Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32302d3234203d3e203531323032.roa
File:                     3139302e3135312e3134342e302f32302d3234203d3e203531323032.roa (raw, json)
Hash identifier:          MMb4L1UWZaPkkqPXYGlFVKTjbzT2vxqjSzK2b8Emph8=
Subject key identifier:   A1:7D:A4:11:D7:BC:DF:90:67:47:63:38:2D:FD:78:4C:BE:E3:B6:6F
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       78C65417F2973C003B1B5B8CCDA9D112430ECF9E
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32302d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:40:01 +0000
ROA not before:           Mon 08 Jul 2024 00:35:01 +0000
ROA not after:            Mon 07 Jul 2025 00:40:01 +0000
asID:                     51202
IP address blocks:        190.151.144.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c6:54:17:f2:97:3c:00:3b:1b:5b:8c:cd:a9:d1:12:43:0e:cf:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:35:01 2024 GMT
            Not After : Jul  7 00:40:01 2025 GMT
        Subject: CN=A17DA411D7BCDF90674763382DFD784CBEE3B66F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:1a:ea:f4:16:a6:6d:4b:3c:cb:34:30:99:
                    80:cd:07:4e:11:c3:15:10:05:47:23:43:aa:78:e9:
                    3b:4b:b7:c6:f1:45:ce:f0:1d:2f:c7:08:a1:f7:6a:
                    c9:c0:5d:af:f5:94:20:e4:40:bc:bd:a3:6e:1b:f3:
                    67:eb:8a:42:41:42:87:22:a6:05:58:ae:5c:e8:97:
                    2f:17:dd:43:0a:d2:32:88:9f:d0:7e:00:58:6e:24:
                    91:13:8f:36:d4:07:91:10:53:8c:75:cc:0b:26:b3:
                    ee:d8:44:66:24:b9:a5:0d:6c:ea:47:37:e0:84:c9:
                    75:98:1e:6e:aa:aa:c6:94:d5:0e:73:42:34:eb:78:
                    f3:be:17:c2:60:32:5d:fe:db:b5:fe:63:3a:ac:95:
                    57:56:9d:54:5f:40:0b:70:d6:9f:e5:b5:ac:ac:52:
                    74:8d:29:54:f2:d2:63:bd:25:d5:e1:6d:87:2e:f0:
                    a9:e7:14:fc:6b:1c:62:3e:c6:20:75:f0:da:74:6d:
                    83:9b:c2:92:37:de:8d:b9:1a:c0:6b:84:10:bc:08:
                    15:18:e7:8c:c0:a1:aa:14:58:2f:84:8a:09:47:22:
                    69:b8:b0:53:7f:c9:76:f2:85:0f:5e:99:3e:2a:13:
                    94:ba:40:57:dd:a2:c8:2e:22:8c:67:c2:f1:8d:c3:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7D:A4:11:D7:BC:DF:90:67:47:63:38:2D:FD:78:4C:BE:E3:B6:6F
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32302d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:ea:5f:cf:bc:80:81:67:ef:37:09:e6:be:db:eb:ba:d2:bb:
         72:9a:b2:d3:89:fc:5f:d3:41:9e:e3:24:33:47:4b:84:ab:e4:
         4d:f3:79:57:29:b9:0a:75:a4:64:92:06:01:41:26:75:29:8e:
         a6:c0:84:c8:c1:d9:79:c6:c2:37:c9:85:85:dc:fb:f5:79:d7:
         46:56:a7:3d:00:62:12:f0:bc:20:ba:77:5d:58:2e:b6:f9:a5:
         af:c9:90:e5:bb:c4:9a:b1:d9:38:39:06:c4:4b:5c:c6:4b:67:
         21:7a:01:fe:2e:cc:00:ed:b9:e2:99:9f:5b:5b:d8:d2:3f:58:
         22:84:f8:bc:62:f0:8c:5a:c1:9a:84:cc:92:29:e6:a5:b3:0b:
         9d:d9:dc:67:c9:67:73:34:81:66:1f:8d:e0:f1:5b:ec:d8:de:
         e8:1a:6e:15:8e:fe:e2:45:3b:ee:66:4c:84:08:1c:c6:62:bf:
         d4:45:6b:7d:18:63:05:d8:c8:6a:39:73:a6:40:0c:b9:29:20:
         47:66:91:4f:dc:b6:b4:a0:b3:fd:59:22:24:c9:d3:74:7f:de:
         2c:37:56:f0:05:53:04:eb:bc:0b:e3:fc:41:6b:f2:54:04:5a:
         cc:6b:b9:1f:85:26:8d:05:a8:04:42:b6:99:6e:0f:60:8b:83:
         5e:35:68:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org