Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39382e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e39382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          YdoEAao4uDul+Y+GkTNg+RgFFkw4w0d4f5XfDH8uGww=
Subject key identifier:   2D:B8:BE:17:04:2D:D2:83:F6:AD:7B:F9:55:3B:7E:CB:C8:EA:A3:98
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       422F732A794E8C84E962E10A4B078A9C956697D5
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39382e302f32342d3234203d3e20383334.roa
Signing time:             Fri 27 Sep 2024 13:10:00 +0000
ROA not before:           Fri 27 Sep 2024 13:05:00 +0000
ROA not after:            Fri 26 Sep 2025 13:10:00 +0000
asID:                     834
IP address blocks:        190.93.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Oct 2024 21:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2f:73:2a:79:4e:8c:84:e9:62:e1:0a:4b:07:8a:9c:95:66:97:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 27 13:05:00 2024 GMT
            Not After : Sep 26 13:10:00 2025 GMT
        Subject: CN=2DB8BE17042DD283F6AD7BF9553B7ECBC8EAA398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:14:1c:7b:7d:b8:17:4c:01:0e:42:ef:d4:
                    3b:07:d4:aa:a9:af:f9:68:54:85:74:6d:59:6f:d8:
                    e7:75:29:b0:d7:2b:6c:6f:55:60:4b:bd:dd:c3:fb:
                    9c:99:f3:bd:38:15:12:bc:fd:9c:c3:0f:86:cd:c5:
                    fc:6d:79:22:10:34:21:f8:d7:1f:51:8d:51:af:e2:
                    e7:c1:65:f9:01:b6:94:b8:14:11:79:ab:24:0e:00:
                    57:80:9b:fa:15:8a:7e:f9:79:17:11:ec:95:cd:af:
                    18:b2:4a:df:63:7d:c7:69:e9:3f:e7:cb:e5:37:f8:
                    c5:6b:be:c3:a0:95:b9:55:d5:e8:09:39:2d:5e:e5:
                    ff:92:73:93:3c:83:10:37:3b:74:6f:56:4b:f0:bc:
                    3f:14:b7:bc:96:b7:c7:70:9a:be:fe:51:56:c4:e3:
                    b8:46:7f:44:12:d7:05:e6:58:75:7e:44:43:67:32:
                    d5:88:83:9b:aa:93:3e:44:b7:29:f9:a7:43:27:47:
                    8e:33:54:15:83:cd:9b:8f:f6:91:4e:33:21:3e:b4:
                    00:d2:6d:94:7f:1b:e0:87:93:36:3e:23:04:c8:7d:
                    a8:88:87:d1:bb:21:d7:3e:78:e8:41:64:54:58:8b:
                    3c:74:a5:4d:d9:c9:2e:7c:f7:d1:f6:4d:b7:fa:e4:
                    3d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B8:BE:17:04:2D:D2:83:F6:AD:7B:F9:55:3B:7E:CB:C8:EA:A3:98
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:99:f9:ad:2e:76:54:2b:6e:2e:83:ea:ee:b9:1d:70:89:04:
         e6:9f:ff:9c:40:94:57:dc:b0:4d:6f:ae:e8:09:eb:f6:81:a6:
         9f:6a:fd:bd:d5:e0:26:a7:b5:31:16:cc:6b:7b:ba:6c:f2:88:
         63:21:6b:87:91:f7:45:ee:06:25:45:17:49:f8:b3:86:9c:6e:
         06:26:1a:d2:8c:99:ce:ad:e4:37:2e:08:46:a0:0e:b5:04:83:
         2a:d5:e3:56:26:87:4d:5f:89:8f:6a:b1:d5:a1:a3:50:8d:d2:
         d7:7f:0b:54:c9:37:a8:18:f9:4e:ee:bf:ad:d6:05:9e:4a:bc:
         00:29:06:4d:a2:54:1d:ea:6a:a6:a8:91:92:bb:ee:25:b8:22:
         7e:03:c2:ca:92:a1:35:16:36:58:8e:22:65:16:fe:ad:49:e8:
         61:66:e9:23:1d:b0:29:6b:cd:24:ff:42:b0:89:46:ad:ff:8d:
         28:01:48:79:fe:7f:13:e2:08:2a:de:b8:0e:23:7f:51:d5:af:
         b0:e9:02:21:61:59:c4:67:91:85:25:17:cf:50:04:46:2b:14:
         dc:ce:2f:ff:1e:43:a4:12:a5:6d:37:f4:d0:1f:74:e7:3c:5c:
         75:96:89:34:1a:b9:2f:f9:ea:b2:63:e6:19:53:8e:72:ee:1d:
         69:e8:25:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 23:17:28 2024 by rpki-client on console-fra.rpki-client.org