Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39382e302f32332d3234203d3e2035303635.roa
File:                     3139302e39332e39382e302f32332d3234203d3e2035303635.roa (raw, json)
Hash identifier:          g3ryMdjWkGOqF3p64LlUK1p2tVP8AqVLUw9NSsN543E=
Subject key identifier:   6C:8E:D3:E1:28:11:A9:84:F8:5D:27:BE:35:EA:AD:6F:0A:E6:41:71
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       4757E0617C907D9A1E8FEA3C748C0EDBB778E5FF
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39382e302f32332d3234203d3e2035303635.roa
Signing time:             Mon 10 Jun 2024 13:10:00 +0000
ROA not before:           Mon 10 Jun 2024 13:05:00 +0000
ROA not after:            Mon 09 Jun 2025 13:10:00 +0000
asID:                     5065
IP address blocks:        190.93.98.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 12:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:57:e0:61:7c:90:7d:9a:1e:8f:ea:3c:74:8c:0e:db:b7:78:e5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jun 10 13:05:00 2024 GMT
            Not After : Jun  9 13:10:00 2025 GMT
        Subject: CN=6C8ED3E12811A984F85D27BE35EAAD6F0AE64171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fb:a8:2a:45:88:79:97:2d:ce:af:2b:74:a6:
                    d7:7e:2d:60:24:13:39:02:1b:a6:6e:ee:a1:0b:ae:
                    a6:1a:fc:ca:6c:a8:20:59:7f:b7:c0:ac:d2:a6:95:
                    ba:66:a4:05:8e:b1:dc:d2:5b:d8:d8:ad:fd:cf:ea:
                    10:c2:e7:cc:39:aa:33:bf:42:46:b4:f4:38:6f:ed:
                    de:97:93:29:d0:f0:61:02:a8:1c:f7:33:93:b2:52:
                    43:db:1b:b0:ec:8a:8e:68:c2:fd:57:f2:79:16:b2:
                    33:4a:16:14:dc:4d:16:54:7f:66:e4:29:9c:1f:f0:
                    0a:70:95:79:9a:25:34:6f:80:7d:ce:9b:cc:98:b4:
                    86:36:89:4d:da:83:e7:47:c1:18:40:42:9a:81:1e:
                    9b:1f:40:40:4b:3b:bd:69:14:70:65:ab:bb:4c:21:
                    8f:cd:ce:b2:d4:60:b3:e3:29:a2:27:a8:05:39:a3:
                    36:3c:f3:9e:d0:a9:f1:02:df:99:36:8f:c2:6d:83:
                    94:23:f0:22:32:4c:70:26:65:d3:9b:1e:1c:e0:ec:
                    fd:b5:bd:ab:c2:51:22:d4:72:c5:ab:32:7d:fa:61:
                    6a:6e:d8:27:64:7d:3c:22:59:39:f4:aa:06:8b:42:
                    eb:62:6e:ec:29:04:b5:e9:7b:16:a4:f4:12:15:be:
                    a2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8E:D3:E1:28:11:A9:84:F8:5D:27:BE:35:EA:AD:6F:0A:E6:41:71
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39382e302f32332d3234203d3e2035303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:71:d4:9f:94:44:a2:24:8b:e5:4a:83:7f:f2:f0:ef:d5:29:
         df:82:81:0d:50:6a:76:06:b2:59:30:b8:5d:7a:da:b7:6d:fd:
         f5:ea:7c:9f:e3:e4:1b:6d:2d:32:4a:9a:a7:3d:7d:98:20:f1:
         dd:1e:2d:10:ad:4e:81:b1:77:24:96:00:d9:b6:b4:1e:41:2f:
         4d:01:28:fa:77:6c:58:cd:1f:5c:89:e6:18:b3:e4:f1:be:73:
         08:82:c4:b7:98:6f:39:eb:d6:25:1a:f3:8f:cd:ad:b4:f9:ca:
         f6:1c:33:29:50:ab:4f:dc:bf:ac:d0:28:92:41:5d:b9:67:98:
         d5:37:ca:2a:20:51:3d:17:73:97:0d:93:33:96:ee:ba:25:31:
         2b:d7:fd:fe:0b:9e:95:78:43:4b:9f:94:cf:8f:78:38:44:e4:
         e6:41:9e:a0:7b:54:2b:b8:50:dd:2d:2b:db:33:2b:32:c3:16:
         b8:a6:5d:43:c8:b7:ff:3f:27:9d:ee:6e:f9:64:74:c5:b5:eb:
         6a:dd:a6:24:da:4c:0f:e1:75:db:8b:62:62:bb:7c:cc:ac:4d:
         f3:e7:1f:f3:55:4d:0b:0d:67:6a:7b:27:e6:fc:1a:22:55:23:
         aa:e7:b9:b2:90:7b:8c:40:d5:33:0c:da:09:91:bc:d5:23:b7:
         bc:ec:cc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 14:24:15 2024 by rpki-client on console-ams.rpki-client.org