Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131352e302f32342d3234203d3e203531323032.roa
File:                     3139302e31332e3131352e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          dbk2yf7OfA2PjeV6sp59yitNW9ZlVayG0NrPCPn0f5I=
Subject key identifier:   BC:84:42:37:98:1E:80:24:E6:D3:5E:6C:8E:B8:95:9D:4D:95:A9:92
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       6614028380995E8CDD460298CCA1800FF30559AE
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131352e302f32342d3234203d3e203531323032.roa
Signing time:             Sun 07 Jul 2024 01:15:00 +0000
ROA not before:           Sun 07 Jul 2024 01:10:00 +0000
ROA not after:            Sun 06 Jul 2025 01:15:00 +0000
asID:                     51202
IP address blocks:        190.13.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 22:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:14:02:83:80:99:5e:8c:dd:46:02:98:cc:a1:80:0f:f3:05:59:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  7 01:10:00 2024 GMT
            Not After : Jul  6 01:15:00 2025 GMT
        Subject: CN=BC844237981E8024E6D35E6C8EB8959D4D95A992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:41:f0:9b:86:cb:19:59:38:48:56:54:f8:
                    12:f4:50:8d:79:e6:e4:b6:7c:c7:cd:c5:dd:fe:bb:
                    6d:c8:c8:a9:e3:63:40:b1:30:82:93:a9:01:38:a3:
                    ee:f0:ac:8d:8e:99:ae:d0:a4:76:41:ab:3f:c0:aa:
                    0e:9b:f0:98:34:1b:21:f1:14:4e:8e:71:b8:07:7a:
                    0f:16:4a:f5:ac:e1:2a:8f:d5:4a:ba:42:5c:8e:e5:
                    ef:2a:39:62:3a:2f:56:f1:93:07:fb:0b:31:e4:59:
                    a3:17:2c:ec:69:82:56:ae:25:3d:13:b3:98:5b:bc:
                    33:f5:fb:c3:c6:ec:df:80:42:3e:a1:a7:a1:2b:d8:
                    57:e2:e8:1f:4a:69:8e:4e:93:43:56:a2:de:8b:d1:
                    b3:24:08:d1:4e:73:78:a1:93:58:3a:be:1d:8a:e5:
                    3d:f9:f1:46:26:2c:b1:a4:2c:70:85:d0:41:bd:f6:
                    3f:a8:a7:f9:40:ad:94:1f:a4:d1:dc:f4:d4:af:17:
                    70:76:21:7a:10:f6:bc:14:3f:67:a7:58:7c:db:85:
                    63:39:3c:f1:43:f5:3a:47:5f:5f:f4:7a:69:23:63:
                    f4:16:ac:f7:17:88:26:20:c1:7f:06:12:2d:07:6d:
                    a5:e8:da:a4:40:9f:3a:f9:cf:12:75:bb:02:46:76:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:84:42:37:98:1E:80:24:E6:D3:5E:6C:8E:B8:95:9D:4D:95:A9:92
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131352e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:aa:8f:f9:e4:d2:74:62:50:ce:13:59:27:07:d1:2c:10:31:
         9d:26:38:ba:a9:ff:a1:e0:dd:c8:3c:92:ff:2c:40:4e:c2:0c:
         0a:88:2d:77:13:14:56:2b:50:af:b0:b6:cc:e7:fd:70:4f:f1:
         43:15:fd:0d:a5:f2:38:b2:37:6c:f2:44:a7:40:8a:d0:73:dc:
         6a:17:4c:5f:5a:36:60:0a:fd:05:da:4a:36:a2:7d:db:41:ca:
         bb:16:8f:92:8a:1a:ed:41:91:b1:38:5a:59:ff:4b:c4:ef:62:
         71:9a:30:03:7d:d0:b7:04:87:75:13:c5:3a:18:37:8c:2e:40:
         8e:c2:3a:cf:a9:25:20:ba:29:02:d2:f3:88:a0:13:17:aa:8f:
         70:93:38:3a:e9:b5:4c:63:03:58:fa:69:98:a6:32:35:a1:d0:
         98:1d:dd:a8:b1:73:63:fa:81:a9:5a:2c:a4:60:0c:b4:d9:40:
         99:2d:78:f2:4e:7f:5e:70:34:43:78:b5:69:26:cf:2b:d5:89:
         e7:a3:be:f1:77:fc:85:3e:00:76:ee:ec:a3:bd:6f:9f:86:8c:
         04:e0:76:ee:ee:0c:c1:26:9f:a6:17:86:58:84:02:46:8b:98:
         07:db:37:d9:6b:77:05:f1:c1:fb:0c:70:c1:c2:7f:c2:bd:11:
         16:bd:1e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 23:21:32 2024 by rpki-client on console-ams.rpki-client.org