Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/101ab0f79a67896805e01961f5e9865ab0f0da4d.roa
File:                     101ab0f79a67896805e01961f5e9865ab0f0da4d.roa (raw, json)
Hash identifier:          a3eFwOwEZW+RIiqIod4FyhpHP9z81Qqz3mDuGVW0bZs=
Subject key identifier:   06:AC:1D:E7:53:FA:D5:86:70:DB:3D:E0:B4:6A:93:19:52:8B:04:CF
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       2893B5
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/101ab0f79a67896805e01961f5e9865ab0f0da4d.roa
Signing time:             Fri 22 Dec 2023 17:07:17 +0000
ROA not before:           Fri 22 Dec 2023 17:07:17 +0000
ROA not after:            Mon 22 Dec 2025 17:07:17 +0000
asID:                     21859
IP address blocks:        190.93.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 13:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2659253 (0x2893b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Dec 22 17:07:17 2023 GMT
            Not After : Dec 22 17:07:17 2025 GMT
        Subject: CN=101ab0f79a67896805e01961f5e9865ab0f0da4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:d8:c4:c1:80:0a:bb:31:8c:fb:45:ec:39:
                    bb:93:7b:e4:a5:a3:43:4b:83:de:1b:e5:23:8a:4c:
                    91:6e:d9:ae:9f:6c:45:c9:f4:81:a3:82:0c:75:59:
                    f5:35:be:26:c7:91:f7:e2:7e:62:a5:f4:b9:fa:bd:
                    27:20:bb:45:c5:d1:f4:e2:38:27:f1:c9:74:2f:b6:
                    ad:77:65:06:ec:3c:91:12:04:e3:ab:c6:d6:d4:10:
                    f3:fd:d6:6f:3e:27:8b:23:e9:0b:0f:1b:b3:a8:8d:
                    25:56:76:f2:f7:b9:65:c6:71:52:07:a8:dd:be:81:
                    0f:b5:22:4f:f4:8d:92:64:98:69:6e:1f:6d:85:cf:
                    8d:af:f8:7a:71:4a:5c:57:39:4d:b0:56:c7:09:ce:
                    85:71:2e:6b:ae:fc:fa:8c:e6:21:92:03:42:ce:12:
                    21:ea:ee:02:01:36:3b:e5:56:8b:19:aa:4a:fe:37:
                    19:52:7c:ac:00:ed:ca:fa:4b:51:94:ab:59:06:b1:
                    59:17:07:f0:dd:66:d1:9e:4d:4f:4a:64:28:58:7d:
                    aa:7e:bd:1f:45:ed:31:39:3a:29:5a:22:fc:a0:b4:
                    60:53:bd:b5:17:3a:ab:d5:90:b8:26:f5:12:c5:b6:
                    cb:53:26:34:f9:1b:34:59:48:5e:f6:17:cb:08:7b:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AC:1D:E7:53:FA:D5:86:70:DB:3D:E0:B4:6A:93:19:52:8B:04:CF
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/101ab0f79a67896805e01961f5e9865ab0f0da4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:78:ed:ab:f7:f8:6a:bd:97:42:d5:46:c4:19:ff:27:cb:6e:
         86:8d:22:19:87:3f:92:b1:57:1d:c6:2a:34:d8:2c:10:f9:a6:
         45:0c:a6:e3:67:9a:40:e3:90:99:d8:03:c0:89:92:fa:96:a0:
         f0:cc:39:67:41:8b:1d:7b:56:a9:69:f8:27:9b:eb:8a:ff:86:
         3f:a2:7d:79:d0:0b:f8:7d:ca:a7:fd:09:80:5f:08:6c:a7:21:
         80:d8:6c:33:e7:24:03:9d:93:19:b8:8c:3d:b0:b4:20:fb:3f:
         cd:38:fb:52:a9:56:f5:d3:c1:68:83:4b:74:ae:b4:b0:ff:9d:
         c9:7a:57:82:d1:0e:20:eb:0c:75:db:59:8e:59:fa:18:2d:b3:
         d0:c5:5a:26:2e:ef:9f:7c:e5:da:49:85:88:54:13:55:9e:19:
         5a:bb:31:da:20:35:80:4c:0a:e5:88:45:dc:aa:db:1d:05:32:
         40:53:53:97:f3:de:6e:8a:40:3e:45:83:e6:32:6f:2b:cf:9d:
         81:76:69:44:f0:d2:95:8d:b9:97:52:fe:25:bd:d5:0d:16:dd:
         50:29:bb:b4:28:d3:51:85:0c:e2:42:69:cb:3e:17:a1:b1:42:
         87:41:f7:01:3d:5a:39:6c:19:47:89:8e:d4:b9:7e:55:f3:49:
         46:99:ce:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 17:29:54 2024 by rpki-client on console-ams.rpki-client.org