Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37302e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e37302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          MtSRWbvBNt1ZOOln3J1TuT5QjS+Ww1ai7rqzvFcwYho=
Subject key identifier:   70:63:62:BE:BD:EE:FD:EA:16:0D:59:1A:65:AB:9C:69:A6:4B:94:18
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       3D7046014E04CF07C9B4553B91BA1E6630890AB2
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37302e302f32342d3234203d3e20383334.roa
Signing time:             Mon 10 Feb 2025 11:20:00 +0000
ROA not before:           Mon 10 Feb 2025 11:15:00 +0000
ROA not after:            Mon 09 Feb 2026 11:20:00 +0000
asID:                     834
IP address blocks:        190.93.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 11 Feb 2025 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:70:46:01:4e:04:cf:07:c9:b4:55:3b:91:ba:1e:66:30:89:0a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb 10 11:15:00 2025 GMT
            Not After : Feb  9 11:20:00 2026 GMT
        Subject: CN=706362BEBDEEFDEA160D591A65AB9C69A64B9418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:e0:e1:d6:a9:bc:53:1a:d0:e0:d6:27:24:
                    df:72:ee:7c:b2:cd:29:a4:ea:91:92:9a:51:dc:b7:
                    85:ff:e7:5c:22:b7:5b:81:8e:b8:5c:98:ac:18:35:
                    6b:94:1d:20:91:d3:a5:0a:3b:e3:fa:31:6e:61:40:
                    97:ce:29:6d:f4:47:d8:94:58:fb:9a:5b:be:ac:a1:
                    32:50:a4:86:39:dc:1f:6a:5c:ec:e6:91:ec:30:bf:
                    aa:bb:60:ca:97:5b:a2:ad:6b:bd:50:b6:b0:16:36:
                    97:77:a4:48:ad:c3:f9:24:2f:c5:3d:f2:9c:56:34:
                    e4:44:f9:63:0e:fc:74:e8:0a:1b:64:ef:68:fc:bd:
                    11:bc:d7:32:46:ee:4c:51:91:15:51:ab:b2:db:ad:
                    f2:05:41:5e:c7:c5:95:23:40:c5:f9:ca:9b:f6:db:
                    f1:38:0b:26:da:a4:28:13:f5:95:46:23:69:5e:02:
                    1e:5c:35:bb:c1:3a:12:6f:70:ec:e3:e6:66:b7:00:
                    94:e2:2c:a3:fa:d2:1a:59:35:9a:df:db:97:a5:4d:
                    35:a4:88:26:e0:e4:c9:88:84:45:dc:03:23:cf:bb:
                    4b:d0:5a:37:ee:22:b2:c7:7d:ab:70:51:b8:b3:23:
                    96:e6:88:39:c8:e2:95:7e:d9:c0:00:e8:b8:f8:85:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:63:62:BE:BD:EE:FD:EA:16:0D:59:1A:65:AB:9C:69:A6:4B:94:18
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:53:55:51:87:c7:7f:03:a1:e3:00:61:cb:f3:ce:10:be:7c:
         42:64:1d:6b:7f:9b:e8:ba:55:f7:42:ca:75:b7:b2:8a:cf:37:
         7a:ab:36:f9:6e:ee:65:97:cc:0d:7a:ce:3a:12:c5:ab:c9:39:
         2d:03:f8:ac:54:15:56:1f:8f:06:52:fb:35:ba:6a:bc:cd:ae:
         7a:ba:76:65:da:c0:a1:32:39:ed:83:0c:c6:91:a8:26:65:a6:
         3d:c9:2f:0e:4c:66:dc:a0:6d:5b:00:4f:83:16:49:f5:ca:f1:
         45:42:78:43:df:ec:17:26:db:70:d6:f8:f5:95:11:da:46:18:
         75:b4:cc:b1:4a:a0:a3:e8:38:c3:f8:af:34:fe:88:a7:67:ff:
         4a:9b:63:be:ba:f4:5c:50:f5:66:f7:43:50:ce:8d:e8:f2:73:
         3d:bb:52:e4:00:63:fb:27:43:c4:e6:fb:9f:73:7f:50:72:cf:
         0d:5b:12:dc:c6:16:b2:4a:f2:38:ad:f9:fb:0e:6c:32:5c:d6:
         44:55:75:c1:20:f9:d3:ae:64:55:fe:ee:7e:85:db:0b:24:86:
         05:71:6c:d7:59:bd:04:90:ed:62:80:62:c7:fb:54:31:de:61:
         48:f4:9f:dc:4f:ba:53:36:07:40:9c:cb:f1:65:cb:ae:ef:4f:
         60:fa:85:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:37:46 2025 by rpki-client on console.sobornost.net