Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37392e302f32342d3234203d3e2037303138.roa
File:                     3139302e39332e37392e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          54OUzpdKSN9aAUcnQXIZfWZRfrX7DkHAPqqGQ7nenxo=
Subject key identifier:   09:70:6E:51:16:82:D8:98:81:BF:34:C4:32:72:D7:26:2F:66:9A:46
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       208238239872F2083A4C60B1C0A6A70F42E1C949
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37392e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 05 Jun 2024 11:30:00 +0000
ROA not before:           Wed 05 Jun 2024 11:25:00 +0000
ROA not after:            Wed 04 Jun 2025 11:30:00 +0000
asID:                     7018
IP address blocks:        190.93.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 17:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:82:38:23:98:72:f2:08:3a:4c:60:b1:c0:a6:a7:0f:42:e1:c9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jun  5 11:25:00 2024 GMT
            Not After : Jun  4 11:30:00 2025 GMT
        Subject: CN=09706E511682D89881BF34C43272D7262F669A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:01:7f:f0:0a:ba:60:46:11:d0:44:86:b8:
                    e1:bf:58:64:36:d1:76:c0:31:b5:08:77:df:9d:98:
                    a0:4b:b9:11:2a:55:f6:81:5b:35:63:01:9e:28:e2:
                    04:54:ba:ca:1c:5f:0e:5b:3d:c6:a1:f1:50:cb:cb:
                    aa:b3:02:f4:34:64:9a:d5:4e:96:54:e9:81:42:a5:
                    ad:85:18:d7:ea:95:7a:9d:1f:3f:37:5b:64:68:a8:
                    ab:cf:fa:0d:11:ec:ac:4a:57:6c:fa:0a:9f:40:06:
                    75:22:07:76:a6:79:f1:58:9b:40:b6:46:d7:2a:cf:
                    59:e2:c0:24:a8:6c:61:a3:e5:cb:76:41:d8:69:18:
                    41:be:14:f7:7a:75:32:2f:9f:ae:ab:31:a1:aa:8b:
                    1c:a7:1f:94:c7:d1:52:b9:09:d9:f6:f7:c5:26:e3:
                    2b:84:ac:94:2e:38:a0:f0:d8:4a:bb:20:b5:f8:ee:
                    aa:34:d1:73:64:84:39:b4:b3:08:4a:38:06:51:e6:
                    78:d0:f9:2b:cf:78:00:cf:ee:78:be:3c:9e:0e:00:
                    21:4a:7e:04:64:3e:ad:82:eb:05:29:74:05:b3:ed:
                    3c:b3:d0:2f:83:11:8f:37:e3:29:9b:bb:5c:a9:3b:
                    e9:c9:75:59:12:e2:db:f9:d8:3b:aa:66:b4:ee:c7:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:70:6E:51:16:82:D8:98:81:BF:34:C4:32:72:D7:26:2F:66:9A:46
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37392e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:f2:d3:3b:69:ea:a2:4f:d3:5e:0c:08:45:f7:95:49:2e:85:
         11:12:d0:3d:80:27:6a:28:15:fc:8e:f0:8b:8f:da:68:41:f2:
         03:aa:0c:85:e5:6b:68:5d:6f:96:75:c6:43:53:50:2c:f7:99:
         61:e5:de:22:9e:2f:23:7c:28:e6:8c:21:5c:9c:af:0f:88:db:
         17:0c:c9:d3:79:a4:fe:10:49:66:81:89:82:9c:5a:01:1f:6c:
         4b:90:82:c5:a4:48:02:0d:59:39:fc:8f:63:96:7e:0f:ff:d2:
         a0:c5:2f:19:71:c0:06:4e:79:88:3b:ff:8f:bf:db:b5:c8:34:
         e5:7a:ee:90:61:86:98:13:d5:1f:b6:55:48:96:ed:a6:c3:88:
         6f:72:f4:4c:24:de:56:f7:0c:45:12:cb:f1:a4:a9:18:3e:cc:
         d6:6e:af:58:cf:ea:8d:31:5b:31:0c:9a:15:30:1f:a7:68:1b:
         e9:23:71:80:b9:0c:0d:55:12:2f:9a:56:e5:a6:e9:82:dc:dc:
         3f:7c:5e:05:23:36:91:c0:67:c6:ae:d5:0c:34:8a:4b:eb:65:
         b2:b6:b4:ae:d6:b2:2f:ff:39:99:7d:0d:41:46:24:49:3e:92:
         79:99:04:0c:92:0b:5c:91:a6:4b:21:83:b9:7a:3b:0b:81:f7:
         26:2f:f2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org