Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/88130d12df87f2c2552deaff463c67456544a024.roa
File:                     88130d12df87f2c2552deaff463c67456544a024.roa (raw, json)
Hash identifier:          E4mLpVa1xqXlq6w6kpRB8O3nyp2v2gy4VnCyEoELuyE=
Subject key identifier:   8C:86:83:92:F6:6F:76:0B:0D:A8:DA:1C:0A:E6:D1:CA:B2:03:95:3C
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       263193
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/88130d12df87f2c2552deaff463c67456544a024.roa
Signing time:             Sun 08 Oct 2023 15:49:48 +0000
ROA not before:           Sat 07 Oct 2023 15:49:48 +0000
ROA not after:            Wed 08 Oct 2025 15:49:48 +0000
asID:                     197842
IP address blocks:        190.93.95.0/24 maxlen: 24
                          190.93.79.0/24 maxlen: 24
                          190.93.82.0/24 maxlen: 24
                          190.93.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2503059 (0x263193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Oct  7 15:49:48 2023 GMT
            Not After : Oct  8 15:49:48 2025 GMT
        Subject: CN=88130d12df87f2c2552deaff463c67456544a024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e4:2b:a7:2b:8a:51:1f:bc:41:2d:4e:b3:21:
                    d8:07:a9:a9:1c:2b:07:52:11:dc:c0:01:8a:80:13:
                    b0:77:b6:aa:ce:94:05:c5:e8:02:c2:69:67:94:a8:
                    94:98:c4:05:c5:29:00:d2:59:14:90:f6:1c:42:4c:
                    31:9b:d6:38:ef:53:40:12:86:da:38:36:01:64:86:
                    4c:01:f0:a1:7a:bf:85:df:6c:de:af:99:51:35:8f:
                    39:1a:f5:90:d3:24:15:0f:88:56:bf:7d:df:34:6f:
                    68:f9:6c:5c:2a:6f:37:cc:46:e3:ee:7d:59:11:da:
                    e6:57:3c:27:7d:a4:97:3c:de:60:a4:0a:7e:e7:d6:
                    43:d6:93:91:31:50:7a:8a:c7:dc:95:73:ee:c3:de:
                    60:04:11:02:0d:98:9d:7b:00:69:3e:10:75:a0:74:
                    87:79:31:99:4b:c2:69:ae:5e:28:a8:1f:01:1e:00:
                    78:88:93:bc:41:34:ea:89:76:5e:ce:d0:20:0a:dd:
                    91:6e:ea:52:2b:16:fd:db:4b:88:ce:88:21:90:40:
                    de:2f:0a:66:ab:2d:ae:c6:ca:fe:3f:0e:35:05:47:
                    17:95:b5:4b:9d:71:43:46:61:3c:c4:19:3f:d5:fc:
                    5b:cc:9c:27:e2:4e:a1:47:b8:b0:57:4f:86:47:db:
                    de:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:86:83:92:F6:6F:76:0B:0D:A8:DA:1C:0A:E6:D1:CA:B2:03:95:3C
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/88130d12df87f2c2552deaff463c67456544a024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.79.0/24
                  190.93.82.0/23
                  190.93.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:36:02:45:4a:4b:05:c0:d4:7f:f0:26:a9:bf:5a:16:3a:2c:
         bd:f4:23:96:85:29:e1:3c:9d:35:17:e4:63:df:c4:1c:44:d3:
         bd:86:e8:f0:48:27:78:e4:6b:ec:d8:bb:0e:0a:79:0a:83:c1:
         3a:f2:66:70:58:d4:32:ff:30:f3:3b:81:ec:8c:99:d5:af:c9:
         41:75:d3:3d:4d:1e:63:01:fb:52:86:15:1b:80:24:81:16:c9:
         08:62:a6:f1:b5:45:54:ab:f1:f9:9c:0f:df:65:20:4b:b0:50:
         f8:b3:c0:b2:84:b2:5b:8e:c6:22:be:11:9f:0d:7e:a5:5c:ca:
         3e:00:a7:07:42:0a:30:e5:6b:dc:7b:e7:b2:1c:ef:3f:e4:d0:
         be:93:da:bf:3a:2e:5a:88:11:98:74:08:d6:34:75:20:80:c1:
         56:a7:a2:b5:7b:f6:75:f0:44:14:d3:b3:ea:74:ef:9b:cd:34:
         a5:a0:9d:c5:47:b9:af:7e:d3:09:72:e2:78:3b:18:b3:5b:3c:
         99:91:41:6c:97:b5:48:07:19:e4:03:ae:5a:07:52:4b:3d:92:
         01:af:cc:70:4f:98:c7:b1:d5:be:26:3a:92:0d:19:22:5c:5e:
         81:b5:e3:0e:1a:6b:7d:1f:15:26:62:39:04:ee:1b:8f:58:0b:
         05:76:19:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 01:28:35 2023 by rpki-client on console-ams.rpki-client.org