Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/ef9ca4485275e877c68036b1c4c3c8ccbe948afe.roa
File:                     ef9ca4485275e877c68036b1c4c3c8ccbe948afe.roa (raw, json)
Hash identifier:          y/JpRYeUgFh6E6ofTwYnu/GOfDodt2cMwxYOjP72390=
Subject key identifier:   5F:A2:D9:9E:6F:7E:A3:33:EE:B4:B5:B6:4D:B5:50:34:BE:2F:96:2E
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D94C3
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/ef9ca4485275e877c68036b1c4c3c8ccbe948afe.roa
Signing time:             Wed 24 Mar 2021 14:35:13 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        190.24.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890051 (0xd94c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=ef9ca4485275e877c68036b1c4c3c8ccbe948afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b7:e9:b0:94:a2:9c:5b:14:60:9e:19:7a:bc:
                    70:4c:db:92:27:94:7d:88:b4:61:c1:f6:3e:c9:a3:
                    75:0a:b7:4b:2c:dd:2c:67:83:64:f2:26:bb:c4:ed:
                    b9:1e:6c:52:1f:4e:67:2b:3d:4c:78:4e:24:f7:54:
                    2b:85:dd:95:fa:f9:52:86:10:f9:f7:2c:e6:3a:18:
                    e5:b6:7f:1e:d8:cf:3b:db:2a:54:b2:38:81:52:7d:
                    ce:f4:a1:e0:a0:b3:f1:d8:e7:d3:97:38:08:05:b6:
                    ea:dc:66:45:61:fe:79:cc:26:89:bd:16:d6:0f:f4:
                    15:90:2d:a2:e5:ab:a6:2a:c7:3d:a7:73:4e:02:99:
                    f0:da:cb:b9:9e:a4:bb:28:aa:9a:35:4c:d9:3f:d4:
                    fe:14:11:f7:47:e8:15:56:43:87:6f:e6:bd:a9:b6:
                    07:fd:11:8b:11:9b:5b:c4:ff:9e:ea:d3:4d:5d:6c:
                    4a:a9:2d:9a:88:3e:89:b5:f4:8b:6e:df:ec:1e:cc:
                    e2:73:94:b2:c3:8b:4b:9f:c9:20:64:d6:75:92:4b:
                    3c:46:46:06:f7:c3:c7:5a:c8:02:e2:6a:df:3f:a3:
                    71:1a:f4:0a:7d:7e:54:0a:bc:e0:f0:cd:5c:6f:30:
                    e1:44:fd:23:74:8b:fd:be:12:94:87:59:e3:93:64:
                    a5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A2:D9:9E:6F:7E:A3:33:EE:B4:B5:B6:4D:B5:50:34:BE:2F:96:2E
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/ef9ca4485275e877c68036b1c4c3c8ccbe948afe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.24.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:c9:ab:3d:6b:c3:93:75:0b:b1:e1:48:1b:72:b2:5d:7d:90:
         88:af:9e:8f:f4:c9:1a:53:85:41:2e:3d:97:37:59:c1:3c:12:
         b3:fa:1c:ba:15:52:97:93:6d:a8:9a:73:72:a8:bf:39:03:a6:
         44:96:d4:7c:ee:34:6b:a4:54:2b:4a:c7:56:f9:f6:36:5f:0f:
         ee:84:66:0d:8b:d1:16:be:fc:dd:a0:e9:b5:82:d9:9a:c3:03:
         d5:e2:ef:85:c8:11:d2:19:2d:13:ef:3c:1d:6a:d2:20:d1:cd:
         49:e6:07:f5:82:f0:a5:00:ca:5c:f5:92:69:12:62:80:f3:ef:
         87:fe:ba:58:ff:df:74:2d:d2:21:9a:8e:ce:08:80:20:bf:d1:
         b4:93:12:b6:bd:d9:a2:c4:16:8b:6d:e8:dc:62:a8:fb:6a:db:
         bd:4d:b3:00:62:da:9b:a8:f6:a0:54:c9:8a:39:bb:51:6a:d0:
         df:29:91:44:f2:17:d1:73:91:c6:0e:4c:c1:c0:11:40:d7:37:
         36:a6:2c:70:55:62:2f:29:06:6f:2c:c7:e9:32:9a:23:fa:a0:
         cf:13:a9:f8:d4:11:ce:76:af:d5:be:f8:32:c9:10:d1:70:15:
         62:b0:57:f4:28:0e:c0:d6:9b:03:bf:cd:38:2b:05:93:86:7c:
         f5:ed:43:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:49 2023 by rpki-client on console-ams.rpki-client.org