Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/89fe04e523eb0e766f415329cf4c6ce717563e19.roa
File:                     89fe04e523eb0e766f415329cf4c6ce717563e19.roa (raw, json)
Hash identifier:          aPAnyKMxzAj22957SmuWd/Ek++PdPZGsNV0c1LpZDBk=
Subject key identifier:   7A:D1:C9:AB:93:BC:37:DE:88:C6:57:D1:45:38:65:59:8A:27:46:78
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       111082
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/89fe04e523eb0e766f415329cf4c6ce717563e19.roa
Signing time:             Fri 13 Aug 2021 15:00:22 +0000
ROA not before:           Fri 13 Aug 2021 15:00:21 +0000
ROA not after:            Thu 13 Aug 2026 15:00:21 +0000
asID:                     28006
IP address blocks:        190.9.184.0/21 maxlen: 24
                          190.9.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118338 (0x111082)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Aug 13 15:00:21 2021 GMT
            Not After : Aug 13 15:00:21 2026 GMT
        Subject: CN=89fe04e523eb0e766f415329cf4c6ce717563e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:1c:12:54:3c:74:3b:97:c6:fb:dc:20:2f:
                    86:7c:ee:d8:68:53:54:05:d1:26:f9:4d:e3:e1:d1:
                    ea:e7:72:a7:2d:d0:3d:b4:30:9d:ec:7b:38:c6:57:
                    65:73:29:ba:4a:10:94:d9:85:10:4e:78:31:5b:4f:
                    f0:45:29:0d:aa:8f:c7:0d:2e:79:10:21:4f:78:09:
                    82:88:60:c0:06:c0:fb:fd:29:8a:5d:38:6c:28:0a:
                    5b:13:f5:ef:e7:ea:5f:77:bb:08:d7:30:cc:f9:d3:
                    a0:39:66:ae:c9:63:65:a0:ba:2b:41:f8:eb:83:90:
                    97:8c:cf:a2:26:e0:64:86:64:30:a8:8c:ab:74:9e:
                    4b:97:05:5d:aa:34:89:7d:4c:5e:9b:6c:e3:ca:ae:
                    7c:10:cd:f0:02:98:66:dc:43:ba:f2:e0:7c:fd:4d:
                    09:e0:1c:bc:26:02:7c:5f:a9:cf:0a:94:4f:a9:4a:
                    3c:7e:b6:e2:67:6f:96:37:4c:82:9b:24:78:45:67:
                    f9:04:3f:04:dc:2b:48:5e:6a:00:2f:7c:68:1a:cd:
                    00:84:f5:92:47:c6:bd:a2:32:c4:b7:5b:8a:4f:14:
                    00:d3:0f:bd:ec:b1:e1:f1:6e:a5:b6:54:d5:6a:e8:
                    a7:fc:b0:0c:af:95:6a:f9:93:41:bc:04:68:59:6b:
                    6b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D1:C9:AB:93:BC:37:DE:88:C6:57:D1:45:38:65:59:8A:27:46:78
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/89fe04e523eb0e766f415329cf4c6ce717563e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:96:13:89:b2:db:c4:a8:a4:91:25:62:57:26:7c:b1:64:bf:
         60:99:f1:e3:9f:85:6f:c9:e3:0c:be:42:3e:ac:ff:4f:53:87:
         be:7c:77:13:bd:5e:95:5c:ab:ea:b4:f9:e0:0b:ce:ac:c1:fe:
         1d:31:5f:6f:9d:c9:c7:24:dd:69:4b:7f:21:03:f5:26:77:78:
         0a:2f:c1:da:ee:cb:69:d8:fc:02:ca:87:d4:6e:ff:06:6a:4b:
         4c:de:f1:93:0a:b4:e6:15:da:36:b6:a6:db:d9:8e:87:80:a7:
         86:d9:e4:9e:29:6f:6a:d9:87:81:0f:9d:bd:f5:82:cd:12:c6:
         ad:31:28:d8:aa:73:50:53:05:d2:91:a2:51:0f:58:8e:7c:0c:
         3d:4c:85:cd:ec:48:c5:74:5b:1a:e5:0a:13:e8:b6:4e:d8:91:
         68:41:11:cf:65:72:71:32:52:48:cf:48:38:10:28:66:52:fc:
         91:44:47:4f:63:a9:e0:90:b4:26:2c:9c:97:f0:b4:41:d3:5f:
         46:73:55:ac:09:ff:5f:6d:b1:63:34:b6:bb:ab:fd:17:99:9c:
         16:4d:51:77:32:00:bb:53:86:95:a2:ac:d2:23:9f:e2:eb:82:
         f7:d2:e2:fa:c9:45:45:f2:83:ec:ed:64:3d:46:c5:8a:69:b0:
         ff:d6:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org