Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32302d3230203d3e203531323032.roa
File:                     3139302e3135312e3134342e302f32302d3230203d3e203531323032.roa (raw, json)
Hash identifier:          EwynQn1n71Bjw3N4t7G1QPjj01i/T5GwG9ERGAt2Rgs=
Subject key identifier:   CD:3C:77:AA:93:51:7C:2C:53:3B:D6:CD:1F:93:DD:AA:22:97:D6:A4
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       34917C66437A1965CE61A953CA2E2CF54C50397E
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32302d3230203d3e203531323032.roa
Signing time:             Sun 07 Jul 2024 22:25:00 +0000
ROA not before:           Sun 07 Jul 2024 22:20:00 +0000
ROA not after:            Sun 06 Jul 2025 22:25:00 +0000
asID:                     51202
IP address blocks:        190.151.144.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 00:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:91:7c:66:43:7a:19:65:ce:61:a9:53:ca:2e:2c:f5:4c:50:39:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  7 22:20:00 2024 GMT
            Not After : Jul  6 22:25:00 2025 GMT
        Subject: CN=CD3C77AA93517C2C533BD6CD1F93DDAA2297D6A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:82:c7:f8:a3:57:bb:98:7f:68:61:33:f7:
                    96:f5:bc:f8:64:af:f1:1d:04:3c:2b:7f:31:c9:a9:
                    e9:ed:cc:7d:89:ca:57:00:5c:0e:ad:72:13:33:1f:
                    99:e9:ed:d4:48:e9:b3:23:1d:59:92:40:8b:8d:25:
                    08:0f:aa:f6:92:a8:df:d8:cb:53:c0:0b:7f:e8:a4:
                    9b:c9:d0:69:e9:bb:2f:a9:29:a0:08:56:95:c9:da:
                    24:85:c0:9f:dc:2b:e7:48:0e:85:83:f0:6c:d8:d8:
                    6f:58:be:4a:e4:51:a9:f8:85:c7:d7:bf:98:fe:ab:
                    0b:1e:d0:6e:66:7b:88:ef:6b:a5:e8:78:61:62:98:
                    3b:69:53:4b:9f:bd:bf:ed:34:2e:a6:ba:11:76:60:
                    ed:28:4c:8b:06:e9:9c:8e:4c:aa:2e:91:34:10:b5:
                    89:16:05:6e:97:3a:a5:06:3d:d2:84:f9:12:0f:a7:
                    09:78:50:77:10:0b:dd:50:b9:dd:fd:62:59:e1:44:
                    3d:aa:83:e3:4e:20:dc:75:58:00:fe:1d:c8:81:f0:
                    9d:6d:19:ef:fa:68:3e:a9:76:af:ef:96:01:7b:89:
                    f3:79:25:38:8a:fc:d7:4d:04:7c:8c:02:6f:5c:6f:
                    9f:31:5c:51:c2:c9:f8:75:45:e8:4d:d4:59:e7:2e:
                    06:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3C:77:AA:93:51:7C:2C:53:3B:D6:CD:1F:93:DD:AA:22:97:D6:A4
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32302d3230203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bb:b1:6f:e6:2e:71:b6:6e:a5:46:d1:42:4a:47:8c:2d:8e:eb:
         09:b3:27:d0:a2:25:34:12:c6:4f:85:00:bb:96:d5:3a:ba:55:
         45:68:78:e2:58:4e:23:99:fd:70:45:2a:83:31:65:7a:f1:31:
         ce:9a:71:0d:b2:de:fe:47:71:5f:fe:80:6b:0c:24:c4:66:0a:
         24:b1:8c:25:96:2c:85:a8:b2:50:27:de:2a:af:c5:cd:9b:f2:
         89:34:f1:3e:a9:b7:74:69:12:00:16:e7:45:5c:13:c1:91:da:
         af:13:05:b1:a1:5c:09:a9:a0:e0:64:53:a7:cc:dd:c9:fa:0d:
         63:89:ad:a6:42:e2:ea:db:0a:e6:66:ac:e0:38:e5:a6:72:d1:
         80:4d:ca:2c:f6:3f:fc:9b:da:ba:81:23:66:5a:16:c2:4b:11:
         b0:c6:0d:88:c7:32:03:ab:d8:7a:97:52:1b:7b:9d:1a:db:05:
         3e:55:18:d6:8d:ae:c6:54:3d:ef:6f:b5:ef:a6:de:21:db:02:
         2d:63:76:d8:39:b3:ef:0a:71:d5:1d:7a:f0:ce:8c:cd:f1:b5:
         90:f3:75:d0:a3:00:7d:09:67:13:fe:4d:9e:8b:1a:4e:fd:d3:
         b8:d1:64:e8:8a:d8:6f:5a:be:01:de:a7:bf:cf:03:ef:a5:e7:
         d8:3a:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 02:44:19 2024 by rpki-client on console-fra.rpki-client.org