Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233332e302f32342d3332203d3e20323638333839.roa
File:                     34352e3233392e3233332e302f32342d3332203d3e20323638333839.roa (raw, json)
Hash identifier:          M00c2YLCVOh8IHTYOhrbc/o3XPsGKqAiDRUHoau3NpY=
Subject key identifier:   F7:61:81:85:BF:29:C5:CF:23:38:E1:64:31:CA:96:90:7F:A2:BC:78
Certificate issuer:       /CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
Certificate serial:       74FCB186081606FE42DAA47CE4F26A10111ACD18
Authority key identifier: D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233332e302f32342d3332203d3e20323638333839.roa
Signing time:             Wed 12 Mar 2025 15:28:21 +0000
ROA not before:           Wed 12 Mar 2025 15:23:21 +0000
ROA not after:            Wed 11 Mar 2026 15:28:21 +0000
asID:                     268389
IP address blocks:        45.239.233.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Wed 12 Mar 2025 16:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fc:b1:86:08:16:06:fe:42:da:a4:7c:e4:f2:6a:10:11:1a:cd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
        Validity
            Not Before: Mar 12 15:23:21 2025 GMT
            Not After : Mar 11 15:28:21 2026 GMT
        Subject: CN=F7618185BF29C5CF2338E16431CA96907FA2BC78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:6c:83:94:fe:90:eb:df:1f:af:19:17:75:
                    21:a6:ce:bb:6c:7a:61:e2:06:0f:c1:81:e1:e8:dd:
                    9b:f0:cb:22:3d:01:b0:9a:4b:10:4a:10:91:85:5e:
                    08:26:03:07:ca:eb:cb:2a:ae:0c:7a:4b:3a:26:56:
                    7e:02:5b:71:49:ed:10:45:1c:0a:bd:d4:b9:bc:4f:
                    3b:0b:b8:e8:5f:0f:28:67:fb:b3:b4:a1:51:f8:7d:
                    6a:da:9d:21:a1:50:04:fa:be:a7:74:50:12:4b:1c:
                    e7:e9:ba:46:9e:4f:21:46:14:cf:fa:17:6a:48:f2:
                    13:b8:00:75:f8:50:58:54:ca:41:0e:0b:00:bb:b5:
                    0f:ae:40:a6:39:2d:a9:58:87:df:e9:88:74:c0:a4:
                    1d:6b:60:5c:c1:75:da:83:82:90:d7:51:b9:74:9d:
                    24:b2:6a:92:d7:fb:0a:71:77:1d:31:aa:15:2e:66:
                    41:e5:6a:86:d5:b9:6f:fd:00:2c:c8:34:29:ef:cd:
                    7c:ca:fd:29:a2:ae:b0:0e:53:b4:6a:41:49:05:45:
                    ea:e7:02:20:64:0b:a4:65:81:de:74:8e:f7:bd:b6:
                    bd:5f:f2:8a:6d:6d:db:b6:50:79:e8:c1:03:58:fd:
                    e1:68:c7:b2:fb:fd:4b:78:b7:43:8e:4c:48:0d:d0:
                    9c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:61:81:85:BF:29:C5:CF:23:38:E1:64:31:CA:96:90:7F:A2:BC:78
            X509v3 Authority Key Identifier:
                keyid:D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233332e302f32342d3332203d3e20323638333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:e4:a3:dc:07:30:31:b3:26:60:cd:4d:39:25:6f:1d:bb:23:
         c8:50:36:45:85:e3:3c:44:7f:07:7d:5e:7e:30:a9:33:e7:c4:
         e6:4d:71:10:76:e7:25:ad:36:6d:98:9c:70:3c:60:24:2c:5a:
         ff:74:b0:e9:04:7a:fc:f2:2b:66:99:bc:b8:21:38:54:e5:58:
         c7:62:9c:93:9b:2f:ea:7a:cd:d8:9d:2a:91:34:26:ac:60:81:
         85:01:cd:fa:ef:db:60:c8:2b:45:34:22:d6:05:97:94:99:fa:
         17:fa:97:d8:3d:06:28:89:09:f8:14:11:e0:6d:28:16:8e:5a:
         89:fc:bb:e4:fe:79:e9:71:2a:6d:4e:75:6a:21:16:0a:d7:06:
         5c:2d:96:ec:a7:bb:ee:15:0b:a6:29:56:ac:34:7c:31:1c:87:
         41:5f:dd:8f:ae:6e:b1:66:7f:90:cd:3a:a2:91:91:d0:87:1c:
         00:59:ad:43:e4:53:88:9d:a4:d0:7e:5d:7b:a3:5f:4a:c2:34:
         5f:ab:92:4a:c6:90:aa:c4:0f:95:66:14:33:9b:c3:ec:62:69:
         77:77:0a:8a:8a:e8:b7:ec:96:b9:91:99:89:b3:cf:41:26:7b:
         62:3c:47:07:66:6a:70:70:6a:45:6e:55:66:8f:cf:db:62:89:
         92:f9:0d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 20:52:09 2025 by rpki-client on console.sobornost.net