Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e7efb5c9395bb958cb7d545e995605bc8ae355ea.roa
File:                     e7efb5c9395bb958cb7d545e995605bc8ae355ea.roa (raw, json)
Hash identifier:          4lzhyLJwn9o9YMrUWOKkTlSsfxadmzO9Cf/1q969EBM=
Subject key identifier:   FB:20:40:F4:C5:F8:83:42:77:8E:FB:33:06:FD:F1:C4:3A:86:C7:7B
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       24F2C2
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e7efb5c9395bb958cb7d545e995605bc8ae355ea.roa
Signing time:             Wed 06 Sep 2023 19:10:22 +0000
ROA not before:           Tue 05 Sep 2023 19:10:22 +0000
ROA not after:            Sat 06 Sep 2025 19:10:22 +0000
asID:                     834
IP address blocks:        190.93.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2421442 (0x24f2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Sep  5 19:10:22 2023 GMT
            Not After : Sep  6 19:10:22 2025 GMT
        Subject: CN=e7efb5c9395bb958cb7d545e995605bc8ae355ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4e:28:ec:a6:76:49:bf:e5:21:69:57:82:64:
                    33:76:06:10:bf:3b:85:4a:0e:93:ea:da:da:ab:23:
                    59:31:f8:1b:fe:6e:47:18:15:a0:57:60:9b:6d:e5:
                    98:65:0d:11:fb:94:c7:e3:04:79:7d:a0:c7:46:93:
                    a7:8f:59:68:6e:ea:2d:15:6e:0c:86:3a:c3:be:2f:
                    a5:aa:48:4b:76:30:a3:d4:46:a1:14:d3:d1:b4:a6:
                    d9:bf:80:ed:51:40:78:2e:b7:f2:94:41:21:8b:d2:
                    54:ae:80:05:71:89:b0:7a:5e:c4:07:0d:e0:6a:9a:
                    ba:47:1e:e7:82:48:6e:2a:79:c3:60:bc:74:28:41:
                    45:5a:81:c7:4e:70:b2:6f:cd:8b:8c:c9:52:31:7d:
                    d9:ea:f3:92:2a:bf:d0:c2:5e:7c:b3:94:0c:c0:81:
                    08:ea:7c:19:e8:98:56:41:7b:9f:08:c8:a5:cb:8e:
                    81:6a:ed:cd:de:3a:31:9e:62:86:bf:1d:03:4f:04:
                    e1:7f:22:81:01:ca:6e:b0:f6:48:42:f2:6c:74:c3:
                    a3:4e:97:80:dd:26:65:55:c1:cf:57:4e:ac:b3:09:
                    9c:fe:e4:95:43:f1:40:bf:6e:fc:0d:e2:c8:21:d8:
                    55:88:bc:6d:4d:9d:6e:ae:cb:48:59:40:d4:be:31:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:20:40:F4:C5:F8:83:42:77:8E:FB:33:06:FD:F1:C4:3A:86:C7:7B
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e7efb5c9395bb958cb7d545e995605bc8ae355ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:9b:58:37:aa:8f:d1:24:41:f6:a8:85:41:e3:86:a8:8f:99:
         e6:64:9b:97:34:60:89:e0:1b:e0:7b:9c:43:e9:be:cd:67:d1:
         cf:a2:6d:64:76:e6:30:c9:b9:4f:f6:c7:dc:4c:44:21:01:63:
         73:1c:9d:c7:ce:e0:22:91:2c:8d:77:d3:99:60:33:fb:22:db:
         f6:8a:a7:2d:42:b3:30:e1:38:ab:77:aa:c6:05:88:8e:22:da:
         7c:ca:a5:4f:8f:16:68:97:bf:3d:e6:84:78:e9:30:2e:ac:0d:
         de:86:12:30:36:82:87:6a:c6:8e:95:f4:c5:97:53:da:b0:ca:
         00:5c:46:bd:50:c2:25:2e:7a:9c:0c:cd:91:07:1e:ec:c7:62:
         9e:2f:1b:04:3e:7f:d6:64:1e:53:ed:66:0c:2f:cc:95:bd:fc:
         6e:16:56:77:c8:11:01:ce:4d:34:e6:45:7e:ee:14:89:62:9c:
         3f:b7:ed:61:6b:d5:0a:9c:3d:a0:8e:ae:af:c1:88:b4:7d:ca:
         19:ab:34:2f:d8:af:45:f0:f5:96:b7:27:8c:e8:f3:a5:87:78:
         29:87:dc:d3:68:b7:44:5b:07:78:2e:c4:74:e0:b5:f2:ef:6b:
         06:d7:03:57:e5:c7:73:89:6a:f0:3e:3b:de:ac:6e:0b:37:9a:
         64:90:d3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 17:11:41 2023 by rpki-client on console-ams.rpki-client.org