Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/34e87c06d8d5e3031f5830487400558fa0d7c672.roa
File:                     34e87c06d8d5e3031f5830487400558fa0d7c672.roa (raw, json)
Hash identifier:          SG5yOEhSROXMzb29M5vTkdheUvXLrLXBpKVBSSqiXUE=
Subject key identifier:   60:98:29:14:34:99:57:C6:21:9B:C1:A6:76:BD:20:89:9C:D1:99:8F
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       25F4B6
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/34e87c06d8d5e3031f5830487400558fa0d7c672.roa
Signing time:             Tue 03 Oct 2023 22:44:48 +0000
ROA not before:           Mon 02 Oct 2023 22:44:48 +0000
ROA not after:            Fri 03 Oct 2025 23:44:48 +0000
asID:                     3356
IP address blocks:        190.93.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2487478 (0x25f4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Oct  2 22:44:48 2023 GMT
            Not After : Oct  3 23:44:48 2025 GMT
        Subject: CN=34e87c06d8d5e3031f5830487400558fa0d7c672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:2c:06:10:03:b4:df:14:33:88:6e:57:ef:
                    65:1d:02:dd:3d:b8:be:b9:21:43:b2:24:fe:d0:72:
                    59:d5:47:3d:a8:e8:23:d1:d4:2b:59:1a:6a:4c:35:
                    22:6b:8c:ec:69:29:b6:2f:81:da:be:d5:0c:8a:a8:
                    b8:4b:d7:cc:42:1d:65:a6:12:87:10:07:a1:40:5c:
                    6b:34:96:42:90:dc:3d:6d:e4:73:3e:d4:83:bc:60:
                    cb:0b:cc:eb:88:63:7c:59:c0:f0:c8:42:1b:36:da:
                    64:ec:c9:1d:84:fe:b6:cb:b8:59:b2:74:5a:8d:fd:
                    fc:f9:4b:df:4d:48:2b:f0:b1:97:be:f0:fe:3f:ad:
                    ff:3e:7c:de:f1:f1:db:2d:4b:3b:06:0b:04:a7:bf:
                    2a:1c:bc:16:91:79:46:f4:17:bf:92:39:b5:06:3b:
                    f0:b7:5e:49:aa:d8:96:87:8a:b9:ef:2c:9f:bb:cd:
                    cc:72:a2:36:97:90:c6:f3:92:0a:1a:04:98:36:98:
                    46:2f:05:85:69:be:db:dd:d1:39:6a:87:b3:9f:d8:
                    18:40:b5:a3:1e:16:6b:6b:6c:cd:7d:76:92:8e:31:
                    1c:c2:2e:b6:3d:08:2c:61:6e:60:86:e6:00:9a:3e:
                    dd:9f:b6:57:e3:72:73:df:7f:82:29:59:34:79:78:
                    33:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:98:29:14:34:99:57:C6:21:9B:C1:A6:76:BD:20:89:9C:D1:99:8F
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/34e87c06d8d5e3031f5830487400558fa0d7c672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:50:ec:56:3f:48:7e:22:ec:11:73:38:80:9e:1a:f2:89:7a:
         bf:7c:23:2b:86:ba:d9:3b:6c:21:9d:ed:b0:30:5a:eb:43:04:
         74:4a:d8:3d:0e:fc:79:3c:f7:fc:c6:1f:4e:f2:a2:64:d1:cb:
         e9:14:5f:3a:45:d9:71:dc:4c:7d:93:bd:af:10:b8:ed:05:46:
         75:67:86:f1:ad:dc:4b:b4:81:67:e3:84:b8:9b:2f:74:b2:50:
         14:52:ee:77:56:5d:df:22:32:0c:98:d5:79:6d:27:7c:5f:25:
         cf:c3:92:7c:ea:3f:d8:26:3b:06:3f:dd:79:b8:fb:71:57:06:
         fa:3b:18:2f:04:7f:b6:cb:81:04:67:25:42:f8:01:bd:43:44:
         05:b0:4b:f7:c9:cc:52:d5:51:58:3a:26:02:e1:fb:ec:15:13:
         11:3a:d8:0d:0a:e1:06:7d:5e:83:b2:32:57:0f:cd:77:1b:72:
         46:3f:b1:3c:6d:8b:c4:6f:26:c2:fa:88:03:48:b6:ce:e2:e5:
         1d:b7:92:43:00:2c:be:0f:f8:13:dd:4e:d7:79:be:b6:eb:a2:
         89:b2:60:f0:22:10:d9:c4:48:c4:7a:0c:77:e3:59:8e:13:34:
         a0:99:33:86:03:d6:dc:64:11:d2:46:e0:6f:48:8b:e2:84:3b:
         80:90:9e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 02:53:35 2023 by rpki-client on console-ams.rpki-client.org