Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7e98d0433b6f203bbb07133603074280ec252974.roa
File:                     7e98d0433b6f203bbb07133603074280ec252974.roa (raw, json)
Hash identifier:          0iyazFTXAmazB1arwJtGKOp1wKwhFEmeZ3SWQCknbn4=
Subject key identifier:   5F:CD:17:16:41:57:93:10:64:C6:10:EE:A4:AF:27:22:AB:A0:E7:D6
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       234DFF
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7e98d0433b6f203bbb07133603074280ec252974.roa
Signing time:             Wed 23 Aug 2023 18:47:29 +0000
ROA not before:           Tue 22 Aug 2023 18:47:26 +0000
ROA not after:            Sat 23 Aug 2025 18:47:26 +0000
asID:                     52267
IP address blocks:        190.54.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Jan 2024 14:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313727 (0x234dff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Aug 22 18:47:26 2023 GMT
            Not After : Aug 23 18:47:26 2025 GMT
        Subject: CN=7e98d0433b6f203bbb07133603074280ec252974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d1:3a:dc:f8:ce:98:bc:d9:13:87:31:5e:d9:
                    ec:54:3e:50:54:2d:32:44:8e:b6:af:b7:33:16:57:
                    ea:0e:aa:e8:40:58:4a:6f:94:ce:67:fd:dd:95:dc:
                    c6:c8:65:ea:15:76:fb:2c:e7:e4:b4:c7:6b:b7:eb:
                    dd:c7:f7:ce:50:c8:d5:dd:1f:15:5f:bb:13:60:ab:
                    10:a2:e7:c0:82:be:0f:7f:d6:b1:e9:e2:2c:ac:4c:
                    14:ee:77:60:db:a0:95:29:ce:f9:88:e0:fb:2f:0b:
                    f9:46:f2:8b:d6:8d:1f:42:04:21:56:00:37:9e:70:
                    da:d2:0b:cb:b4:86:8e:94:d4:45:ca:9b:f8:3e:67:
                    a8:ab:34:54:f3:fd:4e:2f:7b:3e:0f:77:b9:4e:fc:
                    e9:ba:7c:7d:bc:4d:6e:3a:2c:b8:ea:6b:c1:f7:b6:
                    81:3a:7a:f9:fc:31:0a:78:bc:f8:d2:7c:06:20:ac:
                    36:93:30:8c:50:5d:c7:c4:8c:38:11:a4:78:77:c0:
                    d1:b6:f1:68:bc:e3:70:01:08:9d:61:2a:9d:99:34:
                    de:29:f6:f3:9a:05:77:6f:3d:80:f2:e7:2d:2b:58:
                    b1:8e:59:83:28:ec:51:97:5c:42:87:de:0b:54:82:
                    02:05:1b:03:59:4b:b7:73:e1:22:21:5f:cc:42:03:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CD:17:16:41:57:93:10:64:C6:10:EE:A4:AF:27:22:AB:A0:E7:D6
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7e98d0433b6f203bbb07133603074280ec252974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:01:88:90:75:49:2e:03:63:35:f7:94:7c:d8:5d:fe:6a:78:
         01:da:4f:0c:75:c1:26:1e:5c:d6:d2:d0:3f:de:b0:75:6a:e2:
         0b:6f:43:93:6c:00:c1:2a:f0:d9:61:12:1f:ef:95:d6:8f:ae:
         32:2d:9f:ca:1b:4e:7a:87:f1:55:1a:29:12:1d:df:d4:87:36:
         45:eb:1d:bc:95:f4:ed:e4:8d:b6:fe:bb:96:55:83:97:99:f5:
         80:3f:01:31:2c:d5:da:6b:df:df:c2:b5:eb:65:38:eb:1b:e0:
         1e:96:11:38:b9:66:d5:e2:48:9a:84:0f:74:24:78:e1:a6:05:
         d1:93:f5:ff:5d:89:06:cc:4f:9e:14:84:1d:f4:28:9c:ed:61:
         e5:4f:30:0e:16:da:11:64:95:46:30:2b:6b:7c:cb:60:28:d5:
         4d:94:60:8f:c0:02:2a:52:bd:5b:43:3d:17:53:67:58:b7:85:
         32:a8:23:63:ad:9d:d1:02:67:c8:59:26:ae:5c:f4:7c:b7:e9:
         ba:af:55:48:52:d0:e9:bb:42:24:9b:24:2b:03:42:2f:9f:d1:
         9d:b0:b8:43:ba:e8:91:bc:11:4b:3c:b6:f1:92:a9:90:2b:c5:
         f3:d6:5f:bf:98:6c:8d:54:52:ce:75:5e:44:5b:e5:31:b1:cc:
         45:ce:5d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 19:47:37 2024 by rpki-client on console-fra.rpki-client.org