Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ef757f22ba185da0df14348850b85ea2edbed456.roa
File:                     ef757f22ba185da0df14348850b85ea2edbed456.roa (raw, json)
Hash identifier:          dgHIeeaeknSXJPONrQPfnZt5RhJVa+7zRPydx+2BCbQ=
Subject key identifier:   D0:EF:C4:28:77:AB:AC:41:A5:90:D5:48:A2:65:AB:22:6C:BC:AE:F5
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       2488FB
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ef757f22ba185da0df14348850b85ea2edbed456.roa
Signing time:             Fri 01 Sep 2023 19:31:25 +0000
ROA not before:           Thu 31 Aug 2023 19:30:43 +0000
ROA not after:            Fri 01 Sep 2028 19:30:43 +0000
asID:                     49468
IP address blocks:        190.93.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Jan 2024 13:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2394363 (0x2488fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Aug 31 19:30:43 2023 GMT
            Not After : Sep  1 19:30:43 2028 GMT
        Subject: CN=ef757f22ba185da0df14348850b85ea2edbed456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:41:c5:bf:99:71:c7:e3:e2:ad:ab:ea:22:
                    29:ce:4e:d5:14:63:d5:d4:ed:2e:57:81:e9:b0:d4:
                    d3:78:4c:40:b0:85:46:90:d9:33:13:dd:e1:58:ba:
                    83:e5:f2:f2:d5:70:8a:49:e7:ea:c1:fa:b1:dc:c1:
                    56:af:01:26:1a:47:a3:01:76:ff:3c:44:a5:a1:e2:
                    78:db:33:d3:3a:2f:63:2c:1f:27:62:fb:2e:e7:29:
                    95:fe:76:9f:7d:9f:e1:28:ad:e6:9f:40:23:0c:d9:
                    e2:a2:30:58:c9:d1:85:3b:2f:28:5e:61:c4:1f:f7:
                    2e:34:3b:40:f3:03:28:a2:60:35:fe:3d:98:72:b3:
                    f0:4b:01:73:ce:03:06:57:fd:c4:6e:93:48:7e:7b:
                    c1:f1:c1:7d:a4:62:2e:df:b4:ff:d4:80:c5:61:6f:
                    3b:a1:e4:2d:aa:15:fd:b2:28:dd:50:d6:fc:b8:df:
                    1d:4a:e8:51:69:b9:13:1e:a8:82:bc:7c:fc:dc:86:
                    5e:14:93:af:ec:d9:36:bf:59:43:f4:0a:65:2d:7f:
                    63:ab:76:e3:11:29:ca:1a:5a:e0:e0:9b:21:70:d9:
                    ef:a5:94:c1:db:4a:6f:65:7c:9e:71:0f:c0:96:90:
                    a8:1f:f6:09:23:b2:23:07:f8:5e:b6:53:c0:30:ed:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EF:C4:28:77:AB:AC:41:A5:90:D5:48:A2:65:AB:22:6C:BC:AE:F5
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ef757f22ba185da0df14348850b85ea2edbed456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:41:e8:c6:56:e8:9c:af:d3:b9:b5:2d:ff:eb:c6:1e:7b:ab:
         2c:82:c5:d4:cc:d6:06:58:68:61:21:e4:30:ca:07:9e:68:50:
         ed:2e:d6:cc:bf:d6:77:8c:0c:1d:b5:65:0d:d8:aa:ec:5d:a6:
         be:e8:25:fe:41:e6:64:95:44:ef:be:09:18:60:64:08:35:0c:
         05:89:04:11:45:a1:0c:20:e1:04:23:9d:3f:4f:48:5d:46:43:
         19:b8:65:e3:29:75:40:7e:4f:98:ff:18:fc:cc:df:e3:96:d5:
         3e:31:23:26:ce:f2:ce:f4:e2:6d:be:b8:37:d7:9a:54:19:c0:
         ac:a3:bb:5c:9c:be:dc:fe:d8:1c:7b:5d:a4:0e:e3:8b:20:9d:
         de:b2:00:51:0b:27:78:f5:8a:31:b3:01:2c:6a:f2:72:55:ad:
         d5:8e:2b:7d:7e:21:0f:87:46:90:c5:3c:d6:86:1e:6f:1d:8c:
         fa:6f:48:40:9f:d2:de:6d:2c:66:37:3d:e4:88:a9:7c:a3:04:
         26:a9:ee:56:3a:73:02:b8:62:77:e3:60:29:c1:90:13:5d:0d:
         4b:da:38:46:28:ca:7d:49:7f:90:32:e6:a3:61:5d:c5:c0:d4:
         3f:98:88:12:91:27:0f:32:d7:d5:6c:ea:13:04:3c:fd:fd:96:
         ea:57:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 16:05:55 2024 by rpki-client on console-fra.rpki-client.org