52:88:a1:ae:c3:
                    6c:d3:a9:d3:f1:d6:c4:e5:65:08:f6:16:03:d3:da:
                    7c:d9:0d:fd:98:73:b9:8e:1e:10:d4:9d:27:14:2a:
                    62:4d:3d:d9:74:f3:66:00:c0:b6:9e:9a:7d:81:29:
                    af:01:24:f3:f0:77:9b:6b:d7:4a:24:81:d9:ce:e9:
                    83:4e:07:87:16:9b:ff:e5:9c:55:b5:68:63:82:03:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:24:10:C5:72:AA:5F:0A:59:9E:B7:0B:FE:FD:84:EF:E6:E2:4D:A4
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e39342e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:1f:38:33:87:9e:07:e3:06:f8:3a:0a:aa:b8:8e:ec:92:49:
         ca:aa:60:14:21:ce:2a:2e:aa:59:86:50:77:83:04:0a:65:39:
         8b:01:98:19:fa:f1:92:49:08:2e:9b:80:3b:5b:a9:d0:ad:9f:
         4b:91:ae:f3:cc:54:8a:84:5f:ae:66:23:e5:87:08:3f:85:d6:
         4e:cd:b5:89:dc:9d:c9:73:5d:57:9f:0a:18:db:0f:24:b0:bd:
         de:04:7a:a8:c3:34:49:59:53:00:71:d7:75:34:12:ee:fd:66:
         f9:ba:f1:75:cf:5a:41:77:00:04:45:3a:5f:b3:23:6a:ef:5e:
         5a:b1:c8:0b:44:9c:27:a3:7e:84:a0:fc:05:4c:49:ec:c3:f8:
         cd:dd:f2:a3:40:1e:b1:d3:c1:9b:7d:fb:b9:49:86:b4:05:7c:
         89:bb:ed:04:86:20:9b:7f:a3:25:10:e7:a2:69:1c:a6:1a:13:
         b6:e3:88:c0:59:41:2c:6c:3f:24:39:0e:0f:8a:b1:2f:23:39:
         94:0a:94:70:e0:ff:65:e3:1d:d9:b6:48:df:c9:31:79:bc:1a:
         d9:b7:7a:30:52:be:bb:ba:a4:f9:76:bf:d0:24:b7:81:4f:88:
         a1:81:9c:17:8f:87:7d:58:d9:51:f7:5b:9d:dc:cc:71:57:9e:
         44:1a:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 18:31:50 2024 by rpki-client on console-ams.rpki-client.org