Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/755b8aec834587f65ea79ac7cd7c88fb14461d1f.roa
File:                     755b8aec834587f65ea79ac7cd7c88fb14461d1f.roa (raw, json)
Hash identifier:          rE21TL5Znd6Y3Cm0xyxe8i1sjg0akM2EI/SQRvGTrAw=
Subject key identifier:   EA:DA:B9:E9:40:3D:98:7F:F8:0E:03:44:6B:E0:A1:B3:6C:D4:04:86
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1F8B61
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/755b8aec834587f65ea79ac7cd7c88fb14461d1f.roa
Signing time:             Thu 19 Jan 2023 09:45:45 +0000
ROA not before:           Fri 07 May 2021 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        190.90.0.0/21 maxlen: 21
                          190.90.8.0/21 maxlen: 21
                          190.90.17.0/24 maxlen: 24
                          190.90.21.0/24 maxlen: 24
                          190.90.22.0/24 maxlen: 24
                          190.90.24.0/24 maxlen: 24
                          190.90.208.0/21 maxlen: 24
                          190.90.252.0/24 maxlen: 24
                          190.90.240.0/24 maxlen: 24
                          190.90.76.0/24 maxlen: 24
                          190.90.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2067297 (0x1f8b61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: May  7 03:00:00 2021 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=755b8aec834587f65ea79ac7cd7c88fb14461d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:57:78:af:7d:bd:fa:0d:0c:d1:5f:2d:97:
                    98:30:7b:f8:1d:32:36:1c:2f:73:9a:14:91:35:9d:
                    76:d0:7c:9a:77:90:32:71:1f:70:a6:2e:3b:dd:08:
                    35:58:0f:44:42:27:db:be:f3:5e:97:f5:0d:3c:30:
                    c8:0c:5a:83:1b:b9:10:6f:7b:ee:4d:22:f9:64:a6:
                    86:7d:08:93:21:4e:1f:2a:14:10:80:b7:7e:97:6c:
                    a9:7b:48:4e:75:be:b3:3c:10:43:3d:5f:86:14:a2:
                    ac:60:1f:9d:5a:75:44:11:51:08:72:f2:bc:6b:3e:
                    70:e4:57:4c:ee:03:13:da:94:bc:29:4e:e2:62:f4:
                    fe:1e:51:cb:f2:2f:18:8a:af:e4:ec:15:97:af:c5:
                    17:62:be:a5:07:3f:23:e7:f4:f2:f2:64:2c:f5:70:
                    43:ca:81:c5:82:92:4a:19:9c:18:10:99:7e:7b:7b:
                    54:d2:bc:ec:0e:1c:89:04:e6:cf:87:8a:30:aa:54:
                    a9:9b:71:b1:76:d6:71:25:b5:19:33:d1:07:15:fe:
                    21:31:9f:d3:72:a2:f3:25:38:86:55:ed:8d:be:2e:
                    5f:5d:65:72:aa:5c:b5:d3:66:6c:2c:2f:80:45:4c:
                    4a:62:09:d7:c2:7a:9e:55:70:e2:04:8c:a0:ac:47:
                    50:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DA:B9:E9:40:3D:98:7F:F8:0E:03:44:6B:E0:A1:B3:6C:D4:04:86
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/755b8aec834587f65ea79ac7cd7c88fb14461d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.0.0/20
                  190.90.17.0/24
                  190.90.21.0-190.90.22.255
                  190.90.24.0/24
                  190.90.76.0/23
                  190.90.208.0/21
                  190.90.240.0/24
                  190.90.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:37:7f:b3:89:e0:a6:c0:86:f1:ec:b5:6b:f4:f4:9a:1d:a7:
         07:c9:6d:d5:95:9d:49:d8:24:4a:2b:b1:9c:78:52:3c:26:8a:
         cc:3a:2d:d2:fd:45:4a:3e:82:eb:e5:c3:6e:7b:a1:ed:e4:6e:
         ee:a3:94:1c:08:ff:2f:7b:d6:6a:26:1f:25:76:0e:5c:af:0a:
         c5:36:01:1b:55:48:b4:f0:b3:75:ad:c0:19:fd:d9:58:8d:06:
         ab:36:cb:86:65:ab:2b:5b:2a:5b:5f:9f:9e:2a:ac:67:1c:97:
         ac:82:8d:dc:57:2d:7e:df:29:92:79:ee:f3:9e:35:71:86:25:
         3c:28:49:d8:18:ee:56:c1:16:ee:92:8f:57:ee:54:9b:82:e0:
         c4:0b:88:58:34:22:a9:0a:ca:df:ee:06:f2:f8:62:da:3c:2b:
         76:8f:ef:a8:3b:91:62:d3:5a:6a:01:42:b0:da:f6:57:3b:d4:
         9a:c4:60:8d:17:b5:a5:d4:75:56:8e:72:68:82:5e:4b:a6:00:
         f2:95:88:20:b5:3f:5e:c2:ac:f1:bd:30:73:1c:53:87:68:75:
         40:1b:8e:f4:99:d5:d7:11:8b:04:47:76:c6:cf:62:21:5f:6c:
         eb:80:d5:2d:f8:72:7e:1e:91:0a:f3:2a:ba:2b:8c:5b:35:53:
         0d:c9:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:20 2023 by rpki-client on console.sobornost.net