Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231392e302f32342d3234203d3e203531323032.roa
File:                     3139302e3130372e3231392e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          ZHrz+3LZ/fKiPotDRPUSwm8NZwtWgWYy8hwDvCVTf5o=
Subject key identifier:   94:DE:14:CE:61:22:E7:D8:C7:1E:E0:55:B1:BF:A5:82:EB:D9:E4:45
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       634A1856EA56CDE94EBDCDC5C052B71D6A0246CF
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231392e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:01 +0000
ROA not before:           Mon 08 Jul 2024 00:15:01 +0000
ROA not after:            Mon 07 Jul 2025 00:20:01 +0000
asID:                     51202
IP address blocks:        190.107.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4a:18:56:ea:56:cd:e9:4e:bd:cd:c5:c0:52:b7:1d:6a:02:46:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:01 2024 GMT
            Not After : Jul  7 00:20:01 2025 GMT
        Subject: CN=94DE14CE6122E7D8C71EE055B1BFA582EBD9E445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e4:65:8a:d0:94:2b:d7:84:f0:36:2f:03:e8:
                    8d:b5:1d:ba:8d:2d:09:a6:e2:ec:1d:8b:27:bd:03:
                    21:fd:b4:3e:24:88:d9:fa:25:1e:8f:fa:bd:a0:d3:
                    ac:25:5a:d8:55:65:c1:53:f3:06:60:b0:c3:2f:f5:
                    7e:63:6a:64:94:a7:42:c5:bd:26:88:27:47:d9:6f:
                    e6:f5:d8:f8:e0:d5:f6:62:0b:87:fa:f8:e5:69:8f:
                    4c:f0:ff:a5:3c:2b:f1:cc:69:00:6e:29:8a:2d:01:
                    b7:9c:d4:c1:9c:b3:ff:46:82:e9:12:7d:5b:a1:6b:
                    21:69:be:17:53:d6:0f:3c:cd:f9:d9:12:cc:9d:dd:
                    04:16:52:90:d0:98:c8:5d:0d:c0:72:79:65:7b:cf:
                    7f:80:46:7e:35:73:d4:18:9e:5e:91:68:49:59:12:
                    f3:30:76:04:3d:74:10:e8:c1:cf:65:7d:cf:7f:9e:
                    70:3f:6a:5a:f8:83:95:b1:ad:68:f2:4e:df:79:32:
                    d9:b3:71:e6:4c:e7:92:d2:ac:1d:22:db:a7:56:77:
                    a3:58:0f:0f:6b:64:07:68:87:42:4c:34:6f:82:b3:
                    33:66:63:b1:b4:50:74:4e:7f:3a:b2:38:71:10:60:
                    3f:f8:5e:9f:62:9f:af:31:e3:9d:7f:0a:4b:55:6f:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DE:14:CE:61:22:E7:D8:C7:1E:E0:55:B1:BF:A5:82:EB:D9:E4:45
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231392e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:5e:e1:ed:3e:9f:39:92:1e:27:98:8a:4b:d5:96:41:0f:11:
         ce:9e:c6:5e:43:07:49:03:00:0d:4d:2e:ae:63:51:a2:dd:0a:
         09:c6:0f:f7:e3:e2:e7:99:b0:5d:ec:25:66:35:9e:25:11:1f:
         e0:95:4f:b3:38:00:94:f0:a7:b0:29:94:f3:05:aa:11:3b:d7:
         57:0c:2c:38:56:e7:8b:67:f2:ec:f0:37:d6:c5:98:d7:04:70:
         55:01:a6:7e:40:60:76:b1:ed:5e:58:b8:70:90:4b:00:6a:e3:
         75:df:fc:23:0c:aa:6c:56:3f:9d:13:f7:0d:76:e6:9d:99:1b:
         b8:d7:2d:11:40:8a:3b:72:d8:53:d3:2b:72:ec:e2:59:b2:37:
         75:a8:9c:6a:6e:ff:f2:5a:f4:af:cd:f3:46:aa:e0:85:c5:a7:
         c0:19:33:c1:96:4a:75:0c:95:91:d4:af:33:f4:b1:34:3b:e0:
         b7:b8:87:d8:17:01:3f:9c:af:71:9c:df:39:4d:11:39:d6:e6:
         a2:0f:d9:a3:c2:68:42:fe:af:7c:e2:8f:55:ba:03:8b:da:75:
         c2:58:e9:30:7c:8e:10:0d:2d:9d:b2:f4:80:5b:09:be:d8:fe:
         31:16:e4:c7:28:ea:e1:e7:d2:00:bb:d1:15:df:54:83:3f:3c:
         92:54:90:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org