Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3230382e302f32312d3234203d3e203532383438.roa
File:                     3137372e38352e3230382e302f32312d3234203d3e203532383438.roa (raw, json)
Hash identifier:          2eNnQo2oAjbCAHYRNTi5W+NzsaA9Uyd6Y6GMBDkXVuA=
Subject key identifier:   C3:7F:F3:C9:8E:37:AC:2C:AD:08:EF:02:3B:71:18:B2:75:86:FB:17
Certificate issuer:       /CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
Certificate serial:       6A921BF4E22D88BEEBBA8D42F51E85B0468AAAF9
Authority key identifier: F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3230382e302f32312d3234203d3e203532383438.roa
Signing time:             Wed 18 Dec 2024 16:36:57 +0000
ROA not before:           Wed 18 Dec 2024 16:31:57 +0000
ROA not after:            Wed 17 Dec 2025 16:36:57 +0000
asID:                     52848
IP address blocks:        177.85.208.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 18 Dec 2024 17:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:92:1b:f4:e2:2d:88:be:eb:ba:8d:42:f5:1e:85:b0:46:8a:aa:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
        Validity
            Not Before: Dec 18 16:31:57 2024 GMT
            Not After : Dec 17 16:36:57 2025 GMT
        Subject: CN=C37FF3C98E37AC2CAD08EF023B7118B27586FB17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:3e:d1:d6:96:97:69:e9:f4:e8:29:1a:75:
                    bb:47:42:6e:16:cb:e6:c2:51:bd:f6:01:40:4d:62:
                    47:a0:c5:b8:9b:10:10:48:ff:14:5a:3d:77:3e:35:
                    c2:dd:96:95:55:6b:6c:02:ce:a2:1b:6f:ad:c6:5c:
                    af:a8:45:61:82:ab:db:4a:a8:c0:ad:1f:43:15:a5:
                    55:24:d4:2b:12:c9:32:0f:f1:22:e4:40:cd:e9:f3:
                    1d:bd:05:40:f4:68:53:96:f7:9a:1d:3c:89:a1:dc:
                    9e:c3:61:bf:b3:c9:25:d2:1b:31:de:e1:22:da:df:
                    d2:cb:65:12:b8:ef:9d:01:7c:1f:14:de:c6:d5:2e:
                    e8:ed:fe:3f:01:aa:30:74:5f:37:d1:aa:5b:d6:f4:
                    ef:29:09:2e:01:d2:8d:c8:7c:37:01:5d:5b:a3:be:
                    28:74:d1:87:4f:55:3a:0c:d4:e4:9f:70:f2:53:ce:
                    dd:bf:71:a2:8d:c1:63:5a:05:e3:71:8d:a7:18:11:
                    44:89:5d:0e:ed:5d:ba:8f:c4:ba:73:6c:6f:3d:72:
                    76:bb:4b:d1:3d:11:3e:fe:6a:95:e2:bb:4d:dd:05:
                    17:bd:20:11:ec:63:ff:3b:98:62:2c:8a:ef:c6:ec:
                    90:65:b3:10:22:1c:5e:10:b6:77:be:7f:cb:29:c3:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7F:F3:C9:8E:37:AC:2C:AD:08:EF:02:3B:71:18:B2:75:86:FB:17
            X509v3 Authority Key Identifier:
                keyid:F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/F805B6A0C0363F0117691C0481A12D30CEF456BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3230382e302f32312d3234203d3e203532383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:27:82:0d:3c:f2:f4:fc:6c:ee:33:57:18:b8:8f:71:14:06:
         aa:60:43:b4:61:c9:c4:83:71:55:1d:51:de:94:f9:3d:20:76:
         fc:52:12:82:72:4b:70:d4:86:8a:11:2a:79:f1:22:cb:ae:41:
         04:59:ad:37:93:2c:11:2a:8c:54:7e:55:b7:5e:2a:4a:e2:9e:
         8e:30:8d:7b:01:0e:26:fc:f4:45:63:7d:7e:67:5d:10:dc:8e:
         4d:36:1c:48:c2:07:06:57:01:58:f8:87:25:e3:ac:42:d3:5b:
         d5:cd:f4:76:89:14:cf:51:6a:23:28:a8:3a:b5:28:e2:3f:28:
         a9:47:ef:7c:9c:d3:2c:77:43:e6:86:34:93:16:fd:25:de:78:
         69:5b:79:7c:8d:85:72:f1:88:a8:e1:13:89:93:ef:44:5d:30:
         65:9a:ef:64:cd:4b:53:0e:00:23:6b:17:2b:f6:a8:65:cc:72:
         32:14:3b:b7:8a:aa:6e:9b:be:e8:7e:c6:0e:a1:73:2a:aa:46:
         3b:53:d6:3d:b2:5a:05:f3:a0:75:ba:ec:55:b6:ae:68:db:62:
         d2:1d:37:64:82:3f:db:36:f0:24:7f:8e:f4:41:f5:a1:d2:d5:
         1d:0f:da:45:57:c9:54:da:a3:fa:61:e7:f8:a4:63:0d:12:27:
         6c:bc:e3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 19:38:11 2024 by rpki-client on console.sobornost.net