Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231332e302f32342d3234203d3e203532333339.roa
File:                     3139302e3130372e3231332e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          tQ6AWNh/wbkWHuDkd8ma+yMbQbinrI5jfUIgfxAN78M=
Subject key identifier:   E6:CB:EE:24:CA:96:6E:45:CA:BD:8B:14:63:6B:A7:14:E3:CD:F0:8A
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       6E8D3C6B3049D82B0381405CA4811D747396E7A1
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231332e302f32342d3234203d3e203532333339.roa
Signing time:             Sun 07 Jul 2024 02:55:00 +0000
ROA not before:           Sun 07 Jul 2024 02:50:00 +0000
ROA not after:            Sun 06 Jul 2025 02:55:00 +0000
asID:                     52339
IP address blocks:        190.107.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 22:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8d:3c:6b:30:49:d8:2b:03:81:40:5c:a4:81:1d:74:73:96:e7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  7 02:50:00 2024 GMT
            Not After : Jul  6 02:55:00 2025 GMT
        Subject: CN=E6CBEE24CA966E45CABD8B14636BA714E3CDF08A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:01:ec:6e:42:d2:8b:c3:f8:eb:7e:fa:34:ed:
                    c3:81:fd:b8:2d:6a:4b:c1:1f:a9:9d:61:be:72:58:
                    f5:b9:81:e2:5e:d7:f4:f7:72:fd:56:42:b1:ae:86:
                    2b:1d:00:75:d1:cb:30:9d:f5:6a:51:c1:6c:76:72:
                    b8:0e:d0:67:fc:8c:e2:25:02:b1:41:08:0f:f7:5b:
                    49:f8:0d:48:8e:1a:02:15:b0:62:ab:19:1a:f1:54:
                    3e:2a:e8:37:9b:6f:9f:20:a1:3a:92:37:83:2d:f2:
                    ea:cd:ca:94:ff:58:0c:96:2d:94:da:d3:37:4f:f6:
                    0f:74:bf:df:bb:8c:f3:63:71:ff:da:c2:95:e2:80:
                    fe:95:af:74:25:45:e6:51:a8:03:85:55:d6:85:30:
                    f9:b1:30:a7:df:ad:f5:cb:a6:57:c1:d6:9b:95:79:
                    99:8b:f4:49:48:19:2c:6a:3d:a0:34:fa:66:93:6e:
                    ae:07:dd:7d:51:7e:45:d8:2f:ce:71:a8:57:c8:f4:
                    b1:1f:68:78:ad:82:4d:59:e4:52:3a:85:0e:a3:34:
                    0b:fa:b7:93:1e:0e:b0:2d:19:9f:0d:01:ab:6b:bc:
                    17:cd:9e:15:59:91:43:6d:67:1a:cd:81:75:9c:a5:
                    0e:94:a4:ee:4c:0d:89:72:c1:75:0c:fe:12:34:13:
                    3c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CB:EE:24:CA:96:6E:45:CA:BD:8B:14:63:6B:A7:14:E3:CD:F0:8A
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231332e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:00:0a:73:c4:a2:d2:63:f1:11:cc:c1:57:33:c0:3e:fe:5e:
         cc:c0:22:0c:32:bf:44:80:9b:c5:85:5b:d8:95:a0:a0:55:21:
         82:0c:6a:b8:ca:5f:2b:4a:85:25:8c:ab:3d:ac:4e:32:99:51:
         0f:92:38:06:c0:6e:dd:fc:3c:c8:8a:9f:d0:1e:9e:de:0d:06:
         62:b0:12:0e:2d:37:b0:76:43:62:11:96:45:f0:08:dc:13:15:
         1b:cd:8c:9b:b9:a7:01:2a:46:c1:b7:e1:3b:e6:71:32:38:27:
         67:2a:f3:49:9d:72:c6:68:9b:e4:7c:0e:32:9d:a7:c8:28:92:
         ef:20:78:b7:7b:20:a3:68:b2:0a:1f:90:0e:6c:4f:42:36:d2:
         88:2d:0e:95:c7:f6:b0:52:9f:18:22:ac:d4:80:de:63:89:f0:
         6c:ae:5c:fd:87:76:38:d3:5e:f8:77:c8:2f:3a:34:ff:3c:ba:
         39:a6:69:1d:42:f3:5c:d8:61:28:12:f6:11:73:63:09:77:24:
         6e:0d:d2:fb:96:7c:db:5e:4e:74:49:84:c0:ec:45:5b:14:6e:
         8b:12:2c:03:b2:52:93:3c:32:98:db:49:9f:4c:db:f2:2d:23:
         e4:bd:27:76:98:9b:66:76:c5:a8:77:95:1c:b4:e1:c9:83:99:
         7d:6b:23:a5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbo08azBJ2CsDgUBcpIEddHOW56EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDcwMjUwMDBaFw0yNTA3MDYwMjU1MDBaMDMxMTAvBgNV
BAMTKEU2Q0JFRTI0Q0E5NjZFNDVDQUJEOEIxNDYzNkJBNzE0RTNDREYwOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZAexuQtKLw/jrfvo07cOB/bgt
akvBH6mdYb5yWPW5geJe1/T3cv1WQrGuhisdAHXRyzCd9WpRwWx2crgO0Gf8jOIl
ArFBCA/3W0n4DUiOGgIVsGKrGRrxVD4q6Debb58goTqSN4Mt8urNypT/WAyWLZTa
0zdP9g90v9+7jPNjcf/awpXigP6Vr3QlReZRqAOFVdaFMPmxMKffrfXLplfB1puV
eZmL9ElIGSxqPaA0+maTbq4H3X1RfkXYL85xqFfI9LEfaHitgk1Z5FI6hQ6jNAv6
t5MeDrAtGZ8NAatrvBfNnhVZkUNtZxrNgXWcpQ6UpO5MDYlywXUM/hI0EzyzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5svuJMqWbkXKvYsUY2unFOPN8IowHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzMDM3MmUzMjMxMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmvV
MA0GCSqGSIb3DQEBCwUAA4IBAQCWAApzxKLSY/ERzMFXM8A+/l7MwCIMMr9EgJvF
hVvYlaCgVSGCDGq4yl8rSoUljKs9rE4ymVEPkjgGwG7d/DzIip/QHp7eDQZisBIO
LTewdkNiEZZF8AjcExUbzYybuacBKkbBt+E75nEyOCdnKvNJnXLGaJvkfA4ynafI
KJLvIHi3eyCjaLIKH5AObE9CNtKILQ6Vx/awUp8YIqzUgN5jifBsrlz9h3Y40174
d8gvOjT/PLo5pmkdQvNc2GEoEvYRc2MJdyRuDdL7lnzbXk50SYTA7EVbFG6LEiwD
slKTPDKY20mfTNvyLSPkvSd2mJtmdsWod5UctOHJg5l9ayOl
-----END CERTIFICATE-----
Generated at Sun Jul 7 23:09:22 2024 by rpki-client on console-fra.rpki-client.org