Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39382e302f32332d3234203d3e20383334.roa
File:                     3139302e39332e39382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          lUVknYg1besz/yQVAO7/gtttLRIufAtEc2FaU4ZzOmI=
Subject key identifier:   73:95:67:DF:4B:4D:D7:DC:5D:54:AA:9B:F7:00:A1:71:1C:21:D1:74
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       2484D57C59823E58FA8759A804A5FA23A1ECE317
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39382e302f32332d3234203d3e20383334.roa
Signing time:             Wed 10 Jul 2024 12:55:00 +0000
ROA not before:           Wed 10 Jul 2024 12:50:00 +0000
ROA not after:            Wed 09 Jul 2025 12:55:00 +0000
asID:                     834
IP address blocks:        190.93.98.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:84:d5:7c:59:82:3e:58:fa:87:59:a8:04:a5:fa:23:a1:ec:e3:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jul 10 12:50:00 2024 GMT
            Not After : Jul  9 12:55:00 2025 GMT
        Subject: CN=739567DF4B4DD7DC5D54AA9BF700A1711C21D174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:2d:ba:10:f8:d0:58:2d:2a:fe:48:51:e3:
                    7c:fa:7b:f2:96:52:11:88:d8:70:53:88:29:30:57:
                    01:da:27:0a:23:1c:4a:35:cb:05:83:27:04:4e:ac:
                    51:b3:f1:b3:80:a9:21:5f:61:4b:70:bd:2a:49:7b:
                    c8:b0:5c:30:fc:2b:22:ef:08:50:c2:a8:c9:9f:32:
                    75:4b:55:ff:c5:26:6e:9d:f6:c9:43:d4:e4:ae:ed:
                    e4:0c:92:f5:9d:9c:da:cf:ca:92:bc:33:86:2c:c7:
                    c8:59:0c:81:af:37:44:06:73:09:3b:49:e8:66:ba:
                    37:b4:c4:fd:c3:55:7c:a7:64:8a:6d:bf:15:ec:af:
                    26:bb:4b:aa:46:f2:5f:dd:e8:a5:64:4e:30:31:43:
                    b7:45:68:3d:f5:68:eb:aa:06:45:84:b8:00:ec:cc:
                    a1:e4:d6:19:d5:6d:d3:93:cd:40:e4:2c:7d:08:29:
                    5b:5f:64:07:bf:ee:a0:1d:23:70:98:1d:b7:9f:76:
                    2b:71:7e:4a:1a:ab:70:3c:32:a5:f0:d4:18:7f:21:
                    e6:d6:bf:b8:36:94:ad:66:d8:f8:c4:22:d8:1f:3f:
                    16:c3:fc:f9:29:28:53:67:46:6f:ff:d7:53:67:5a:
                    34:d9:3e:18:9e:47:1a:24:9c:a6:74:18:a1:d8:eb:
                    f2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:95:67:DF:4B:4D:D7:DC:5D:54:AA:9B:F7:00:A1:71:1C:21:D1:74
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:ba:d9:c3:73:8b:e1:3d:07:dc:6f:88:d0:e1:9a:45:b1:af:
         ab:df:7e:4b:40:c6:fc:7f:1d:bb:12:54:a4:17:3f:a1:6e:a0:
         02:d7:07:0b:ae:e3:72:cc:78:f7:2b:bb:1b:16:01:bf:0a:1d:
         17:fc:3c:e0:59:59:9d:e1:ac:a7:76:e6:a7:59:e5:8b:bd:50:
         a3:e0:27:3f:25:28:36:78:2e:c9:30:4d:13:af:6c:26:e1:c4:
         c0:94:3e:27:31:d5:12:ae:33:b8:b0:6f:d4:df:95:69:e1:89:
         24:21:c5:34:38:78:14:ed:f8:ad:5a:03:15:7b:2e:96:2e:06:
         5b:55:75:be:3e:36:0b:e9:c7:b2:3a:84:6a:e7:29:e2:42:bd:
         62:b7:82:d8:9e:7e:1d:e5:80:f4:6f:a2:18:d2:a4:44:66:a5:
         ee:2e:5d:cd:3b:8e:b7:bc:39:4e:c5:5c:07:8f:af:aa:69:3f:
         3e:f2:ad:8d:ef:0c:8f:c1:f7:ce:e6:1a:20:6a:da:a3:9a:4a:
         3f:ed:a8:66:1a:85:9a:55:ea:7b:1d:e6:08:f3:dd:e3:30:77:
         20:42:11:b8:17:2d:b4:13:13:11:06:54:58:9c:80:af:c6:1d:
         94:59:e9:a7:ad:3c:f0:7b:f7:05:2f:02:30:8d:f0:4c:c1:38:
         12:5e:69:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 16:43:56 2024 by rpki-client on console-ams.rpki-client.org