Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/5c4dda95d17b8602942cf7942a0d55cc59cac338.roa
File:                     5c4dda95d17b8602942cf7942a0d55cc59cac338.roa (raw, json)
Hash identifier:          fWUbxBVsRoFhPO3j8t8OnPdvmg+N7iVZJL0moI+Y6Q8=
Subject key identifier:   18:DC:DF:46:7C:4F:94:CE:94:1F:FD:E4:B5:5B:47:9A:5C:5E:DD:7D
Certificate issuer:       /CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
Certificate serial:       E798
Authority key identifier: 95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/5c4dda95d17b8602942cf7942a0d55cc59cac338.roa
Signing time:             Sun 14 May 2023 02:36:29 +0000
ROA not before:           Sat 13 May 2023 02:36:29 +0000
ROA not after:            Wed 14 May 2025 02:36:29 +0000
asID:                     271945
IP address blocks:        190.110.32.0/24 maxlen: 24
                          190.110.33.0/24 maxlen: 24
                          190.110.34.0/24 maxlen: 24
                          2803:e610::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59288 (0xe798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
        Validity
            Not Before: May 13 02:36:29 2023 GMT
            Not After : May 14 02:36:29 2025 GMT
        Subject: CN=5c4dda95d17b8602942cf7942a0d55cc59cac338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:46:4c:64:9c:54:1a:9d:71:ec:90:51:74:
                    41:ac:af:15:b5:d4:0b:c0:96:2b:3a:6e:22:11:b6:
                    00:78:c6:ba:78:25:2d:64:b6:f3:f7:5e:14:88:89:
                    9d:64:e0:a2:d4:b1:52:a1:85:b4:91:c4:a2:ec:24:
                    bc:f5:e2:28:80:dc:02:57:e4:a7:89:86:ab:e5:50:
                    25:2c:55:fb:9a:07:24:96:29:c6:9e:47:11:e9:2c:
                    ff:17:5a:12:00:a6:6b:35:1e:ad:fb:f1:f6:6f:bb:
                    44:79:d2:a8:db:27:e7:2b:2e:42:30:ae:2d:45:b4:
                    42:fd:a4:72:ec:57:6e:77:00:68:d5:36:05:95:e5:
                    a3:e8:07:77:a5:9d:21:44:61:0e:9e:c7:e3:e0:7e:
                    a2:0f:93:81:28:15:c3:11:de:a3:da:8e:6a:e0:62:
                    8a:da:b2:a5:60:37:f4:f7:0f:af:85:ff:6d:1b:b5:
                    90:78:08:01:00:ae:bd:28:c7:34:20:fe:bd:a3:2b:
                    1d:01:4f:07:5b:23:65:52:1c:89:d0:bf:b3:d9:d7:
                    0f:13:0e:56:3a:57:d9:33:c9:d8:ed:63:db:5a:a2:
                    82:86:ff:e8:d0:b4:96:2b:f2:03:7b:f6:d6:e1:31:
                    b0:ff:43:28:8c:82:3f:10:99:1b:6f:94:91:28:22:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DC:DF:46:7C:4F:94:CE:94:1F:FD:E4:B5:5B:47:9A:5C:5E:DD:7D
            X509v3 Authority Key Identifier:
                keyid:95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/5c4dda95d17b8602942cf7942a0d55cc59cac338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.32.0-190.110.34.255
                IPv6:
                  2803:e610::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:72:bc:ad:85:2d:a1:9e:05:ab:ef:cb:1d:79:99:6f:f4:32:
         3b:0b:1f:22:3c:5e:14:17:7c:44:f7:88:97:e8:28:87:fa:2d:
         aa:a5:f1:5d:6c:e5:56:4a:51:6b:fb:bc:3c:55:13:ef:36:53:
         04:8d:6f:65:9e:14:49:85:1a:17:aa:ef:79:5e:86:7c:de:6c:
         b4:29:2f:9d:4a:28:f0:cd:d6:5c:07:12:cd:ff:49:7e:b2:ea:
         7e:f1:e7:cd:98:13:eb:a8:da:68:5c:f4:f6:86:4c:0f:cd:67:
         56:74:c5:5d:ca:17:b9:75:30:18:c9:b6:a3:5d:76:c5:b4:d8:
         28:8d:b2:d0:ae:1a:b4:d4:31:e0:81:44:c9:1b:ad:ab:e6:a5:
         0e:76:fb:14:63:20:b2:27:5f:db:8a:33:c0:fb:6c:9f:04:dc:
         c1:aa:b0:5a:1d:e4:24:2f:51:6f:d1:0a:02:66:ce:c6:33:ca:
         96:c4:7b:6f:70:81:0e:73:27:83:4c:7b:86:c3:1e:ee:a0:4d:
         84:41:b9:2a:e3:6f:58:c1:e3:23:ad:f3:bf:7b:46:96:b3:2b:
         60:64:73:1d:a6:05:b7:d2:80:59:d8:dd:03:2b:a7:09:ae:1c:
         59:cf:60:52:3b:ac:b9:5f:69:37:6c:50:6a:3d:48:db:27:90:
         31:f5:49:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org