Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231352e302f32342d3234203d3e203532333339.roa
File:                     3139302e3130372e3231352e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          ctIGqEK0GUf022DgCOFdLUlNEWSOmIdg05fgNGSihEU=
Subject key identifier:   C3:5E:0D:C6:DD:57:51:71:98:A2:AA:5F:F1:7D:E9:4D:FE:D2:74:E9
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       17F9A7BBD087AA037A0B57303C2EFAEFABCCD300
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231352e302f32342d3234203d3e203532333339.roa
Signing time:             Sun 07 Jul 2024 02:55:00 +0000
ROA not before:           Sun 07 Jul 2024 02:50:00 +0000
ROA not after:            Sun 06 Jul 2025 02:55:00 +0000
asID:                     52339
IP address blocks:        190.107.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 22:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f9:a7:bb:d0:87:aa:03:7a:0b:57:30:3c:2e:fa:ef:ab:cc:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  7 02:50:00 2024 GMT
            Not After : Jul  6 02:55:00 2025 GMT
        Subject: CN=C35E0DC6DD57517198A2AA5FF17DE94DFED274E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:06:58:9c:17:3c:4a:32:32:26:1a:93:ad:
                    dd:1a:20:03:c1:89:82:3a:d7:77:cc:ba:96:53:3f:
                    2b:29:a9:d5:3c:a6:ec:bd:8e:14:00:ef:1b:89:5f:
                    5e:45:85:06:0b:d4:f2:ea:cf:ff:e6:18:1f:fb:28:
                    da:40:dd:b8:5f:38:83:20:24:c6:f7:f9:9b:c5:bc:
                    43:1e:36:11:d7:79:79:a9:c2:45:d8:cd:87:bd:44:
                    76:28:3e:df:a2:d6:7d:03:bf:c5:85:65:54:dc:52:
                    ad:3c:8b:a3:fe:1e:ae:46:d4:99:3b:bb:8f:65:8f:
                    55:9f:a2:39:d6:26:35:1e:77:44:5f:b0:30:45:d8:
                    04:f3:39:ba:fc:de:7e:99:24:43:9b:f6:ca:84:f6:
                    bf:d6:45:45:e3:3b:fc:f2:14:5f:9d:15:1e:7b:ae:
                    bd:87:64:dc:94:25:8b:03:f6:e7:fd:94:a7:c8:ec:
                    a9:9a:2f:21:2a:68:57:6a:f3:a8:01:1b:ec:85:c1:
                    a8:e1:53:4c:79:d3:31:be:58:6d:22:7c:af:78:19:
                    06:17:93:2a:67:0f:ec:77:82:53:dc:ae:14:2a:74:
                    fa:e6:c1:7a:15:e0:31:b1:d8:18:76:43:4a:04:87:
                    86:67:5d:21:b9:4c:78:79:32:99:0d:13:ea:ab:f2:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5E:0D:C6:DD:57:51:71:98:A2:AA:5F:F1:7D:E9:4D:FE:D2:74:E9
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231352e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:66:f9:d2:38:41:25:75:5d:c8:ba:3c:85:98:ff:b4:2f:e0:
         0b:9a:07:79:f3:1c:a1:c0:63:b4:4c:7b:42:1c:fa:a4:1d:02:
         74:1b:f9:20:a1:e6:b4:eb:87:2d:72:00:b5:73:22:43:a4:b2:
         33:cf:f9:5a:e5:7c:23:5e:4a:84:e2:94:d0:58:c3:cc:1d:b7:
         26:17:90:f7:46:99:1a:07:4a:d8:6a:f4:ea:66:2b:67:93:59:
         c9:75:14:a5:fc:d8:f7:84:50:42:b0:8e:9e:42:11:2f:d3:14:
         2f:59:1d:d4:c3:5f:43:a7:ff:0f:c0:30:28:72:ae:4d:93:cd:
         3d:47:0b:2c:ca:17:f0:31:c9:42:e0:74:38:0f:ec:d0:ed:f7:
         73:5f:d8:22:6a:84:53:77:34:94:b4:a4:95:23:4d:28:a6:80:
         68:3b:d1:de:e4:3c:c5:5f:37:ae:7c:cb:a8:91:b6:b3:c0:81:
         69:b0:10:4c:b3:2d:8e:b3:fe:d7:49:74:13:09:ec:44:c7:44:
         78:9d:7d:7e:05:ef:55:ad:4c:bd:9f:6d:35:09:51:a7:60:a7:
         f9:db:f4:63:e5:6b:89:1f:bb:8e:26:87:ee:af:95:0b:c7:cd:
         e0:19:4c:3a:b9:8c:b4:c7:f7:15:50:08:56:86:b8:42:9a:af:
         80:4d:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 23:21:32 2024 by rpki-client on console-ams.rpki-client.org