Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/75c34e4cb5aca26caa4f033738dc900756d36433.roa
File:                     75c34e4cb5aca26caa4f033738dc900756d36433.roa (raw, json)
Hash identifier:          yP9Wrzxm7GZY5IRgpSMW6Gin4OxmFuDksiKOosnVCks=
Subject key identifier:   0A:A4:2B:D0:F7:86:3D:A1:C9:D0:28:B5:19:71:E3:7C:AB:21:C7:3D
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       24B64B
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/75c34e4cb5aca26caa4f033738dc900756d36433.roa
Signing time:             Fri 01 Sep 2023 19:31:48 +0000
ROA not before:           Thu 31 Aug 2023 19:30:43 +0000
ROA not after:            Fri 01 Sep 2028 19:30:43 +0000
asID:                     14445
IP address blocks:        190.93.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 09:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405963 (0x24b64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Aug 31 19:30:43 2023 GMT
            Not After : Sep  1 19:30:43 2028 GMT
        Subject: CN=75c34e4cb5aca26caa4f033738dc900756d36433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f6:03:2d:d2:fe:5f:d6:2c:72:1c:4c:3d:c3:
                    43:b5:c8:17:0b:82:21:66:d0:ab:a4:36:e7:c5:97:
                    d7:d1:54:4f:f8:62:ba:f0:0d:8e:17:73:63:67:dc:
                    af:fd:d1:bb:4b:7e:3c:40:79:f1:e3:e1:71:19:fa:
                    68:09:9c:93:60:38:b6:8d:dd:e7:3b:08:7e:56:b4:
                    66:ed:17:39:50:0c:94:22:15:86:57:ec:11:2b:2b:
                    6a:da:2b:8d:89:24:72:07:59:fd:d0:9b:d5:33:d6:
                    df:a2:44:73:46:ad:3a:9b:b7:0b:1e:ea:0c:a6:71:
                    39:74:75:e0:ca:0c:31:fc:e2:b7:ce:87:0d:59:e3:
                    f6:a7:ea:5e:ca:77:45:cd:53:88:b1:8a:8a:85:f1:
                    34:84:16:57:4b:5a:7a:3e:2e:d5:b3:56:9b:e7:0d:
                    85:02:f0:87:70:3c:40:21:57:76:ca:88:00:4c:60:
                    6a:97:45:c4:f4:2f:ff:51:f0:99:ae:e3:5f:bf:77:
                    2d:4c:1c:a6:9f:90:3d:8a:00:1c:74:26:96:26:7e:
                    dd:e7:39:90:96:7d:4a:82:b4:c3:fb:12:2e:ca:ce:
                    ad:f4:d2:8b:dc:e6:93:29:c7:c9:25:25:df:d7:06:
                    c0:22:15:27:87:87:8a:4a:0b:4f:bc:81:1e:10:57:
                    a7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A4:2B:D0:F7:86:3D:A1:C9:D0:28:B5:19:71:E3:7C:AB:21:C7:3D
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/75c34e4cb5aca26caa4f033738dc900756d36433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:1c:9c:79:c3:c8:78:63:45:51:c4:ee:a7:b7:3e:76:cb:3c:
         8e:49:31:4f:d7:d0:44:ed:b9:cb:f3:63:71:d5:d7:39:e4:0c:
         83:27:4b:06:1e:e4:8b:44:e6:2b:69:54:3b:53:7a:cb:44:2b:
         5b:72:99:37:87:6b:37:3e:10:d2:ff:85:b4:bc:13:81:b4:f3:
         3b:cd:62:fe:3f:20:26:6d:e7:38:12:2e:17:3b:c1:44:6b:49:
         c4:18:6d:6e:c1:93:ca:24:a1:98:6f:01:af:45:1b:48:27:7e:
         17:0d:db:26:1e:88:a5:a2:5f:41:28:a1:fa:ba:ec:8c:4b:e1:
         5c:13:f7:af:2f:41:5d:5e:d4:a6:27:9a:a8:7f:91:c4:0a:e9:
         bf:99:f6:96:cb:dc:29:e4:4b:50:c5:f7:8a:60:7b:b0:79:e0:
         b0:72:18:95:7c:23:83:c1:fc:ea:35:55:d7:f5:e8:ea:da:a3:
         7f:c3:c9:66:eb:50:af:b5:f8:02:35:b4:a1:20:39:42:b4:e4:
         75:65:41:26:88:61:29:ee:22:5d:42:cd:73:ba:02:6c:ee:24:
         58:30:ea:eb:dd:9f:8a:8f:ae:4f:b4:73:2d:46:06:02:ad:c0:
         e9:6c:43:99:06:3c:d9:37:7e:e7:f8:0d:9e:23:7a:fd:d2:df:
         61:13:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 14:22:04 2024 by rpki-client on console-ams.rpki-client.org