Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3232203d3e203531323032.roa
File:                     3139302e3130372e3231322e302f32322d3232203d3e203531323032.roa (raw, json)
Hash identifier:          hi4RpgZdSROR/OxPHTxKQFs7Oe5khEXy850gSNknoIg=
Subject key identifier:   EB:28:E2:59:B9:0B:53:7B:3C:9D:03:16:46:A6:CE:EB:84:9E:DE:ED
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       74DEDB002C30D5C806C0EC9E87E7843723D5C374
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3232203d3e203531323032.roa
Signing time:             Sun 07 Jul 2024 22:25:01 +0000
ROA not before:           Sun 07 Jul 2024 22:20:01 +0000
ROA not after:            Sun 06 Jul 2025 22:25:01 +0000
asID:                     51202
IP address blocks:        190.107.212.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 00:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:de:db:00:2c:30:d5:c8:06:c0:ec:9e:87:e7:84:37:23:d5:c3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  7 22:20:01 2024 GMT
            Not After : Jul  6 22:25:01 2025 GMT
        Subject: CN=EB28E259B90B537B3C9D031646A6CEEB849EDEED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:30:db:29:78:54:a9:ad:69:58:9a:66:40:73:
                    96:17:16:ca:f2:28:df:41:bb:e4:60:91:26:12:dc:
                    4e:ee:93:2c:f1:9d:1a:e0:63:8a:03:3e:71:1e:31:
                    8e:41:ce:92:f4:d0:45:7d:14:53:43:3a:25:4b:ad:
                    77:0f:74:74:13:66:0f:51:df:a2:db:e6:e2:f7:40:
                    3f:51:02:97:c0:22:e1:92:78:79:dc:9f:b0:5d:30:
                    37:00:26:07:d7:a8:45:c3:11:69:4e:09:5a:ea:8a:
                    27:f2:48:94:4c:e9:15:11:34:d5:13:e1:c4:f9:16:
                    1f:0c:f7:2a:f1:75:11:4d:50:a8:9f:a8:ea:dc:87:
                    59:55:2f:1d:79:39:a7:2d:0f:b3:70:bf:35:dd:77:
                    9c:b5:60:fd:c9:50:05:7d:39:6d:ea:ee:7f:0a:14:
                    f0:1a:68:6a:e5:e4:ad:bf:00:80:7a:65:10:c0:5f:
                    31:1f:75:36:13:db:72:43:c2:77:af:a8:b8:2e:a8:
                    89:ce:e7:17:0e:9a:9a:7d:eb:72:4a:c3:51:3d:4b:
                    40:b1:04:d3:39:ee:2c:02:68:c5:00:29:3a:94:6f:
                    a3:a6:4c:cc:dc:cf:a3:b0:63:54:11:6e:98:b7:06:
                    39:12:cf:61:0b:e2:77:01:21:48:89:13:d0:b8:a8:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:28:E2:59:B9:0B:53:7B:3C:9D:03:16:46:A6:CE:EB:84:9E:DE:ED
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3232203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:be:e9:ab:54:4c:9e:8e:d1:62:5d:65:0f:2c:13:d3:d6:94:
         56:3a:d1:08:f4:29:b2:76:2f:57:f7:79:a1:c8:c9:3b:03:66:
         af:a7:4f:11:9e:b5:f3:67:a2:e6:43:3f:98:48:8a:cc:ee:3f:
         d5:8a:aa:ad:e8:cc:19:34:f2:1e:73:66:25:72:c3:ca:d6:f9:
         64:95:f8:ae:c8:9d:dd:d3:27:f5:2f:c0:90:2c:18:f6:b8:20:
         75:39:cc:b0:7c:cd:0b:04:0c:6e:ee:8a:11:ee:0d:7d:ce:ad:
         01:70:4d:a3:cf:06:96:ad:a2:9d:af:49:a7:dd:1a:96:df:27:
         6c:96:cb:5f:74:34:f6:77:25:ae:bf:e0:96:a7:7d:8c:18:46:
         56:e5:87:26:3f:36:1d:e4:a3:dd:60:c0:30:42:e0:a4:45:25:
         6d:39:4a:04:2f:98:b8:06:d4:63:3d:8f:23:54:36:a8:13:16:
         be:4c:e1:aa:01:45:09:2d:b8:05:ab:63:41:09:90:93:70:a8:
         b2:2d:38:e1:af:80:d3:67:1d:9b:55:d0:27:35:30:72:cc:ba:
         77:94:a5:9e:27:58:af:27:2f:b3:06:e3:88:a0:cb:59:ce:ab:
         c0:7e:12:b3:32:c6:70:d4:8e:7b:f6:bb:24:7e:37:9c:ce:d4:
         1b:0e:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 02:44:19 2024 by rpki-client on console-fra.rpki-client.org