Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35edb4a0-d1cc-4489-b575-3c29f055b3c3/4895df96104320fc7844928038d9e122c9250b81.roa
File:                     4895df96104320fc7844928038d9e122c9250b81.roa (raw, json)
Hash identifier:          AlZc4yb4mGXC8f3XaES+kQ/rq6LWVql6IWjar7J4F9s=
Subject key identifier:   FA:C1:D7:FC:A0:02:84:80:16:FC:DC:7C:92:26:F5:0E:06:92:F7:60
Certificate issuer:       /CN=191101b10952d6795e5429d39bf676c36c363200
Certificate serial:       19282D
Authority key identifier: 90:A9:19:9B:54:00:46:78:57:F8:5D:B3:CB:74:77:41:AF:95:1F:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/191101b10952d6795e5429d39bf676c36c363200.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35edb4a0-d1cc-4489-b575-3c29f055b3c3/4895df96104320fc7844928038d9e122c9250b81.roa
Signing time:             Tue 05 Jul 2022 19:10:30 +0000
ROA not before:           Tue 05 Jul 2022 03:00:00 +0000
ROA not after:            Fri 05 Jul 2024 03:00:00 +0000
asID:                     263739
IP address blocks:        138.59.0.0/22 maxlen: 24
                          2803:3f80::/32 maxlen: 56

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1648685 (0x19282d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191101b10952d6795e5429d39bf676c36c363200
        Validity
            Not Before: Jul  5 03:00:00 2022 GMT
            Not After : Jul  5 03:00:00 2024 GMT
        Subject: CN=4895df96104320fc7844928038d9e122c9250b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:69:f9:0c:be:cf:2a:00:19:fa:a4:d9:33:
                    18:49:c7:49:a9:f2:a6:72:72:c3:89:bb:91:da:41:
                    93:cc:52:aa:f3:06:17:5b:84:d0:7c:c0:5d:24:78:
                    14:5b:d4:59:14:f6:30:01:0f:f2:e1:63:1e:20:0b:
                    17:80:86:1d:ac:51:26:3a:6a:13:d4:82:67:d1:de:
                    46:2b:8d:b4:26:2e:c1:4e:77:4b:b7:73:94:a8:40:
                    e3:2b:1d:45:ab:db:10:1c:df:0e:a2:92:94:7e:f5:
                    d2:a4:3d:9a:cc:cf:15:0c:b6:49:4f:8f:a0:5d:c9:
                    19:64:a5:96:1c:5a:6a:d8:35:c5:ac:38:de:01:9f:
                    7d:ac:8f:3c:70:af:cd:c4:20:50:72:e8:4b:0e:3c:
                    e7:ec:55:d4:03:56:da:1b:1b:f1:a2:93:26:b2:17:
                    0a:34:20:31:58:29:96:93:69:49:4b:0d:8d:64:db:
                    1d:ff:6c:33:43:4f:b5:bc:60:62:4d:af:8f:1a:95:
                    45:ea:55:fb:ee:75:89:5e:75:56:ff:8c:9e:9a:01:
                    62:2d:eb:c6:90:df:e0:61:bb:6e:57:71:f5:50:89:
                    d0:17:74:f5:3d:43:90:e3:65:0c:db:f9:b5:e2:6a:
                    a2:bb:8d:81:e8:bd:da:72:fd:f1:34:0c:4a:38:0b:
                    7a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C1:D7:FC:A0:02:84:80:16:FC:DC:7C:92:26:F5:0E:06:92:F7:60
            X509v3 Authority Key Identifier:
                keyid:90:A9:19:9B:54:00:46:78:57:F8:5D:B3:CB:74:77:41:AF:95:1F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/191101b10952d6795e5429d39bf676c36c363200.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35edb4a0-d1cc-4489-b575-3c29f055b3c3/4895df96104320fc7844928038d9e122c9250b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35edb4a0-d1cc-4489-b575-3c29f055b3c3/191101b10952d6795e5429d39bf676c36c363200.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.0.0/22
                IPv6:
                  2803:3f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:04:1c:31:52:5d:f1:9a:e8:63:0c:af:a5:83:30:d6:ba:af:
         eb:8b:b9:4c:e0:d5:6f:4b:12:71:75:d6:10:cb:99:d1:6b:ad:
         5f:70:ea:b2:55:8e:df:3d:a1:77:10:04:57:d3:25:90:bc:19:
         a0:c1:c4:ff:a4:47:0b:a3:33:45:de:f5:67:29:03:47:6b:bb:
         8f:89:88:54:42:29:b4:43:65:5b:00:7e:7b:a7:66:76:8e:d5:
         0d:16:e7:48:a1:42:94:6c:26:78:98:67:ec:84:fc:de:e3:74:
         fe:bd:b4:d4:6c:c6:d4:af:31:85:bd:b7:34:c9:17:1c:38:23:
         29:4b:1b:a3:c3:be:ea:5f:77:1a:4f:79:9a:23:0e:b1:ad:d9:
         fd:15:f4:16:71:15:44:91:5c:96:4c:e2:33:8b:1d:74:ec:a2:
         9e:93:98:3f:5d:a9:59:88:db:df:05:13:0b:b7:0f:c3:b0:29:
         2a:05:64:02:f9:a6:63:b4:10:aa:85:9d:d9:00:6c:83:75:a5:
         df:08:3e:32:cb:36:95:41:ab:22:b3:3e:b7:f5:59:66:cb:08:
         c0:72:60:db:b6:48:fd:c9:9a:8e:fc:e1:8f:73:0c:63:ec:45:
         a5:e0:3f:af:28:9e:f2:4a:e6:53:ce:97:c0:d6:ea:e9:20:72:
         fd:53:35:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org