Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e31302e302f32332d3233203d3e203631393030.roa
File:                     3139312e3234332e31302e302f32332d3233203d3e203631393030.roa (raw, json)
Hash identifier:          FCSu9BvLcbGT+lXGTJjeeNW0VorY4Gj1AdjNpcLVnmI=
Subject key identifier:   62:32:45:83:2B:02:99:17:B8:1F:54:9E:E5:CC:64:4F:F2:A7:B4:6A
Certificate issuer:       /CN=717D62DB604520975DE382D0D3273E1BDB591D67
Certificate serial:       72049523F7C79477C8CB687301F7D21D3B0D4E64
Authority key identifier: 71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e31302e302f32332d3233203d3e203631393030.roa
Signing time:             Wed 16 Apr 2025 14:08:08 +0000
ROA not before:           Wed 16 Apr 2025 14:03:08 +0000
ROA not after:            Wed 15 Apr 2026 14:08:08 +0000
asID:                     61900
IP address blocks:        191.243.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 16 Apr 2025 18:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:04:95:23:f7:c7:94:77:c8:cb:68:73:01:f7:d2:1d:3b:0d:4e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717D62DB604520975DE382D0D3273E1BDB591D67
        Validity
            Not Before: Apr 16 14:03:08 2025 GMT
            Not After : Apr 15 14:08:08 2026 GMT
        Subject: CN=623245832B029917B81F549EE5CC644FF2A7B46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3a:da:c7:b6:0f:e2:93:01:4d:1c:ce:7c:4f:
                    0c:3a:fd:86:31:2f:87:1c:8b:ef:9d:9b:e0:ab:5d:
                    42:27:f5:bb:bb:8d:a8:af:25:9a:96:ba:01:e9:00:
                    71:b8:c8:b4:b6:6a:ff:db:da:a1:dd:e7:b8:03:6b:
                    a9:c3:34:1e:56:17:fc:c5:a4:d6:6d:c3:f4:2b:7e:
                    31:c8:35:8a:33:c5:75:39:ad:59:3f:1a:23:d2:ae:
                    68:a0:99:76:d8:5a:cf:fa:c8:60:b5:f3:dc:02:30:
                    2f:69:2b:a8:5e:85:08:a3:e7:5b:2c:6e:1f:bd:1e:
                    45:1d:db:64:49:31:c3:d5:e2:1b:06:40:8f:1c:89:
                    af:bd:6f:39:74:5b:e8:7c:17:9f:a9:d8:fb:8b:71:
                    6d:16:8e:f3:c5:ab:de:aa:56:c3:78:6c:68:93:a1:
                    c9:70:a1:29:93:d5:24:f5:31:0d:82:6e:ff:b1:03:
                    2d:e9:a5:4a:b1:45:3c:2c:0f:0a:9a:31:cb:5a:3a:
                    2b:c2:93:be:71:aa:4f:aa:76:36:6f:9b:92:a3:09:
                    46:26:e2:01:0b:fe:76:04:06:e8:38:77:92:e3:ef:
                    16:43:78:2c:0b:43:77:45:8f:7b:77:43:de:e2:67:
                    7a:15:7a:21:d5:8a:6a:96:26:91:e3:59:2f:f9:88:
                    28:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:32:45:83:2B:02:99:17:B8:1F:54:9E:E5:CC:64:4F:F2:A7:B4:6A
            X509v3 Authority Key Identifier:
                keyid:71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e31302e302f32332d3233203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:90:da:80:b2:bb:98:c0:55:63:1d:d6:6a:4b:d2:52:56:a5:
         f6:9b:37:aa:1a:82:e7:96:1b:0d:b6:95:03:6f:04:c4:97:2e:
         2d:d5:ab:3e:88:04:14:89:fe:c3:21:00:da:bf:0d:3d:c0:ec:
         ce:26:c0:ed:37:55:a2:63:cb:7a:0f:f5:7f:7b:a6:76:21:4b:
         ab:9e:fe:f5:5c:ab:b5:a5:43:fa:df:b4:a4:7b:86:d1:ed:be:
         c2:43:e0:a1:d3:56:3b:53:c6:89:59:7a:6e:c7:f5:c5:fe:db:
         a8:a7:23:5e:5f:90:df:29:7c:7d:34:43:a8:92:24:1b:db:66:
         ae:0d:5e:67:cb:51:ae:2f:59:8a:1c:8d:d0:2e:74:17:a7:ed:
         85:0d:c2:87:bc:ee:93:88:0e:a0:f7:60:41:7c:20:b9:8b:1e:
         e9:5d:a6:99:eb:78:e7:79:a4:ef:4d:a5:98:28:5f:75:0f:63:
         d1:cd:df:93:e2:36:75:dd:9c:d1:a4:41:cc:46:21:9a:74:48:
         d2:fe:5b:b5:63:fc:28:c0:45:9e:76:8f:cc:26:90:25:df:37:
         a5:b1:0f:78:ad:01:f3:e0:5a:1f:b6:44:e1:af:62:99:10:7b:
         8f:e9:3d:65:89:94:3b:21:05:f3:28:9a:d3:2c:c5:2e:86:72:
         2e:b7:37:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:42:22 2025 by rpki-client on console.sobornost.net