Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/22507fd3beae1514a19ff07bdd8ea796e33039b5.roa
File:                     22507fd3beae1514a19ff07bdd8ea796e33039b5.roa (raw, json)
Hash identifier:          57B9vbd4oDYo0A1W6gf8v/qUqkm4Gcw6Aw/ZViCaG3M=
Subject key identifier:   01:AB:2F:CC:BF:64:7C:1C:61:92:1C:94:66:B7:A9:8D:DB:65:5B:F0
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       25020E
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/22507fd3beae1514a19ff07bdd8ea796e33039b5.roa
Signing time:             Wed 06 Sep 2023 19:13:40 +0000
ROA not before:           Tue 05 Sep 2023 19:13:40 +0000
ROA not after:            Sat 06 Sep 2025 19:13:40 +0000
asID:                     834
IP address blocks:        190.93.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425358 (0x25020e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Sep  5 19:13:40 2023 GMT
            Not After : Sep  6 19:13:40 2025 GMT
        Subject: CN=22507fd3beae1514a19ff07bdd8ea796e33039b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f3:16:e6:0f:b9:bc:fe:9f:98:40:98:8a:b2:
                    4b:76:00:8e:d4:1a:35:c9:6a:27:fa:85:e9:87:2f:
                    c6:df:c5:90:92:0b:f6:9e:ce:11:bd:dd:05:70:39:
                    91:9b:cf:c2:33:0c:04:a0:39:bc:05:e2:66:61:ec:
                    10:df:2c:d5:e0:c9:53:46:ec:55:c9:4f:e2:bd:14:
                    87:5b:fe:8a:c5:0a:64:ad:0b:a7:21:04:a7:de:2b:
                    5b:b5:ea:71:1f:14:a0:df:47:04:82:ed:97:5e:46:
                    65:41:13:c8:eb:6d:de:d5:c8:f2:9a:8f:27:69:74:
                    4f:67:98:1b:6a:15:36:3c:3d:1d:53:c1:5f:f7:ab:
                    fb:c7:82:5e:a8:ed:7c:f6:f2:86:b0:9c:54:c1:b1:
                    c6:8a:28:a2:11:f0:a8:0d:03:e1:1c:c2:10:c1:b9:
                    54:3c:e8:c3:31:56:09:9e:21:54:d8:b3:32:e4:04:
                    e5:a8:8d:13:8d:57:0d:cf:e9:0f:e4:44:8b:e4:ff:
                    11:a2:53:6e:c2:05:fd:c0:36:5f:da:93:63:4b:3d:
                    cd:86:67:25:cf:eb:32:ca:54:2e:ce:3c:25:4a:b0:
                    df:96:36:91:f7:09:5b:bf:0b:81:ac:bb:13:5d:c9:
                    f3:da:b2:87:33:4e:2c:d5:ef:24:8a:dc:52:1f:ed:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AB:2F:CC:BF:64:7C:1C:61:92:1C:94:66:B7:A9:8D:DB:65:5B:F0
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/22507fd3beae1514a19ff07bdd8ea796e33039b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:7a:1e:75:8d:23:47:de:22:94:f8:3f:34:ae:5b:b9:f3:6f:
         2f:5f:11:bb:04:74:87:4a:5b:6d:13:bb:b5:b7:3e:c0:f6:ca:
         2a:b9:72:0c:71:26:2c:8e:8b:19:32:bd:84:4c:a6:9a:7d:6a:
         61:b3:10:c2:77:1b:45:cd:f1:54:ee:69:ee:b6:93:0d:2c:4e:
         99:6f:df:f5:7f:6a:11:fc:3e:35:03:b7:e8:81:61:ae:1c:cf:
         4a:eb:b6:d3:97:14:c7:49:d7:8d:6a:bb:1d:99:f6:5e:9a:e3:
         8b:b2:35:5f:41:ec:d5:db:93:4a:bf:fd:a4:a4:0f:d1:e8:09:
         94:c9:53:c9:b9:83:73:08:98:5a:01:f3:72:67:69:49:5a:e0:
         e5:44:06:bc:d5:8d:b0:21:3d:42:6a:42:b9:1b:57:c0:0f:59:
         54:eb:fb:83:d7:5f:8d:dc:43:2d:ff:48:71:c4:c1:76:0d:f4:
         cd:5f:2f:18:68:f1:98:ff:03:c7:f5:3c:02:2a:3b:6d:66:74:
         2d:23:c3:93:ba:30:c5:3e:b4:3f:07:1e:ac:64:f2:0c:24:20:
         43:38:25:c5:6c:46:8b:d5:a8:29:91:a5:a0:4b:de:0f:8a:40:
         0f:1f:8c:56:b2:56:8c:79:ad:bf:f7:ae:ad:20:2f:9a:0a:5c:
         21:60:38:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 17:43:44 2023 by rpki-client on console-ams.rpki-client.org