Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231382e302f32342d3234203d3e203531323032.roa
File:                     3139302e3130372e3231382e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          aASvr3yGfofpZkcyA3XWS0J245glsMK5nnV1KEuUbrw=
Subject key identifier:   02:DD:CF:DA:8D:FF:B3:07:F6:EF:FF:1C:92:E0:04:E6:DD:4E:D5:5C
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       670512C0560DEA053FE4D62CB55C4F7958AAB492
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231382e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:01 +0000
ROA not before:           Mon 08 Jul 2024 00:15:01 +0000
ROA not after:            Mon 07 Jul 2025 00:20:01 +0000
asID:                     51202
IP address blocks:        190.107.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:05:12:c0:56:0d:ea:05:3f:e4:d6:2c:b5:5c:4f:79:58:aa:b4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:01 2024 GMT
            Not After : Jul  7 00:20:01 2025 GMT
        Subject: CN=02DDCFDA8DFFB307F6EFFF1C92E004E6DD4ED55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8a:80:89:d8:b4:b7:35:30:3c:7e:e0:ff:9a:
                    7a:ac:bc:52:54:57:6d:14:f0:ee:7b:3e:cb:99:29:
                    88:de:40:ce:97:c4:a5:55:03:ca:b2:48:16:c4:99:
                    54:b0:3b:af:17:00:4f:07:eb:45:b5:a8:74:73:e9:
                    41:a1:03:5b:74:00:a1:12:af:04:71:51:ab:c6:62:
                    af:7e:ea:6d:41:4f:a7:1f:c4:79:64:5a:12:1a:54:
                    d0:f7:e7:67:7c:f2:ed:46:4f:f6:b1:76:de:76:a5:
                    9f:1e:83:54:16:e8:53:4b:a5:5a:71:24:c1:2d:6c:
                    c5:f2:1e:8e:4d:b3:2b:73:61:ed:59:03:55:ad:c9:
                    a9:a5:9c:51:b5:f7:13:b7:cd:2a:3d:ba:01:8e:69:
                    0e:94:97:fe:78:b4:0f:6e:a6:68:9b:0d:ad:7d:3b:
                    5d:a3:ad:1f:37:8d:54:a4:d6:ca:b8:46:20:13:15:
                    43:27:9a:8b:97:f6:89:c2:07:04:b5:3c:2f:2a:21:
                    ec:37:a8:94:69:46:19:38:5f:3e:ed:b9:e9:c8:5c:
                    25:1c:1d:31:d6:6f:aa:26:e2:4d:ca:6e:6d:29:d2:
                    ef:5a:ec:50:d6:7c:9b:95:4e:ca:bd:74:f0:7a:35:
                    98:1f:1c:d3:9f:00:d9:8d:bc:0d:3a:ad:1c:ef:30:
                    ca:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DD:CF:DA:8D:FF:B3:07:F6:EF:FF:1C:92:E0:04:E6:DD:4E:D5:5C
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231382e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:e2:97:45:d2:92:cc:b7:7c:4a:16:03:48:72:73:72:54:
         42:55:1d:de:41:60:90:15:14:10:41:b3:92:c3:bf:11:9e:47:
         ea:bb:69:bd:77:d9:14:1e:63:c3:e6:43:8d:5a:25:65:c8:88:
         dd:43:34:82:c6:98:76:fd:a8:00:52:b8:2d:a9:be:24:73:28:
         56:dc:f5:2e:db:e0:56:cf:9d:83:08:02:18:29:14:14:97:97:
         da:9d:80:8b:96:68:26:e0:0d:8a:50:6e:0e:85:96:f9:c5:4c:
         4f:8f:ba:69:88:ff:df:e4:db:af:c2:50:9a:10:25:11:97:b8:
         ac:77:ad:bb:94:c5:a3:2d:be:1f:f0:fa:ba:ac:c2:32:e3:82:
         67:cd:4f:f3:7f:23:3e:57:66:f9:7b:25:9c:8c:b3:80:0b:9b:
         50:38:f0:de:cd:91:c5:35:05:07:4c:9e:c3:65:ff:52:7f:aa:
         68:ad:2d:36:3d:81:f8:c4:28:17:21:85:f4:3d:1d:8e:4c:f0:
         ca:6d:18:4b:0e:6f:3d:12:1c:9b:17:65:8d:05:b0:6a:77:cd:
         bb:bd:69:6d:bc:8b:48:54:c2:a8:08:2f:5c:5a:08:b5:a5:cc:
         3b:ce:96:41:c4:a6:e9:7b:de:27:a9:ae:4c:51:43:ed:01:d3:
         70:bc:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org