Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232332e302f32342d3234203d3e203531323032.roa
File:                     3139302e3130372e3232332e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          Q3ZOqgK3FtVYv6JSWmLHU/W0jFi9lFAloPMhw3l1GI0=
Subject key identifier:   0F:AD:F1:FD:23:93:91:7B:0C:65:AA:B0:B1:E3:2E:69:DA:65:05:87
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       5E6FFEA0BB1FA94C2AC0B73191F7FBDD38B19BAF
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232332e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:08 +0000
ROA not before:           Mon 08 Jul 2024 00:15:08 +0000
ROA not after:            Mon 07 Jul 2025 00:20:08 +0000
asID:                     51202
IP address blocks:        190.107.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6f:fe:a0:bb:1f:a9:4c:2a:c0:b7:31:91:f7:fb:dd:38:b1:9b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:08 2024 GMT
            Not After : Jul  7 00:20:08 2025 GMT
        Subject: CN=0FADF1FD2393917B0C65AAB0B1E32E69DA650587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:3c:a2:bf:3f:2b:4f:aa:7d:0e:d5:3d:e6:
                    de:68:f6:13:5a:22:31:a0:7f:9c:2f:90:fa:28:85:
                    68:47:d3:1b:60:dc:d3:cd:b6:6b:e9:dc:6e:6c:a2:
                    97:85:0c:56:38:9b:68:79:46:95:b7:49:4f:8b:ae:
                    82:f6:eb:12:fc:48:17:77:5f:eb:66:0f:95:70:26:
                    a2:5f:a6:43:6b:d8:98:ce:03:3e:e7:92:41:0d:2d:
                    1a:71:7e:9e:78:79:aa:63:bd:07:14:4a:23:9f:b3:
                    e2:a4:46:07:db:f5:69:aa:0d:75:8d:60:de:7e:ab:
                    4b:75:47:aa:1b:0a:f8:b4:31:c1:b1:f8:26:e0:c0:
                    25:bd:48:9d:f6:c6:6a:ad:b7:db:31:9d:a5:8b:91:
                    81:21:fe:01:ef:e6:a8:e8:72:cf:99:20:5c:d6:b9:
                    10:e2:d6:5b:96:2c:ed:0e:c9:da:a1:53:46:47:c0:
                    55:80:e7:c1:13:58:f8:f6:c7:60:b9:08:cd:38:7e:
                    3a:ae:74:5d:30:18:13:32:26:6c:69:d1:cd:b1:40:
                    20:35:b4:7a:f7:f2:a0:62:e1:bd:55:65:f2:30:cf:
                    19:cb:bc:d3:34:b1:00:40:9a:47:8b:a8:9a:c9:80:
                    50:8f:29:2a:f8:4c:a4:5d:ab:ee:10:55:45:21:95:
                    d7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AD:F1:FD:23:93:91:7B:0C:65:AA:B0:B1:E3:2E:69:DA:65:05:87
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232332e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:0c:21:7a:df:a0:3c:96:99:db:a7:08:b7:e1:c4:cb:6a:ea:
         69:58:fd:cd:20:b0:74:56:95:66:47:ae:1c:8c:6c:b9:13:1d:
         b6:52:c1:fd:e5:6c:f5:1e:07:d1:a8:89:2d:cc:3c:c5:7f:7d:
         98:b5:f0:6e:ec:2d:6b:f5:a5:05:04:bb:d2:4b:31:49:2c:18:
         aa:08:69:87:41:81:bf:0b:5e:63:50:01:51:7c:02:07:d8:87:
         08:56:85:58:0b:62:20:d1:2a:69:8b:3b:5d:29:14:d1:03:69:
         c9:ce:1a:84:7f:a6:92:1e:ff:7a:3e:31:54:fc:8c:25:42:6c:
         52:9a:2a:ac:9a:61:fc:c9:c8:61:e2:85:5d:4a:d5:07:60:a6:
         af:dd:01:ef:fa:f1:68:e2:ea:c4:56:f3:ee:c8:65:de:78:64:
         ec:d1:bc:2c:3d:33:bf:61:3e:6b:2e:89:e2:52:86:0a:18:54:
         cf:c3:e9:aa:ad:02:a8:28:59:ea:c0:1a:48:75:08:22:75:b4:
         1a:30:b6:9f:fe:c5:90:0f:af:98:fb:44:2d:7c:6e:24:6c:50:
         c5:1d:8f:97:9f:0a:bb:f5:f3:98:eb:ad:76:ca:af:71:2e:bf:
         64:cc:bf:dd:3e:5b:46:15:2f:a9:56:c2:3d:eb:20:e9:a7:fb:
         1a:1d:99:62
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXm/+oLsfqUwqwLcxkff73Tixm68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDgwMDE1MDhaFw0yNTA3MDcwMDIwMDhaMDMxMTAvBgNV
BAMTKDBGQURGMUZEMjM5MzkxN0IwQzY1QUFCMEIxRTMyRTY5REE2NTA1ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOfjyivz8rT6p9DtU95t5o9hNa
IjGgf5wvkPoohWhH0xtg3NPNtmvp3G5sopeFDFY4m2h5RpW3SU+LroL26xL8SBd3
X+tmD5VwJqJfpkNr2JjOAz7nkkENLRpxfp54eapjvQcUSiOfs+KkRgfb9WmqDXWN
YN5+q0t1R6obCvi0McGx+CbgwCW9SJ32xmqtt9sxnaWLkYEh/gHv5qjocs+ZIFzW
uRDi1luWLO0OydqhU0ZHwFWA58ETWPj2x2C5CM04fjqudF0wGBMyJmxp0c2xQCA1
tHr38qBi4b1VZfIwzxnLvNM0sQBAmkeLqJrJgFCPKSr4TKRdq+4QVUUhldftAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUD63x/SOTkXsMZaqwseMuadplBYcwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzMDM3MmUzMjMyMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMxMzIzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmvf
MA0GCSqGSIb3DQEBCwUAA4IBAQCQDCF636A8lpnbpwi34cTLauppWP3NILB0VpVm
R64cjGy5Ex22UsH95Wz1HgfRqIktzDzFf32YtfBu7C1r9aUFBLvSSzFJLBiqCGmH
QYG/C15jUAFRfAIH2IcIVoVYC2Ig0SppiztdKRTRA2nJzhqEf6aSHv96PjFU/Iwl
QmxSmiqsmmH8ychh4oVdStUHYKav3QHv+vFo4urEVvPuyGXeeGTs0bwsPTO/YT5r
LoniUoYKGFTPw+mqrQKoKFnqwBpIdQgidbQaMLaf/sWQD6+Y+0QtfG4kbFDFHY+X
nwq79fOY6612yq9xLr9kzL/dPltGFS+pVsI96yDpp/saHZli
-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org