Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/109df7f2b5ed5fddecc9c7d7802c061da58ca3cd.roa
File:                     109df7f2b5ed5fddecc9c7d7802c061da58ca3cd.roa (raw, json)
Hash identifier:          NKoaPwz6zMGg40ZOS+GNTTgaYG8Z3vG5DR+Uq3rkg/A=
Subject key identifier:   FE:F9:5D:B6:4A:6E:CA:9B:67:7F:16:2C:91:9C:85:AB:DD:57:19:A9
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       231437
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/109df7f2b5ed5fddecc9c7d7802c061da58ca3cd.roa
Signing time:             Thu 10 Aug 2023 19:34:56 +0000
ROA not before:           Wed 09 Aug 2023 19:34:56 +0000
ROA not after:            Sun 10 Aug 2025 19:34:56 +0000
asID:                     834
IP address blocks:        190.93.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2298935 (0x231437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  9 19:34:56 2023 GMT
            Not After : Aug 10 19:34:56 2025 GMT
        Subject: CN=109df7f2b5ed5fddecc9c7d7802c061da58ca3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:43:a1:62:06:d5:1d:2b:64:ec:df:06:c7:
                    fa:dc:71:73:15:b7:57:39:12:bc:f2:bf:02:57:c5:
                    71:29:8b:1a:2a:2e:e7:f0:50:0e:6e:b8:ca:5e:12:
                    48:9f:f7:42:f4:3a:24:d2:39:63:f9:0a:6d:1e:29:
                    ae:9b:17:75:cf:4e:d8:af:a8:1d:f5:7e:4f:97:47:
                    d2:d9:17:10:88:ec:11:05:d6:89:fc:34:62:e5:8f:
                    fe:19:09:c5:ed:a1:73:52:e4:5e:5b:71:c5:bc:96:
                    28:f0:cf:5f:b9:09:b5:a4:0e:9b:86:73:2f:34:2a:
                    41:f2:c1:0a:f0:fd:f5:d8:a2:81:40:11:cb:4a:b2:
                    93:f2:7c:dc:63:30:10:f8:ca:82:21:3a:e6:54:1b:
                    e5:41:74:0f:75:06:d5:ec:0d:e5:63:8e:be:40:44:
                    36:53:1f:4e:6c:c8:7e:c2:b2:e0:25:d5:ed:81:53:
                    de:49:1c:41:c4:b4:a4:29:51:35:37:82:04:04:51:
                    d8:be:35:56:a2:53:b5:0a:f8:67:e8:21:c1:8a:bb:
                    7b:36:ed:c2:81:b7:8f:51:98:60:f6:03:93:cd:e0:
                    2a:30:93:49:07:fd:28:dd:56:5b:ef:de:1f:5f:d0:
                    41:d4:1a:9e:06:77:10:b9:7c:c9:8d:27:1f:f0:66:
                    33:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F9:5D:B6:4A:6E:CA:9B:67:7F:16:2C:91:9C:85:AB:DD:57:19:A9
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/109df7f2b5ed5fddecc9c7d7802c061da58ca3cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:bb:e7:e5:13:23:0f:30:f6:4d:66:e3:8d:c1:b2:56:f7:9e:
         64:db:18:4e:97:58:f9:1d:18:a6:1b:94:79:47:b1:ff:99:66:
         b5:a2:86:80:bb:dc:4f:3a:a7:3f:9e:e6:f0:3f:4e:aa:4d:91:
         9f:05:8c:9e:5c:e3:60:8b:a8:89:44:d5:5d:96:48:50:03:c4:
         bd:9c:b4:e1:b1:e3:6e:c5:96:4d:78:ec:fd:a9:0c:1d:92:16:
         02:a9:8c:68:48:73:eb:1e:1f:ed:9a:b7:1a:e2:6c:12:3d:c4:
         b1:13:e3:78:1c:fd:31:45:3c:1b:2f:34:75:2d:c1:3d:8f:1e:
         0d:d8:ce:4f:05:ad:b4:6c:f9:8f:bd:f9:6d:84:a9:67:45:4b:
         76:8e:bc:9d:0f:61:7e:cf:26:ff:f8:6a:f2:c1:43:c2:77:c8:
         f4:64:bc:b6:02:75:a8:cf:8a:88:d7:63:09:0d:35:07:94:f4:
         b9:6c:0f:22:16:2d:a2:6f:e3:c0:b7:ea:8d:14:99:53:5e:4d:
         2a:24:64:f0:a5:d6:1f:35:2a:b3:54:52:b0:35:b5:65:31:a4:
         80:f2:3f:17:f2:d2:2a:ac:e5:b9:39:8a:51:30:ea:4e:cf:96:
         d8:46:06:20:94:41:c4:18:ed:52:08:d0:aa:11:1e:fc:a4:07:
         08:87:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:31:07 2023 by rpki-client on console-fra.rpki-client.org