Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134382e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3134382e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          FoA3CrZAWD76TY5i/t0qPOiKCYexfM4Mp6OQYg3/wdA=
Subject key identifier:   D0:07:5F:6F:D2:13:EC:FE:9A:CE:04:08:48:41:5D:09:C6:3A:45:CC
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       1F6FB0AD00F7C5D508DCDA2498A77D7E6746D933
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134382e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:06 +0000
ROA not before:           Mon 08 Jul 2024 00:15:06 +0000
ROA not after:            Mon 07 Jul 2025 00:20:06 +0000
asID:                     51202
IP address blocks:        190.151.148.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6f:b0:ad:00:f7:c5:d5:08:dc:da:24:98:a7:7d:7e:67:46:d9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:06 2024 GMT
            Not After : Jul  7 00:20:06 2025 GMT
        Subject: CN=D0075F6FD213ECFE9ACE040848415D09C63A45CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:f2:eb:ab:8a:43:c1:0e:59:39:38:14:f2:
                    be:fc:3d:e9:37:f5:b8:cc:2f:c4:10:32:0e:a3:db:
                    6a:14:1f:63:63:8f:c1:1f:30:81:44:10:58:20:b2:
                    ae:d5:c4:d2:30:c0:69:a0:4b:22:5f:c3:59:8f:a5:
                    ea:f5:81:e2:84:75:e2:ec:d6:8b:4c:e9:ee:8e:b9:
                    6d:5f:89:98:0f:85:c0:e2:21:d7:33:58:b9:10:b1:
                    6c:4c:09:2f:c5:e2:6e:26:44:ef:c8:f9:31:ff:aa:
                    0d:7b:a2:ad:67:3e:20:e5:17:ca:94:5b:75:50:7c:
                    c1:ff:6f:68:bb:f1:f8:58:35:cc:a4:d7:05:f8:0f:
                    40:da:b1:9f:e4:5c:19:cb:a7:d1:98:0c:2d:32:7b:
                    c7:bf:41:17:d4:62:96:1e:40:a1:85:40:bc:56:30:
                    a1:c4:48:12:9f:84:2a:db:9a:11:ab:f3:eb:62:54:
                    ce:62:48:14:62:85:44:6d:bb:56:0e:0c:20:b3:5a:
                    cb:ee:33:8b:44:72:ae:8e:c5:bb:f7:43:6f:5b:29:
                    37:79:83:b4:5e:fe:dd:b2:93:9a:36:67:8d:58:d9:
                    10:14:88:92:6d:96:f2:26:b0:89:cf:ea:71:ad:3e:
                    00:de:a3:d1:3b:3f:9e:2a:90:46:c1:3f:dd:7d:71:
                    18:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:07:5F:6F:D2:13:EC:FE:9A:CE:04:08:48:41:5D:09:C6:3A:45:CC
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134382e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:e4:aa:87:10:da:32:4d:de:68:24:cc:9c:17:ba:02:c2:3f:
         45:c7:37:78:75:b7:7c:3e:e5:26:50:67:67:ab:1c:14:d4:81:
         65:10:66:fe:50:74:85:5f:19:65:2b:35:95:b8:79:15:6f:c1:
         1b:81:e7:2f:73:12:16:30:12:a5:06:e1:39:77:5b:1b:f9:e5:
         bd:9f:80:13:04:7c:eb:95:de:71:ef:a8:ae:34:1c:8e:ba:28:
         5a:c3:e1:7a:00:dc:7d:b4:1a:9b:11:cb:f1:b5:60:90:33:57:
         b8:a6:d1:22:43:27:fc:1e:6a:f4:92:ea:67:ad:d2:df:53:66:
         94:5e:d5:10:25:8d:e1:27:37:4f:c4:ec:b5:53:42:84:a3:c7:
         41:e5:06:20:e5:ac:f0:8e:b2:2c:a5:77:83:1f:d5:c4:fa:a7:
         d7:07:34:61:4b:a4:0b:5c:34:5d:36:5d:c8:32:8f:79:00:12:
         ba:d0:37:1a:5e:b5:dc:73:ca:f9:aa:12:c7:59:d3:a4:45:44:
         97:84:3f:4f:e0:fc:2e:0a:94:50:2a:cd:b4:fd:c2:f5:57:5a:
         85:c1:7a:78:ca:80:72:0f:d0:22:79:f7:17:6e:a5:db:e0:c4:
         d6:cc:9a:02:75:2f:d7:ba:db:95:5c:c7:63:a1:dc:3a:3a:1a:
         18:3a:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 21:54:37 2024 by rpki-client on console-ams.rpki-client.org