Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32342d3234203d3e203531323032.roa
File:                     3139302e3130372e3231322e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          sQpTC4VnimS3ngFknkQkWlORwcKbokNbHt6suiRuxcs=
Subject key identifier:   FE:A4:B8:A6:15:64:F5:02:02:64:AB:1E:DE:BF:2A:87:E9:62:62:4D
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       7C1C559CE216EDE8CA2C9B0220C3AE921D637794
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:07 +0000
ROA not before:           Mon 08 Jul 2024 00:15:07 +0000
ROA not after:            Mon 07 Jul 2025 00:20:07 +0000
asID:                     51202
IP address blocks:        190.107.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1c:55:9c:e2:16:ed:e8:ca:2c:9b:02:20:c3:ae:92:1d:63:77:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:07 2024 GMT
            Not After : Jul  7 00:20:07 2025 GMT
        Subject: CN=FEA4B8A61564F5020264AB1EDEBF2A87E962624D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:15:b8:f0:84:06:3e:92:00:1b:01:05:8f:
                    9f:b9:9f:4b:53:18:38:71:91:ff:49:93:c4:fe:1c:
                    12:91:17:54:f2:03:1b:04:b3:ea:9b:02:a6:73:2a:
                    44:0d:ab:38:37:43:73:38:b3:7b:02:ff:57:58:75:
                    31:ca:0e:68:a1:3f:95:dd:e4:06:c5:18:77:d3:ba:
                    41:28:47:da:d6:1c:e0:a3:37:2f:41:bb:d5:16:84:
                    4b:03:19:5d:b6:60:47:bd:98:05:54:c6:fc:2b:5a:
                    5f:0b:8f:a8:5b:6d:39:25:fb:b3:07:e9:2c:eb:0a:
                    a0:f2:69:f7:61:02:e1:9b:d7:10:fc:db:6f:1e:66:
                    c4:91:94:e2:5b:b8:56:a1:d9:dc:c7:85:7d:48:5a:
                    9a:e5:b1:08:52:47:15:f7:f6:9e:d3:6b:5e:33:8e:
                    5b:68:9c:17:65:67:f7:8a:25:cf:fd:9f:00:a9:e9:
                    b1:c3:0c:d4:0e:a1:67:6f:c1:5a:20:75:63:39:83:
                    f8:89:75:6f:24:6a:7c:20:81:53:11:92:52:34:84:
                    9d:ea:47:fb:75:70:6c:4c:89:32:94:47:93:e0:58:
                    2c:39:20:1a:d7:ba:49:a5:83:52:d5:fb:f2:6c:4d:
                    37:74:6e:ff:6c:9d:ba:72:95:74:d4:9a:8a:b6:42:
                    b7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A4:B8:A6:15:64:F5:02:02:64:AB:1E:DE:BF:2A:87:E9:62:62:4D
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:e3:a7:00:f6:5d:e7:4b:96:4f:0b:60:e9:d1:49:c5:5e:9b:
         7e:42:00:f4:3a:d0:ed:b5:84:dd:03:e5:f6:f4:ec:f1:dd:3a:
         6b:27:dd:e9:c4:48:3a:6c:9a:d7:ac:30:28:2b:42:e8:03:d4:
         a9:fa:24:38:39:11:37:74:4d:60:84:6d:dd:fc:3c:4f:aa:b8:
         9f:57:6c:b4:e8:d5:eb:35:bd:43:36:fd:aa:49:4f:8c:95:ac:
         38:ff:1a:08:2b:76:bc:31:1f:eb:69:45:ec:92:19:dd:77:37:
         37:4f:00:99:2a:19:4c:01:19:2e:a0:f3:f0:d3:8f:a9:de:4d:
         75:ac:b5:97:91:24:35:a2:5d:0c:00:5f:6d:47:78:42:7d:b8:
         71:e0:52:21:80:ac:af:fd:17:bb:13:b6:7b:7a:e3:2f:e7:17:
         6d:ee:a5:02:76:50:e5:92:1a:7c:7d:ba:03:2f:38:d6:73:00:
         27:a0:65:99:1a:e4:f5:f5:1a:34:e2:42:a8:68:a8:80:f4:88:
         c7:5d:03:da:46:ac:e4:d2:5b:84:39:20:97:e5:f3:34:be:79:
         2c:57:7e:0a:18:ae:02:01:a5:71:23:ee:ac:c0:50:ae:41:34:
         aa:85:3b:95:00:14:fe:b1:bf:96:47:5a:31:78:ec:ea:99:50:
         6b:df:be:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org