Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32342d3234203d3e203531323032.roa
File:                     3139302e3130372e3231362e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          NLRzDCT08Tut7sqEAgFDszSpDwm7JYeRfyBAuTkhUhE=
Subject key identifier:   94:FF:93:15:9F:04:59:51:EB:8E:40:4F:20:63:8B:3D:5F:2A:FC:15
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       43A767780259F4B33D0BCC844D8DD4F371CAC7CD
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:10 +0000
ROA not before:           Mon 08 Jul 2024 00:15:10 +0000
ROA not after:            Mon 07 Jul 2025 00:20:10 +0000
asID:                     51202
IP address blocks:        190.107.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a7:67:78:02:59:f4:b3:3d:0b:cc:84:4d:8d:d4:f3:71:ca:c7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:10 2024 GMT
            Not After : Jul  7 00:20:10 2025 GMT
        Subject: CN=94FF93159F045951EB8E404F20638B3D5F2AFC15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:9d:c7:c1:fa:9b:71:da:92:b9:dd:b0:a1:
                    cf:d6:da:49:be:fe:c9:c1:a3:ec:ee:6c:0b:98:81:
                    cd:65:1a:3c:98:52:57:2f:e5:57:81:8b:55:c2:28:
                    e1:dd:27:6a:f1:0e:1f:c5:57:82:db:e0:ab:28:b0:
                    a5:13:91:54:10:bf:bf:ae:37:7a:77:51:43:04:44:
                    b5:f8:26:7d:14:b2:0f:42:f1:0d:a6:cf:51:0f:0f:
                    35:47:18:d9:db:ed:cf:3e:33:87:a5:1c:0f:09:18:
                    41:04:48:6b:b7:c1:3e:2a:4c:3f:81:67:1c:11:f9:
                    ad:8d:ec:6e:b0:dc:34:00:c1:e8:eb:de:56:8a:23:
                    95:3c:6e:ee:c2:8d:a4:0f:10:7b:4b:7d:91:b4:93:
                    69:cb:6e:1f:47:b8:39:79:3b:f7:69:f4:6f:48:b3:
                    4f:c7:ba:ad:7a:5c:16:fd:e3:bd:24:69:58:a9:8b:
                    cb:b4:eb:b2:70:f6:3b:f2:73:4a:3e:2a:92:f5:ec:
                    8e:f5:a6:29:fd:5e:3e:63:d0:8e:af:0a:55:a4:7a:
                    5c:90:54:a9:dd:66:07:3d:a9:31:b3:96:a2:10:8c:
                    08:f1:cc:16:73:ac:0a:77:fe:d2:f0:28:7e:be:df:
                    52:e5:bd:07:7a:28:ff:16:f4:68:5b:6a:c3:74:42:
                    ee:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FF:93:15:9F:04:59:51:EB:8E:40:4F:20:63:8B:3D:5F:2A:FC:15
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:37:3b:87:5c:36:7a:39:1c:85:e3:83:f1:c8:a2:6a:fd:a2:
         ff:31:39:93:d3:b3:c2:61:bb:14:45:3d:ab:7f:da:bb:ba:72:
         6f:36:91:14:bf:1b:19:7e:1f:e2:a2:78:33:0e:3c:60:0c:76:
         5d:b7:99:32:de:77:8c:43:63:99:18:b7:85:d6:eb:e7:bb:6d:
         a4:ce:1c:d1:02:16:87:49:4c:b1:e5:b9:b4:be:38:13:04:a2:
         e0:0a:0c:31:eb:e3:c2:ba:ce:30:4c:73:58:3a:54:9e:0e:94:
         f2:f3:e7:3b:c2:15:b5:10:ee:81:a8:ee:8b:c1:85:1e:58:7c:
         7c:89:1c:df:d0:91:1b:36:ac:13:bd:df:0b:b3:99:a8:f8:ea:
         17:f9:93:83:69:24:4b:b9:9e:2b:ba:a0:88:cc:85:0a:5d:22:
         35:85:87:01:e8:c1:c5:b0:80:3d:77:54:09:01:4f:17:84:42:
         03:80:76:4e:4c:72:3e:ae:cf:5e:ee:74:61:c2:28:f8:b3:2d:
         9a:2d:b2:c3:b8:6f:eb:9f:ff:42:40:77:09:51:55:7c:55:6a:
         51:4f:d4:5a:37:ea:d1:5f:c8:12:c9:99:69:45:d5:55:fd:8a:
         7a:03:83:d4:12:f0:40:95:71:8e:7b:b5:ee:d2:30:ff:ca:ba:
         3a:9e:d0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org