Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231342e302f32342d3234203d3e203532333339.roa
File:                     3139302e3130372e3231342e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          zFCZrZk7F8CUd3CQLWStzhT+V8/8NU78YAnHb7fU7A4=
Subject key identifier:   6B:5D:BB:AE:5C:64:51:37:0F:54:44:FB:8A:0D:08:51:28:4D:32:95
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       7DC5628285C2EBBD034F3EF2E5D79E8D312B2BF4
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231342e302f32342d3234203d3e203532333339.roa
Signing time:             Sun 07 Jul 2024 02:55:08 +0000
ROA not before:           Sun 07 Jul 2024 02:50:08 +0000
ROA not after:            Sun 06 Jul 2025 02:55:08 +0000
asID:                     52339
IP address blocks:        190.107.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 22:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c5:62:82:85:c2:eb:bd:03:4f:3e:f2:e5:d7:9e:8d:31:2b:2b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  7 02:50:08 2024 GMT
            Not After : Jul  6 02:55:08 2025 GMT
        Subject: CN=6B5DBBAE5C6451370F5444FB8A0D0851284D3295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:66:a7:fb:dd:b7:3a:79:65:da:df:b0:2b:
                    9c:60:38:25:47:77:26:95:c6:22:31:87:c2:89:aa:
                    9b:10:de:0c:6f:9f:ea:e7:41:69:29:7a:21:4c:b1:
                    e3:3f:f1:94:d9:eb:a1:60:52:d6:91:85:d2:3b:7d:
                    91:c1:cd:9c:b9:f1:e8:b9:2c:17:e4:61:83:01:b5:
                    bb:ad:c1:3d:1b:c2:3d:4c:ff:38:40:da:4a:c9:59:
                    ec:04:d2:0a:38:96:02:9e:3e:fe:9f:86:ca:d1:80:
                    ff:07:09:e6:93:28:7e:82:fc:cb:92:68:62:26:73:
                    40:1e:52:ac:b9:4e:12:ce:c7:2c:71:fd:d7:01:b9:
                    a0:34:2e:d2:17:2b:5a:86:a0:dc:b6:75:75:e1:f5:
                    02:23:ea:25:62:d6:0a:0f:e8:25:18:40:76:8a:11:
                    bd:e0:8f:90:b4:04:60:88:7b:aa:35:4d:92:45:a0:
                    4c:9f:78:44:4b:d3:95:d1:9a:e9:63:b9:ec:27:5f:
                    a8:d6:e3:72:47:ef:c1:9e:bb:5b:26:5f:09:4d:fe:
                    cd:d9:5c:47:88:72:19:27:c0:09:f2:bb:9c:b8:2e:
                    f1:ac:f0:bb:d4:c9:94:0f:37:5e:3a:73:d9:07:a5:
                    80:53:e1:ab:a5:07:8c:3b:17:2e:3a:f5:70:24:dd:
                    12:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5D:BB:AE:5C:64:51:37:0F:54:44:FB:8A:0D:08:51:28:4D:32:95
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231342e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:fa:fe:7b:2b:7b:af:94:da:ec:af:b1:bc:0b:be:9f:42:0c:
         33:42:48:5b:c6:c0:89:cf:02:e3:94:0f:8e:04:76:99:5a:a4:
         a7:b5:61:11:39:3e:18:2d:34:77:e0:66:46:04:cc:d1:f0:a6:
         16:83:3e:b0:7c:19:52:2c:b8:c2:4f:22:a2:8d:2a:e0:40:92:
         eb:20:b6:ec:24:45:84:bf:67:84:7f:87:1e:1e:6c:04:fe:d4:
         1f:80:40:fb:70:02:ca:f9:c5:e2:09:17:68:6f:b8:2c:b8:d0:
         1e:20:40:2b:24:bf:f0:ce:12:7b:b3:fa:38:3e:55:3b:fc:06:
         c8:3c:32:d4:fd:3c:6d:7a:c2:24:6e:b6:2f:69:88:b6:2a:9d:
         32:94:19:90:ea:f4:b5:5b:71:d1:a4:f4:a5:d9:d6:e8:e4:25:
         f9:fb:e0:42:76:59:10:b5:d3:8c:e1:d0:64:1e:64:61:ce:94:
         47:c5:5d:7b:61:8b:87:d4:9e:f8:49:0a:91:ac:9d:57:3e:00:
         24:34:c9:8e:01:e2:e3:6e:81:26:d2:9b:26:7b:dc:46:d3:c8:
         64:4c:16:2c:19:8c:70:3a:9f:b2:b9:77:a1:b5:45:ab:81:90:
         36:cc:16:2d:42:0b:82:b4:14:1e:de:20:a2:d4:df:18:1e:ca:
         7e:bf:58:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 23:09:22 2024 by rpki-client on console-fra.rpki-client.org