Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/34352e3136392e3230382e302f32322d3332203d3e20323638313330.roa
File:                     34352e3136392e3230382e302f32322d3332203d3e20323638313330.roa (raw, json)
Hash identifier:          rf0BHlT1uzqEeYQG2T7sJD7hwzqP/W46zG6/Ej4vLmc=
Subject key identifier:   AD:FE:C4:21:14:C8:CD:E4:BB:AB:89:B5:3E:E6:EB:9A:44:D2:EA:8B
Certificate issuer:       /CN=1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58
Certificate serial:       179EDF8127DE820C8EF924D8754AE4E9BBA0212B
Authority key identifier: 1B:7D:DF:CB:5C:86:59:96:08:DE:38:E4:CA:DB:27:3B:D3:EB:EC:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/34352e3136392e3230382e302f32322d3332203d3e20323638313330.roa
Signing time:             Wed 16 Apr 2025 12:54:26 +0000
ROA not before:           Wed 16 Apr 2025 12:49:26 +0000
ROA not after:            Wed 15 Apr 2026 12:54:26 +0000
asID:                     268130
IP address blocks:        45.169.208.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Wed 16 Apr 2025 17:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9e:df:81:27:de:82:0c:8e:f9:24:d8:75:4a:e4:e9:bb:a0:21:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58
        Validity
            Not Before: Apr 16 12:49:26 2025 GMT
            Not After : Apr 15 12:54:26 2026 GMT
        Subject: CN=ADFEC42114C8CDE4BBAB89B53EE6EB9A44D2EA8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:30:cf:57:90:99:23:86:fd:8d:36:c9:e8:
                    b0:74:84:b6:c2:e8:47:de:00:fb:25:9c:76:92:6c:
                    a3:cd:00:f0:0d:4f:ae:75:80:7d:2b:ae:57:7f:55:
                    2d:fb:0e:8c:d7:19:bb:e1:d1:1c:01:c5:fb:6a:15:
                    43:f6:ad:6b:42:c1:37:6f:73:32:13:2a:09:95:ee:
                    bf:da:50:28:79:2b:1d:4e:a1:f5:17:a1:e6:32:45:
                    54:83:e3:cd:38:a3:fb:0a:26:cb:04:bc:c2:91:e8:
                    dd:ed:83:1f:da:07:6d:44:4f:9c:1b:15:79:24:c7:
                    ae:2b:9e:a3:46:2f:dd:be:92:bf:25:ea:ce:49:6a:
                    d1:4d:ff:e3:c0:93:d2:cc:9d:d8:ec:3e:db:c6:dd:
                    5d:c1:86:c3:ac:61:e5:8d:da:0d:44:fc:26:b7:da:
                    76:b1:45:aa:76:de:22:d1:54:2b:82:9e:37:f9:b1:
                    23:e8:65:fd:90:a3:19:9e:f8:8c:95:bc:48:c0:f8:
                    66:2f:74:aa:ff:9e:6c:46:8f:e9:e8:b0:03:ee:73:
                    17:ac:0b:cc:46:8d:67:36:a0:a6:e3:0c:0e:4a:ba:
                    c3:9c:d0:c4:cd:7b:66:4f:9b:81:da:22:e0:63:1c:
                    a9:51:db:36:52:47:5c:e1:57:70:3b:1c:9b:c7:ab:
                    aa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FE:C4:21:14:C8:CD:E4:BB:AB:89:B5:3E:E6:EB:9A:44:D2:EA:8B
            X509v3 Authority Key Identifier:
                keyid:1B:7D:DF:CB:5C:86:59:96:08:DE:38:E4:CA:DB:27:3B:D3:EB:EC:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/34352e3136392e3230382e302f32322d3332203d3e20323638313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:e7:98:41:2a:cf:b1:2a:f1:6e:ab:94:f0:de:15:5f:de:12:
         29:2a:59:cc:19:e0:65:e7:51:09:c5:96:68:97:1a:3f:71:71:
         cb:0f:c2:85:6b:30:af:38:b0:9d:0c:79:c3:f0:1b:14:ab:ba:
         70:b7:76:46:8f:ff:fe:04:a1:33:ea:b5:bb:46:1a:e1:0d:49:
         fc:86:b1:8e:63:fa:d7:0f:b3:8d:e3:0a:e6:18:1c:67:3b:41:
         c8:b8:95:5d:5b:1b:1f:f0:d9:f6:29:d9:8b:19:36:56:cb:ba:
         ca:93:6d:ed:23:24:78:f2:53:86:52:9e:fb:ff:63:fc:75:e5:
         cc:b4:93:b9:a7:8d:f3:ab:02:14:96:c6:43:c2:a4:fb:73:75:
         d4:e0:96:5b:ce:7d:af:b1:bb:b0:28:ca:a8:4a:de:db:98:7d:
         2f:84:02:8d:bd:57:36:86:69:1a:c6:85:36:24:71:a2:76:64:
         1d:b5:80:60:98:cb:9d:2d:81:66:37:9d:89:fa:9c:29:d7:68:
         0d:78:aa:c8:45:83:ff:85:4c:61:57:a2:a5:c8:36:e6:25:37:
         59:7a:e3:51:23:ee:c0:7b:d0:24:3a:be:be:71:de:de:7b:53:
         22:d3:b3:f3:9f:99:87:7e:d3:69:3f:c8:27:8c:93:02:0f:3b:
         28:c5:bc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:38:31 2025 by rpki-client on console.sobornost.net