Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/eb8e5bb17e1917b64e40deccb236237284448616.roa
File:                     eb8e5bb17e1917b64e40deccb236237284448616.roa (raw, json)
Hash identifier:          Mz/28qy4VkTrw0+i09pN8FC3+6qpoOkCxzX0zjulw0E=
Subject key identifier:   0C:FF:49:03:9B:5A:86:D0:FB:D4:99:D2:D4:F8:4B:8C:55:66:28:FA
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       22D5E7
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/eb8e5bb17e1917b64e40deccb236237284448616.roa
Signing time:             Mon 07 Aug 2023 15:17:40 +0000
ROA not before:           Sun 06 Aug 2023 15:17:40 +0000
ROA not after:            Thu 07 Aug 2025 15:17:40 +0000
asID:                     834
IP address blocks:        190.93.84.0/24 maxlen: 24
                          190.93.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282983 (0x22d5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  6 15:17:40 2023 GMT
            Not After : Aug  7 15:17:40 2025 GMT
        Subject: CN=eb8e5bb17e1917b64e40deccb236237284448616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:5d:f3:68:09:c6:c2:a2:72:54:9a:49:6e:
                    b3:be:bc:bd:26:4d:4a:55:e2:2f:d1:27:b4:3e:55:
                    9c:56:6e:67:f5:09:e4:5d:0c:95:74:d7:79:48:e8:
                    cf:3d:44:f2:75:ac:52:50:24:86:d6:2d:71:05:8f:
                    ca:73:92:d8:ce:5d:44:22:46:90:c5:e8:d3:ea:f7:
                    3a:38:d8:03:ba:7a:8a:e4:29:f5:28:1e:38:00:1c:
                    b0:25:bf:56:57:be:28:ac:98:ac:a6:5c:f4:ae:15:
                    18:f5:28:31:f7:43:11:3b:8f:53:93:8d:13:ee:b1:
                    7a:92:a7:6e:ee:7c:66:26:aa:51:19:a7:00:25:47:
                    8a:e1:82:b7:ed:1a:41:db:3d:c0:37:20:32:ef:1c:
                    d0:e0:67:9e:62:d1:84:e5:c1:4a:21:97:a9:1f:27:
                    de:f0:f9:dc:57:64:be:89:64:41:1a:37:0c:92:8e:
                    e4:6c:91:d6:41:f3:82:39:02:18:a2:06:2a:a2:07:
                    f5:ba:67:02:f4:8a:a0:78:8a:8a:59:61:6d:07:41:
                    d7:44:6d:82:cf:21:4e:fd:4d:b8:6e:ce:e6:ef:fb:
                    6d:39:97:c6:21:03:ba:14:3a:45:d5:92:0f:00:29:
                    fe:fc:fd:80:d9:51:0d:40:94:db:f1:4f:22:e9:2c:
                    fd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FF:49:03:9B:5A:86:D0:FB:D4:99:D2:D4:F8:4B:8C:55:66:28:FA
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/eb8e5bb17e1917b64e40deccb236237284448616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:1f:9b:20:d6:bb:29:0b:92:1d:d7:8f:4b:c4:5e:74:e0:bd:
         6a:29:b8:8c:e8:fe:44:63:29:a6:26:c8:b8:67:e6:64:27:a3:
         b4:3e:11:d8:46:59:ed:ac:01:ff:21:d2:26:8c:e2:b0:11:b1:
         0f:fe:5d:5b:d2:5f:34:e3:2b:69:5a:4c:de:ea:73:52:47:f6:
         51:18:b6:36:0c:53:51:17:2e:76:2f:0a:6d:ea:04:aa:42:35:
         56:cf:02:16:aa:59:36:9c:36:84:a7:5e:3c:27:2b:6c:99:55:
         67:0f:0e:8b:75:a0:5e:4c:8f:b5:a3:ec:e6:62:cf:fe:81:ef:
         bb:08:0a:30:bd:8c:d6:1b:c2:c0:c8:58:9d:07:c2:a0:f5:9f:
         9b:c0:db:7c:b4:68:38:33:c5:12:6e:cf:41:33:dc:0d:ff:f1:
         3f:ac:98:e7:17:15:51:1c:16:43:bf:70:6d:bf:ca:1b:ce:03:
         3b:0a:85:4f:5b:1c:3b:f0:ee:7d:e7:51:19:21:11:6b:14:28:
         29:97:1f:5e:3d:09:da:20:da:ee:6b:e8:55:86:f0:ca:2f:9a:
         1a:ef:64:52:5d:7b:fa:28:c9:9b:64:0a:79:eb:27:4a:d5:0a:
         f0:0d:e3:3e:0f:63:30:2a:32:7b:cd:94:06:39:78:97:50:b8:
         7d:75:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 15:54:04 2023 by rpki-client on console-fra.rpki-client.org