Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1e38bdaa35fad8aea8e5971dbe5a1c9b11f94b19.roa
File:                     1e38bdaa35fad8aea8e5971dbe5a1c9b11f94b19.roa (raw, json)
Hash identifier:          /8YAbYyn+n1RMKdjrsA2tx/bqhRGx/YZY0ycq9I9N28=
Subject key identifier:   32:25:EE:06:AE:3F:6A:A3:90:90:D0:6F:27:89:62:A0:EA:22:6C:88
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       248077
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1e38bdaa35fad8aea8e5971dbe5a1c9b11f94b19.roa
Signing time:             Fri 01 Sep 2023 19:31:21 +0000
ROA not before:           Thu 31 Aug 2023 19:30:43 +0000
ROA not after:            Fri 01 Sep 2028 19:30:43 +0000
asID:                     147186
IP address blocks:        190.93.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392183 (0x248077)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Aug 31 19:30:43 2023 GMT
            Not After : Sep  1 19:30:43 2028 GMT
        Subject: CN=1e38bdaa35fad8aea8e5971dbe5a1c9b11f94b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:9e:d3:f6:13:23:4c:0a:8a:82:f2:ce:be:
                    1b:6e:6e:61:2d:ff:11:55:64:6b:bd:4b:49:94:68:
                    8d:96:6b:f7:89:b2:7f:26:27:03:98:27:f9:74:b8:
                    5a:7a:36:3a:1c:84:61:1b:0c:83:eb:b2:60:42:75:
                    f3:1c:c2:40:68:c1:70:23:a8:51:38:88:55:e4:27:
                    90:c5:12:8c:b6:a4:51:2a:83:ce:ab:e8:01:6b:23:
                    12:2d:d1:18:12:98:b6:4e:da:fd:43:c2:bd:48:dc:
                    9e:de:9e:fc:94:28:5f:19:5c:1b:fb:63:e7:e5:4e:
                    3d:31:23:70:4d:da:63:22:a7:44:fe:92:8b:ad:99:
                    f2:e7:47:85:47:23:36:5c:8a:38:9b:3d:07:94:cf:
                    4b:be:d0:e7:3e:07:23:dd:6a:d7:a2:c7:13:60:de:
                    ad:20:0a:8b:7d:d9:8d:c7:8c:3e:96:a0:4b:ab:0b:
                    40:45:91:0f:dd:4d:91:22:bb:9d:03:dc:d5:8a:85:
                    0e:7e:60:5d:12:51:f6:03:a2:2a:3c:47:fb:2f:61:
                    45:46:f9:fd:31:99:f9:7d:3f:31:63:37:f4:ed:c7:
                    51:59:f7:c5:74:e3:e8:7b:c1:91:7b:29:4c:66:1f:
                    7d:c6:47:2d:7f:17:cc:ef:83:f9:aa:06:12:36:63:
                    41:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:25:EE:06:AE:3F:6A:A3:90:90:D0:6F:27:89:62:A0:EA:22:6C:88
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1e38bdaa35fad8aea8e5971dbe5a1c9b11f94b19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:a2:2a:96:e1:dc:ae:da:0a:4b:97:61:72:c0:fd:a1:b1:64:
         9a:a6:aa:6d:35:b8:d4:5e:a1:cc:e6:84:a4:09:54:23:be:6c:
         7e:0b:5c:c9:3e:da:73:6e:b9:f1:13:9c:e8:fe:e3:da:af:6a:
         4c:f6:1a:ad:6a:93:da:da:84:27:0b:2e:e9:d1:77:e6:2c:64:
         7b:cb:ef:fc:ec:91:4e:02:01:06:06:3c:a9:85:c8:43:79:b9:
         fa:b2:b8:6f:c7:c7:47:c8:d3:f2:f9:8d:9b:67:f2:40:6e:4d:
         b3:9d:0f:4c:b5:3f:0a:cc:73:b9:9b:20:55:ce:b3:21:e1:93:
         55:c5:23:9c:ad:cd:e0:99:51:9f:8a:7f:b3:04:fe:f8:a4:b3:
         21:44:da:cb:07:a5:1f:33:9f:00:fc:9b:b6:da:2c:5e:a1:bf:
         2c:28:73:43:97:77:e1:9b:0a:ff:73:79:0d:9d:76:0e:cd:ed:
         c4:59:09:88:f6:d2:1e:30:1b:c9:9a:94:90:f8:8b:62:14:3c:
         06:35:1c:01:62:15:ea:ae:b3:c9:5d:63:6a:e5:17:ac:22:38:
         0f:bf:26:9c:fd:3e:0a:a3:f5:05:1c:02:7f:a9:12:8a:83:58:
         d4:68:2a:dc:10:77:5d:54:e9:02:33:43:c0:0c:50:c0:8c:c8:
         c6:0b:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 19:45:21 2023 by rpki-client on console-fra.rpki-client.org