Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e3130382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          WeXRUGBuljO9B0NzsjZTkIS0Och2VU+RxJkrMMKt3iU=
Subject key identifier:   AD:74:A6:81:63:09:21:17:27:7E:3D:30:A1:13:BF:28:47:1A:ED:84
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       78A801EE66F52009128A6F730456902B0281505D
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32342d3234203d3e20383334.roa
Signing time:             Mon 30 Sep 2024 15:10:00 +0000
ROA not before:           Mon 30 Sep 2024 15:05:00 +0000
ROA not after:            Mon 29 Sep 2025 15:10:00 +0000
asID:                     834
IP address blocks:        190.93.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 14:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a8:01:ee:66:f5:20:09:12:8a:6f:73:04:56:90:2b:02:81:50:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 30 15:05:00 2024 GMT
            Not After : Sep 29 15:10:00 2025 GMT
        Subject: CN=AD74A68163092117277E3D30A113BF28471AED84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a1:29:14:79:bd:80:25:1a:3d:f8:2b:65:b5:
                    6f:ad:55:1d:81:1b:36:81:ad:a9:dd:ea:fd:4a:f9:
                    77:7a:f6:56:bc:1e:35:c8:d8:00:0a:95:ee:45:f0:
                    ec:36:d3:1a:ca:e0:2c:db:68:9f:eb:b2:22:66:3c:
                    62:84:15:27:e5:66:31:e7:6c:0e:1b:c1:2d:21:ec:
                    dc:af:21:91:83:f2:03:59:55:cd:f4:9e:79:31:a3:
                    75:2e:92:67:10:2f:0e:58:fb:ed:08:6f:61:f9:b6:
                    65:7b:01:df:6e:ac:75:8f:24:8e:18:7c:71:1d:fc:
                    bb:40:56:69:23:f1:4d:fe:6c:12:eb:39:21:9d:7e:
                    e2:47:f0:29:6c:02:39:f3:b3:ae:b7:ce:68:ce:ac:
                    4f:4a:fa:f1:9d:00:2d:a8:ab:fe:46:cd:ea:5d:b3:
                    e5:4e:38:73:ef:66:d2:4c:d5:59:51:a4:fc:03:75:
                    52:1c:25:47:f2:9d:e9:7a:f5:61:c1:11:f3:02:2b:
                    4e:f9:80:55:dd:bd:40:19:5a:ac:09:59:16:1b:d2:
                    ab:5a:d7:17:32:f7:be:62:d3:de:4c:c5:13:eb:5f:
                    b6:99:1c:10:27:9b:2b:36:de:ed:41:b1:fd:ca:00:
                    98:96:b8:b5:2d:94:62:a2:f1:77:ec:f1:ec:b3:c8:
                    0f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:74:A6:81:63:09:21:17:27:7E:3D:30:A1:13:BF:28:47:1A:ED:84
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:2d:77:4b:2f:f6:40:37:4e:9f:cd:55:10:0c:28:13:01:78:
         c6:c4:5b:e9:84:90:82:a9:87:18:4e:fd:87:e3:ea:c2:8d:28:
         8b:85:46:64:75:aa:ce:1a:1e:8d:93:ef:01:54:c4:9a:cb:b2:
         01:66:85:69:24:cd:b9:72:28:4b:c7:3e:d6:bb:12:1b:1a:05:
         c3:9f:79:ec:b5:b3:bb:d7:1f:db:d2:80:7d:d7:9e:a9:8d:b3:
         b3:77:12:49:9e:c0:aa:2a:2b:7a:98:39:41:3e:27:16:71:92:
         5e:cd:a1:47:c2:eb:25:7c:9f:99:26:30:5c:a8:0e:af:1e:32:
         3c:1a:15:47:aa:f9:c8:0a:4c:54:18:c3:03:e5:27:59:fd:c1:
         27:57:4d:d3:28:29:f1:c9:fb:36:f0:08:34:eb:a9:29:04:9c:
         b5:34:51:9b:19:bb:74:32:3e:64:89:fa:b7:c8:a0:21:b3:d4:
         d5:f4:8e:66:e4:60:ad:1a:80:36:28:dd:76:7a:31:18:1d:c2:
         3e:ca:12:eb:3d:43:54:91:5f:0b:99:79:5d:be:18:5b:f9:2b:
         ba:29:69:3f:ab:06:a7:8e:ee:d4:c7:52:13:8b:1e:38:5a:96:
         05:01:3a:35:f7:e7:0b:3e:8b:a0:c4:b4:3b:d9:a3:10:96:2a:
         a3:69:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 18:42:31 2024 by rpki-client on console-fra.rpki-client.org