Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5be109f0215e3f62c4b8c7880dab779e2321aac0.roa
File:                     5be109f0215e3f62c4b8c7880dab779e2321aac0.roa (raw, json)
Hash identifier:          p5Ra/xsWVfn2eflUftUHerhbBaSDcDLBF3QfICrdLgA=
Subject key identifier:   99:82:FC:AB:F1:89:2E:FF:3B:44:1F:C6:80:51:F8:01:5D:C0:CF:08
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       2533AE
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5be109f0215e3f62c4b8c7880dab779e2321aac0.roa
Signing time:             Mon 11 Sep 2023 17:12:48 +0000
ROA not before:           Sun 10 Sep 2023 17:12:48 +0000
ROA not after:            Thu 11 Sep 2025 17:12:48 +0000
asID:                     7018
IP address blocks:        190.93.72.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2438062 (0x2533ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Sep 10 17:12:48 2023 GMT
            Not After : Sep 11 17:12:48 2025 GMT
        Subject: CN=5be109f0215e3f62c4b8c7880dab779e2321aac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:21:8e:1f:76:3d:ef:b2:99:19:5c:fe:25:
                    c1:eb:41:a0:60:0b:d5:d7:8d:b0:82:fc:be:66:b9:
                    03:71:9a:96:7d:66:7d:65:ef:d6:b2:ed:a3:61:9b:
                    a6:b9:a7:55:b6:53:13:9f:a0:a1:40:77:3d:80:e2:
                    70:a9:23:d5:34:db:4c:85:40:c4:bf:e6:0c:ee:f5:
                    5b:78:dc:a1:08:08:65:63:40:9f:bb:b2:66:e8:64:
                    d5:fb:36:0b:45:86:80:8f:f4:57:b6:7e:67:46:22:
                    1a:93:5d:2a:0a:bf:59:f9:95:70:9b:3e:4b:77:25:
                    e0:61:71:7a:f8:23:72:2d:a2:f7:4b:2b:7c:48:4a:
                    cf:e5:93:78:74:31:05:ed:7e:e3:93:a6:5c:14:4d:
                    85:b9:3c:e3:96:37:9a:e3:da:08:9f:dc:09:2f:a6:
                    30:5a:b8:20:8a:db:14:8c:64:83:6a:53:6b:1e:e3:
                    98:2c:9c:ae:ba:02:70:86:8b:06:b4:b0:f8:65:7f:
                    2a:6e:a5:f8:32:6a:05:cc:f0:cb:8b:36:3b:7b:6d:
                    5f:4c:4a:e7:cd:d1:af:b0:02:b9:0c:e5:c5:25:d8:
                    f4:7d:d6:83:e0:c8:78:5f:29:aa:12:7d:ab:4d:4a:
                    83:77:1c:a8:a9:85:26:02:c8:6e:ee:ea:5d:be:0b:
                    6b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:82:FC:AB:F1:89:2E:FF:3B:44:1F:C6:80:51:F8:01:5D:C0:CF:08
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5be109f0215e3f62c4b8c7880dab779e2321aac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:f4:c0:77:72:fb:cb:fd:25:f0:57:74:2f:82:14:44:7a:ff:
         f7:4d:d4:d3:16:3d:9a:7e:d5:62:70:0c:69:0b:9d:76:dd:e2:
         bc:4d:2b:c9:2b:23:58:91:60:7d:fe:7b:d5:b4:c4:cf:83:34:
         db:cf:59:88:3a:cb:6a:fa:1a:e2:2a:37:36:f8:4f:bb:48:10:
         8e:2f:cf:d4:cc:19:be:cb:06:74:25:c3:a6:5a:ba:ce:b2:1e:
         ef:e6:24:25:c1:92:3c:5b:39:da:db:ba:cf:1e:47:1d:c8:ec:
         47:91:79:4d:0e:b5:03:7e:21:8d:1a:40:28:05:2d:da:36:97:
         2d:5a:02:60:3f:91:33:a9:1b:c0:82:88:29:15:fb:d2:52:89:
         89:ea:4a:57:f8:bb:df:a6:8f:57:a1:01:b4:d3:b0:1b:13:28:
         3d:49:38:95:74:24:9a:ad:de:47:ea:c6:31:99:1f:bf:aa:2d:
         4a:f0:96:6e:3c:69:30:09:e7:0f:f0:dd:71:17:5d:f3:07:97:
         c6:66:8c:e4:d6:67:95:ed:1d:f4:b6:35:cd:e2:dd:13:cb:ee:
         df:fc:0f:e9:ac:3f:5b:e9:11:d2:57:fd:e0:b0:b5:30:90:34:
         a7:74:60:33:af:51:61:5d:7d:e0:4c:97:1f:a8:12:73:4b:4b:
         3b:fa:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 19:09:44 2023 by rpki-client on console-ams.rpki-client.org