Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e203230343733.roa
File:                     3139302e39332e3130352e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          QJloyqdJDEEtErwYXKpt7ytWHvsgoS7SOFo3Dih5UfI=
Subject key identifier:   61:D0:82:08:D4:68:DB:D2:E4:F5:D1:A3:B0:5E:D6:BE:CB:4E:5E:35
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       3236E803B0FDB51CA9A780EBA045000F9174D079
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e203230343733.roa
Signing time:             Fri 08 Nov 2024 10:55:00 +0000
ROA not before:           Fri 08 Nov 2024 10:50:00 +0000
ROA not after:            Fri 07 Nov 2025 10:55:00 +0000
asID:                     20473
IP address blocks:        190.93.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 09 Nov 2024 02:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:36:e8:03:b0:fd:b5:1c:a9:a7:80:eb:a0:45:00:0f:91:74:d0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Nov  8 10:50:00 2024 GMT
            Not After : Nov  7 10:55:00 2025 GMT
        Subject: CN=61D08208D468DBD2E4F5D1A3B05ED6BECB4E5E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:5e:5a:ac:76:8c:0f:4b:ee:f8:ea:d0:d3:
                    66:72:a3:f7:6c:19:70:3e:02:dc:7c:ed:cb:92:e7:
                    b3:f0:70:72:da:b0:ab:a4:be:7e:dd:0d:85:a8:52:
                    2f:97:55:66:bb:ea:c0:d4:a6:29:d5:db:76:8c:15:
                    36:bb:5b:c7:1f:74:cb:b5:93:b0:51:93:d7:b9:08:
                    20:20:d0:33:70:00:47:79:a5:f5:00:a9:1e:a1:f1:
                    80:21:1a:a2:4a:da:39:da:3d:17:e9:66:81:88:08:
                    bb:bb:25:81:53:44:69:41:2d:dd:8e:e2:49:05:6d:
                    96:73:6f:0b:67:37:8c:d3:95:67:71:87:60:27:4c:
                    41:7d:21:38:6f:88:1d:f1:a9:94:06:1c:5b:e6:b4:
                    f0:53:ff:d4:78:81:2f:cf:7f:58:d5:59:2d:92:fc:
                    fc:d3:1c:61:67:cb:0f:bb:6b:89:03:04:4b:a0:de:
                    65:ac:67:24:9d:a2:39:9e:4c:86:43:73:9d:29:3b:
                    4f:ea:e1:6f:a3:04:3d:e5:3d:0d:27:e7:0a:cb:8f:
                    84:72:5f:f5:7d:e6:09:4b:fc:3d:19:83:f0:da:e5:
                    19:6f:f7:73:a7:05:d9:79:ef:0c:fc:0b:b6:d7:15:
                    56:18:f9:89:4c:1b:08:e6:b0:69:4a:05:72:05:42:
                    28:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D0:82:08:D4:68:DB:D2:E4:F5:D1:A3:B0:5E:D6:BE:CB:4E:5E:35
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c9:b7:1a:c1:a6:41:8c:60:19:c1:41:fc:ff:c5:51:33:86:
         aa:8e:fe:f7:f1:8f:44:19:48:c9:72:57:77:84:f0:0a:b5:a5:
         97:85:5f:00:0d:c9:bd:8d:93:03:a9:ab:01:e9:0a:57:f5:33:
         08:1d:bc:13:f6:76:34:36:ae:1f:6a:4a:af:4c:8e:06:c2:11:
         c9:cf:66:b7:96:d4:c0:72:a3:9e:3b:37:ce:12:1e:ab:a8:16:
         b9:8c:24:4c:95:67:89:69:36:7a:5d:e4:cc:9f:7c:49:04:95:
         e1:86:26:cd:5a:ab:1b:0b:1b:64:a7:e0:69:db:45:f6:18:b6:
         c9:f1:98:6e:4f:5d:52:93:d4:55:59:08:de:f5:52:98:e7:de:
         92:41:ca:c1:6f:2a:7d:0f:3b:da:96:47:08:cc:99:74:06:6d:
         1c:40:09:3f:30:19:36:ea:97:53:9e:9d:41:66:2b:72:8e:3d:
         99:8c:50:ca:b2:94:0f:d5:cc:ca:f7:a7:6e:10:70:82:81:0a:
         75:ec:cb:6b:ba:cc:7f:c1:85:b1:02:37:e9:4d:22:79:1a:11:
         33:50:31:e6:5e:9e:d6:41:e2:05:be:a8:c3:e9:c7:1d:2f:9f:
         4c:f0:47:bb:1a:7a:6f:5d:88:49:86:90:0f:ac:8e:42:5e:37:
         36:ff:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 05:49:55 2024 by rpki-client on console-fra.rpki-client.org