Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d5e9b7c794b0153321d1b013bacc48aa181f4737.roa
File:                     d5e9b7c794b0153321d1b013bacc48aa181f4737.roa (raw, json)
Hash identifier:          fNd0A07NobWqtmk7yaDfh3/9jTqXmgI7gax/2kj+rhE=
Subject key identifier:   AA:DA:AF:BF:7D:1B:30:83:87:53:82:1B:96:7B:75:8C:EB:58:43:B5
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       224D85
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d5e9b7c794b0153321d1b013bacc48aa181f4737.roa
Signing time:             Wed 02 Aug 2023 11:48:33 +0000
ROA not before:           Tue 01 Aug 2023 11:48:33 +0000
ROA not after:            Sat 02 Aug 2025 11:48:33 +0000
asID:                     23470
IP address blocks:        190.93.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248069 (0x224d85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  1 11:48:33 2023 GMT
            Not After : Aug  2 11:48:33 2025 GMT
        Subject: CN=d5e9b7c794b0153321d1b013bacc48aa181f4737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:98:bc:91:c8:a4:21:8b:d6:fa:ce:f3:d5:
                    62:c2:18:d3:ee:aa:9e:3f:b6:44:f4:07:64:58:a4:
                    cc:6e:0b:e9:4b:9a:12:43:75:a1:25:5b:3f:5e:e4:
                    ec:e4:13:d9:08:62:d7:19:40:06:f2:c3:30:e1:b4:
                    7e:68:45:b1:94:3c:a5:f7:2b:ad:ed:69:01:3c:2e:
                    31:53:31:a1:87:18:4e:fa:24:3f:3e:a3:63:ff:43:
                    31:64:5c:7f:4e:c4:91:97:d4:cc:66:e6:53:04:3a:
                    43:7d:44:cb:24:7f:85:32:5b:58:2f:72:03:ac:05:
                    a8:a9:6a:6a:6c:00:cf:92:97:60:0c:30:9a:0d:ae:
                    3c:c5:91:8f:e2:68:fb:2e:12:99:54:93:69:52:97:
                    a4:50:f1:ee:71:04:0d:6c:d6:7c:4f:29:25:c2:b4:
                    9b:27:48:9a:5c:cf:64:62:8f:8f:59:a9:4a:19:29:
                    8f:94:e8:5f:83:11:69:b8:51:db:d6:b3:89:14:09:
                    a0:53:c6:ac:46:3d:6c:fc:79:42:52:43:1c:76:a3:
                    a4:c2:f3:14:d5:4e:e4:b7:9a:e3:0b:8f:e7:76:a0:
                    6c:9c:52:8f:b6:b6:41:e5:12:5b:77:14:ba:ce:ae:
                    d8:4c:e1:4f:68:eb:1a:6a:c5:e4:b3:e3:b8:d3:da:
                    99:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DA:AF:BF:7D:1B:30:83:87:53:82:1B:96:7B:75:8C:EB:58:43:B5
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d5e9b7c794b0153321d1b013bacc48aa181f4737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:1a:b3:f7:24:7e:55:31:56:c8:9c:ff:59:f7:09:e2:35:86:
         58:55:76:31:84:63:58:6b:df:3f:58:a3:25:0f:47:a5:b9:4c:
         7f:84:5c:f6:02:e3:71:39:bf:bc:1a:58:b3:45:70:4e:a6:b3:
         9d:da:0a:5b:79:4e:c6:a2:7c:24:5d:fb:a2:3c:d4:44:f8:ae:
         58:60:6e:08:6f:fd:1d:34:9a:3c:fe:db:85:25:a6:5b:82:e1:
         71:39:e2:61:0f:b6:81:9c:43:93:2c:b1:9c:8b:89:e7:91:b4:
         39:d7:50:10:4f:cc:05:45:4d:97:4a:bf:bf:8d:35:1c:57:9f:
         38:75:05:3f:f1:9e:5e:d3:d6:8d:d8:7f:12:2b:10:f7:60:09:
         6d:92:fe:9c:41:2c:26:d3:c8:90:1a:0b:36:6a:65:f5:b7:e3:
         e3:01:0e:a0:2c:92:e8:14:ed:75:0c:8e:f1:99:01:1c:5e:cb:
         51:16:b0:a1:10:d6:c3:c4:ab:d6:a6:dd:0e:e9:00:66:2a:d6:
         51:6b:7e:eb:93:4c:05:d7:a6:94:bc:96:ec:bb:50:5f:38:c0:
         57:b0:c9:32:48:c0:47:70:18:ed:b8:d4:f6:e7:ab:b1:f9:bb:
         d2:8e:9e:cf:b0:a2:5c:a7:37:22:a5:a3:f0:9f:64:1b:6d:c1:
         8d:d2:f5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 18:25:52 2023 by rpki-client on console-fra.rpki-client.org