Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/34352e3137332e3131362e302f32342d3234203d3e20323638383130.roa
File:                     34352e3137332e3131362e302f32342d3234203d3e20323638383130.roa (raw, json)
Hash identifier:          iXv0XlT2zytxqDx6ipqCYnniU2jOILn1Q0sHtw58HvA=
Subject key identifier:   4F:64:C1:E1:09:4B:5D:83:4F:23:E6:3A:FD:2A:90:91:6A:45:60:43
Certificate issuer:       /CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
Certificate serial:       61191202B9FD8EA7DD3C219ECCC941091C310626
Authority key identifier: 98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/34352e3137332e3131362e302f32342d3234203d3e20323638383130.roa
Signing time:             Mon 16 Dec 2024 17:18:04 +0000
ROA not before:           Mon 16 Dec 2024 17:13:04 +0000
ROA not after:            Mon 15 Dec 2025 17:18:04 +0000
asID:                     268810
IP address blocks:        45.173.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 17 Dec 2024 14:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:19:12:02:b9:fd:8e:a7:dd:3c:21:9e:cc:c9:41:09:1c:31:06:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
        Validity
            Not Before: Dec 16 17:13:04 2024 GMT
            Not After : Dec 15 17:18:04 2025 GMT
        Subject: CN=4F64C1E1094B5D834F23E63AFD2A90916A456043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:9c:3b:82:cc:f6:89:83:42:94:d6:e1:49:
                    19:a5:df:7b:70:90:68:26:fc:94:5a:ec:5d:97:9a:
                    1e:dd:f7:e6:f2:21:1b:b4:4b:52:f4:04:33:b6:54:
                    5b:bb:b0:71:25:25:62:b7:f7:e6:b7:0c:98:0b:6c:
                    da:58:7c:0a:cc:83:ae:e1:17:50:e7:2e:45:e0:9b:
                    e8:12:ed:cf:d0:8a:38:70:69:e4:96:28:6a:08:00:
                    f5:33:7a:6e:24:ba:b4:bf:01:9c:99:c4:a5:61:e6:
                    15:dd:ea:5c:6a:77:0c:16:f1:9a:0d:7e:2f:da:30:
                    08:a2:a5:4e:1b:c9:a7:4f:8d:37:42:f7:71:6d:0d:
                    3d:c3:f1:97:f5:c6:e7:9e:e4:a7:56:02:09:4a:ff:
                    88:8b:b1:eb:57:12:e7:ba:1f:53:16:57:03:68:fd:
                    d4:48:23:81:72:e4:78:de:e9:b4:56:b8:a5:9b:9c:
                    29:42:2b:3e:71:c9:17:39:55:9d:17:19:56:21:cc:
                    d1:c8:88:e7:7f:a9:95:34:e0:a4:5a:b4:8b:f2:dc:
                    ca:19:22:3e:dd:fe:d1:55:4a:cf:40:50:56:6b:11:
                    97:da:ab:00:e8:9d:00:51:89:0f:b2:0d:85:f5:b3:
                    37:1c:72:65:dd:d6:05:bc:ee:73:cf:04:2b:bd:bf:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:64:C1:E1:09:4B:5D:83:4F:23:E6:3A:FD:2A:90:91:6A:45:60:43
            X509v3 Authority Key Identifier:
                keyid:98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/34352e3137332e3131362e302f32342d3234203d3e20323638383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:63:5f:ec:51:de:c3:65:36:72:6b:1f:3b:b4:d0:e0:df:c1:
         6e:4e:ea:24:51:a7:ca:8b:0a:f1:5e:53:9d:2a:bc:d1:4c:85:
         47:25:f7:27:c5:25:4b:c0:d6:ba:82:70:fa:93:cc:ab:b2:3e:
         c6:d8:35:f8:78:62:20:26:9d:4b:66:4c:fc:f9:62:01:9e:c1:
         94:ee:6a:ff:f3:e7:da:2a:73:96:3a:87:eb:e2:a6:ca:8e:dd:
         ad:26:7a:7b:b3:f1:62:3c:a8:b4:06:4b:fd:f6:b1:8e:8d:bf:
         b6:2e:74:30:a6:cc:d7:10:ed:2b:d0:b1:c3:3d:b5:25:25:83:
         f2:92:a5:62:f7:64:52:73:52:89:8b:c8:88:d8:f1:cf:56:4c:
         9f:da:5e:a9:16:4d:bf:3b:fe:19:89:28:13:b4:44:3e:4a:9d:
         74:bd:2a:5f:92:16:56:5c:18:a2:ad:26:8d:2a:8a:c5:13:f5:
         c5:b3:65:75:aa:a0:13:f4:12:0b:4e:c7:ac:62:32:34:c5:b8:
         45:e3:37:95:59:f6:72:14:eb:65:5a:8a:65:58:43:f7:2a:fd:
         4f:c1:2c:9f:dd:67:39:1e:bb:a9:ac:92:f6:97:0e:2d:fe:00:
         44:bd:4d:c3:e7:fe:eb:65:32:2d:19:a7:88:7c:a7:69:c4:20:
         03:f3:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 17 15:46:04 2024 by rpki-client on console.sobornost.net