Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a507b34f70f0fea5c18180e698010929a19270b9.roa
File:                     a507b34f70f0fea5c18180e698010929a19270b9.roa (raw, json)
Hash identifier:          r54HZ+W6fFi+sOhrpIpW4TZ6ghnYEN3mRjdDmRrDf3U=
Subject key identifier:   2F:98:8A:C6:EF:8C:01:3B:ED:CE:30:3F:D9:5D:84:06:AB:33:93:1C
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       24AE5A
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a507b34f70f0fea5c18180e698010929a19270b9.roa
Signing time:             Fri 01 Sep 2023 19:31:41 +0000
ROA not before:           Thu 31 Aug 2023 19:30:43 +0000
ROA not after:            Fri 01 Sep 2028 19:30:43 +0000
asID:                     36113
IP address blocks:        190.93.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2403930 (0x24ae5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Aug 31 19:30:43 2023 GMT
            Not After : Sep  1 19:30:43 2028 GMT
        Subject: CN=a507b34f70f0fea5c18180e698010929a19270b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:b8:1c:f7:4e:c6:90:6e:fa:69:d0:2f:8e:
                    9a:b8:64:3d:31:c3:08:18:4a:2d:40:5c:3c:d7:61:
                    62:b2:ae:97:b1:64:2b:0f:cb:57:17:ab:c9:4e:1f:
                    b0:6b:b9:80:7c:09:96:a3:ab:d4:0b:cf:a7:80:19:
                    d5:b2:6a:f4:22:05:3c:ed:9f:26:e4:b7:86:2b:f8:
                    c4:73:89:6b:d3:c8:a3:27:27:65:8c:66:88:47:4e:
                    90:45:7b:5f:85:cc:cf:77:79:58:c4:6c:6a:98:2e:
                    cb:1c:8d:db:43:cb:ba:49:15:a5:31:54:5a:37:d0:
                    8d:52:3a:3b:3c:c6:06:c5:51:da:43:08:61:81:30:
                    29:c2:8e:d6:44:da:ed:10:f6:9b:25:9a:2c:86:cd:
                    08:69:53:99:ea:23:9b:95:80:5c:73:df:ba:02:cb:
                    27:32:61:db:5f:41:4a:3a:0f:30:71:53:5e:fa:92:
                    b4:fc:c3:ba:9a:fd:72:f3:cf:dd:76:2c:5c:d9:6d:
                    04:e1:c0:13:39:6e:5e:8c:73:5e:1b:f3:bd:65:c5:
                    66:9e:a0:a9:87:a8:59:bc:36:0b:aa:7d:bf:00:b2:
                    6a:87:62:75:f3:75:6b:3b:cc:d1:82:fb:48:e6:0d:
                    16:ff:0e:0a:63:d9:21:8a:78:bb:39:cf:ba:4d:94:
                    3c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:98:8A:C6:EF:8C:01:3B:ED:CE:30:3F:D9:5D:84:06:AB:33:93:1C
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a507b34f70f0fea5c18180e698010929a19270b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:37:1f:69:8e:51:94:f0:91:29:79:e1:7c:44:9c:68:15:5c:
         1c:b6:09:f3:e5:7a:30:62:c3:e5:d7:25:fa:78:66:bb:c2:e8:
         c5:e9:db:0f:69:da:e3:c8:84:2b:64:d8:30:6c:a4:f9:09:93:
         9e:6d:12:09:2f:f0:16:6d:91:70:87:79:6a:07:e6:42:5f:f1:
         8a:12:e5:ee:ea:14:0e:a6:c1:e6:10:92:19:3e:49:4f:ef:3b:
         80:e0:a2:aa:11:21:5b:9b:c1:52:17:8e:b3:12:dc:9f:7e:22:
         58:77:e8:fb:c3:0a:85:a9:9c:e2:c7:05:df:87:ba:31:54:49:
         cf:0b:0a:11:9e:b7:72:e8:48:db:64:e5:a0:f7:be:fb:f5:db:
         c4:7f:7e:6b:65:22:9f:ab:27:4c:b1:67:5e:55:64:16:82:f9:
         32:46:bc:2e:d1:a7:df:68:f4:1d:53:18:ad:3e:63:3a:7d:02:
         62:58:67:03:5d:1e:80:69:e0:50:fc:e0:04:ea:9f:a2:3c:63:
         96:c8:4a:d3:64:b7:6d:d6:c1:10:9a:8d:3e:09:a6:4b:d0:1a:
         e5:0c:88:4b:5f:25:42:11:99:9a:00:5a:3d:b0:64:55:27:85:
         3a:ee:20:da:e3:bc:b2:bd:72:8b:ca:46:e8:4c:cc:88:74:d2:
         9a:f7:5b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 15:52:43 2023 by rpki-client on console-fra.rpki-client.org