Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e302e302f31392d3234203d3e203237383834.roa
File:                     3139302e39322e302e302f31392d3234203d3e203237383834.roa (raw, json)
Hash identifier:          jcpsAbMtl6rnJARSkaNFrZ66CC2y2G/3NQHOk5IcCJk=
Subject key identifier:   50:8D:D0:B9:C6:23:4C:EE:53:56:C0:E4:73:74:24:C0:ED:70:82:02
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       0F5A9B34875CA342257A895F2CD83BC79ED53877
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e302e302f31392d3234203d3e203237383834.roa
Signing time:             Tue 05 Mar 2024 18:12:38 +0000
ROA not before:           Tue 05 Mar 2024 18:07:38 +0000
ROA not after:            Tue 04 Mar 2025 18:12:38 +0000
asID:                     27884
IP address blocks:        190.92.0.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 20:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5a:9b:34:87:5c:a3:42:25:7a:89:5f:2c:d8:3b:c7:9e:d5:38:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Mar  5 18:07:38 2024 GMT
            Not After : Mar  4 18:12:38 2025 GMT
        Subject: CN=508DD0B9C6234CEE5356C0E4737424C0ED708202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:09:54:4d:e9:72:bf:57:da:9b:42:77:81:10:
                    30:d8:43:23:ad:b0:32:89:c8:17:4e:05:1d:d6:2b:
                    cc:f3:e6:dc:7d:9c:be:be:fe:4a:ef:b0:d5:f3:7e:
                    72:56:66:e3:f6:15:39:9f:7e:98:cf:e7:0b:90:7f:
                    f0:f7:b5:75:f2:2a:8b:dd:b7:0a:93:ae:61:c6:6b:
                    bf:bd:75:7d:47:ec:d8:93:bc:08:61:82:1e:7a:49:
                    db:34:58:dc:18:a3:b8:70:cf:5d:f7:81:70:49:08:
                    af:ba:df:4e:68:7a:b2:b4:b6:6a:fe:66:36:36:a2:
                    d4:0c:d3:01:8a:02:25:60:52:4c:0c:7d:bb:60:b9:
                    d4:97:bb:99:7c:b1:a0:1b:27:22:94:06:42:aa:d2:
                    af:2e:94:20:18:3a:e0:86:7e:b2:c0:ae:7b:82:ff:
                    b7:c8:e6:e8:85:aa:32:9f:ee:57:56:af:59:cf:dd:
                    a8:a0:b8:d4:a6:8a:1a:9a:f6:af:1f:3f:d5:34:3e:
                    b5:0d:ce:fc:c9:82:f7:62:96:6e:13:9f:c2:24:fc:
                    4b:b6:4b:6a:eb:a6:86:4f:52:5d:b7:36:87:f3:c0:
                    a8:69:cb:f6:8b:73:c7:63:65:cf:7b:f6:6c:3d:58:
                    26:f5:a0:78:99:69:41:d4:c2:58:c0:68:53:70:bb:
                    d5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8D:D0:B9:C6:23:4C:EE:53:56:C0:E4:73:74:24:C0:ED:70:82:02
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e302e302f31392d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b2:81:73:1d:ab:b7:9b:6d:3d:2c:fb:49:7f:f0:f9:e1:0a:58:
         4f:7f:75:38:0c:2c:64:43:00:83:f3:60:f1:b2:16:5e:b8:38:
         05:4b:3d:20:a8:09:8a:35:76:ff:ac:f2:c8:2d:79:65:89:38:
         c6:61:64:3f:64:9e:ee:7d:8a:f9:c9:7c:fd:5d:bb:5d:c1:da:
         33:01:09:cb:76:ac:d1:26:78:83:a6:55:0e:05:29:c8:96:b9:
         3b:80:5d:db:42:12:c3:b3:17:38:d9:86:f2:13:95:7f:ba:4f:
         88:ec:de:55:23:be:d1:53:00:4f:fd:71:fa:39:bc:55:99:a8:
         a5:85:8c:45:f4:4f:9c:1a:8d:28:03:d1:87:1b:58:bd:42:d9:
         0e:46:6d:c3:d1:92:cf:04:b3:41:9a:f3:05:64:98:ea:af:e7:
         91:61:df:47:c8:4c:36:b7:17:ab:34:1b:a6:b6:61:cb:9b:98:
         1b:e1:bc:f0:75:1c:65:c1:d7:31:0d:ae:4b:1b:33:78:0d:8a:
         d4:5d:83:c6:06:e6:88:a3:6e:5c:de:24:08:1f:2e:f8:30:b8:
         6e:52:0d:c8:5a:b8:e0:38:7c:6b:ea:53:dc:51:ed:e8:00:d7:
         3f:1c:e1:8f:d9:30:07:2a:05:a4:36:3f:6a:08:ef:c2:2c:02:
         48:4f:57:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org