Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e302e302f32332d3233203d3e20323637343430.roa
File:                     3139322e3134312e302e302f32332d3233203d3e20323637343430.roa (raw, json)
Hash identifier:          RaUcVdGNQQhMtS1glfA7ynuoLFbbn7nHmSlosmNIhX4=
Subject key identifier:   0E:2A:6A:0B:B0:25:38:86:CB:AB:21:18:77:2A:A6:1F:06:0D:6B:F8
Certificate issuer:       /CN=683528643A65F1188AB7E1EF5CB5E716A5A13959
Certificate serial:       6EAB5B7400D6E51DC5189E442AF8653AC9C2351E
Authority key identifier: 68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e302e302f32332d3233203d3e20323637343430.roa
Signing time:             Mon 20 Jan 2025 14:46:20 +0000
ROA not before:           Mon 20 Jan 2025 14:41:20 +0000
ROA not after:            Mon 19 Jan 2026 14:46:20 +0000
asID:                     267440
IP address blocks:        192.141.0.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 21 Jan 2025 14:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ab:5b:74:00:d6:e5:1d:c5:18:9e:44:2a:f8:65:3a:c9:c2:35:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=683528643A65F1188AB7E1EF5CB5E716A5A13959
        Validity
            Not Before: Jan 20 14:41:20 2025 GMT
            Not After : Jan 19 14:46:20 2026 GMT
        Subject: CN=0E2A6A0BB0253886CBAB2118772AA61F060D6BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:2b:c1:65:55:2b:c4:29:c7:38:f3:92:de:
                    bd:50:91:76:4a:06:da:a3:be:b6:4c:75:2f:b4:b1:
                    00:bf:4c:3d:40:92:13:06:7d:a6:ac:c3:db:4f:64:
                    0d:a6:44:98:bc:a9:bc:e2:1d:04:81:75:96:06:37:
                    87:85:0d:89:56:4c:f7:ae:5c:ab:cd:66:3c:e1:6f:
                    51:3a:ef:5a:d5:3d:00:6a:15:aa:c7:b2:b8:dd:b8:
                    eb:b9:f6:4b:fc:9d:45:3d:e9:04:de:75:91:1a:6e:
                    13:63:22:da:c7:dc:4c:bc:43:20:f2:48:93:e1:e9:
                    12:dc:e3:52:d5:5f:fd:50:66:6b:af:56:e6:75:6d:
                    47:ac:88:a5:75:f0:3c:ee:41:57:ce:88:9c:c2:45:
                    35:ef:8e:ab:ea:55:cb:d3:dc:fa:13:5a:b8:af:29:
                    33:10:11:6a:3d:34:b3:b6:35:3d:0a:b3:39:ff:3d:
                    12:29:94:9c:9b:97:b3:b6:0a:65:b6:88:5c:a6:38:
                    47:19:53:65:ad:c4:01:91:4d:e2:6a:8e:45:74:3a:
                    a5:3b:10:b5:2d:eb:3e:6b:83:08:aa:fa:96:64:17:
                    56:13:94:35:17:6c:94:8e:cf:8c:90:11:1a:72:53:
                    c6:6e:4e:46:cc:c6:16:1c:3c:24:19:2b:b2:36:a4:
                    2f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2A:6A:0B:B0:25:38:86:CB:AB:21:18:77:2A:A6:1F:06:0D:6B:F8
            X509v3 Authority Key Identifier:
                keyid:68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/683528643A65F1188AB7E1EF5CB5E716A5A13959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e302e302f32332d3233203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:c1:3f:88:f3:b3:2d:e7:f3:5f:0b:83:78:48:78:cb:72:fa:
         1a:f5:8d:4e:1e:1b:e9:c8:b2:d1:86:96:56:12:8f:0b:79:8a:
         99:9c:05:bf:f1:17:88:9a:c9:0d:8d:0c:ef:77:0a:42:52:2c:
         3f:5d:7d:f9:61:d8:d8:2a:3b:c9:93:c2:f3:91:1c:7f:db:48:
         5e:11:cd:fa:02:03:f1:3d:e8:9c:c8:98:e4:e2:82:bd:86:56:
         f5:be:f8:12:7a:7f:6c:3e:95:0e:8d:bc:4a:81:f9:1d:ff:d5:
         55:d0:ba:14:a1:6e:0f:87:bc:00:f4:7e:4d:72:48:ee:f7:4d:
         6f:1e:4e:f1:19:e2:b9:c9:73:f7:f8:be:1b:9d:b8:e3:56:08:
         a2:69:7c:47:a4:84:fe:64:c4:2e:5a:d6:c4:cd:e1:bc:f3:a4:
         4a:62:23:eb:ce:af:fc:e2:b8:49:b1:be:41:22:b7:3d:13:f6:
         1e:03:5b:24:8d:8d:66:77:6a:62:67:92:29:45:05:33:52:82:
         e3:e6:76:6b:c7:24:11:0d:b9:69:42:6a:e7:87:e7:f2:7f:8b:
         92:6d:a7:d5:24:8d:32:92:04:07:21:af:2c:93:0a:f2:c9:2b:
         32:5f:6c:71:0b:2a:ee:0f:b1:54:82:04:bd:ea:02:3d:e5:6a:
         2f:47:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 17:32:47 2025 by rpki-client on console.sobornost.net