Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/34352e3138352e3231362e302f32322d3232203d3e20323639333934.roa
File:                     34352e3138352e3231362e302f32322d3232203d3e20323639333934.roa (raw, json)
Hash identifier:          zDDOUNRb8q4M94fkcRKcP93ls8mQkr21EGx2GbCy18s=
Subject key identifier:   B4:02:9B:86:FF:75:49:72:0B:B1:D5:BD:08:83:CF:30:06:6B:CC:16
Certificate issuer:       /CN=CE5B1C22F785931FD04E35B0D10299499369B6B2
Certificate serial:       0F79E931C981D7D981E618C35F188015639E500A
Authority key identifier: CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/34352e3138352e3231362e302f32322d3232203d3e20323639333934.roa
Signing time:             Tue 31 Dec 2024 18:23:31 +0000
ROA not before:           Tue 31 Dec 2024 18:18:31 +0000
ROA not after:            Tue 30 Dec 2025 18:23:31 +0000
asID:                     269394
IP address blocks:        45.185.216.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 03 Jan 2025 18:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:79:e9:31:c9:81:d7:d9:81:e6:18:c3:5f:18:80:15:63:9e:50:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE5B1C22F785931FD04E35B0D10299499369B6B2
        Validity
            Not Before: Dec 31 18:18:31 2024 GMT
            Not After : Dec 30 18:23:31 2025 GMT
        Subject: CN=B4029B86FF7549720BB1D5BD0883CF30066BCC16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:6c:d9:9e:2f:33:a1:04:b6:1b:21:af:b8:
                    13:59:22:1a:95:08:0c:91:60:3c:a2:df:4a:ed:f1:
                    1d:f3:05:18:16:15:30:5a:1e:cc:15:fc:6a:38:1c:
                    4e:8a:ea:b3:01:76:92:69:ff:0f:61:8c:43:54:ac:
                    e3:f1:fd:15:4f:e9:96:0e:20:46:91:87:7f:9e:51:
                    c8:ad:15:9c:b9:1b:12:c9:3f:ae:53:9b:66:cd:66:
                    5c:81:30:e9:dc:b4:02:ea:6d:d1:84:78:e5:f7:49:
                    42:86:55:57:cd:65:3f:81:2d:a8:3e:4f:4a:39:f8:
                    6d:a9:cd:d6:1c:d8:dc:ec:a9:0c:5e:60:b8:08:f4:
                    d4:76:c5:44:03:f5:59:34:8e:a0:0f:39:7a:11:fb:
                    7d:e4:f9:0d:3f:b7:37:c7:ca:01:02:a5:d5:dd:a0:
                    aa:f5:95:29:ca:e5:b0:44:7c:ba:37:53:cb:ec:c8:
                    43:02:7c:0d:77:9d:98:ed:b2:59:2b:00:3b:0a:11:
                    96:99:d6:0a:a0:1d:fc:f0:9b:4a:cc:f9:0f:29:81:
                    01:e1:02:ec:95:90:21:0a:8b:ed:3c:06:57:a1:29:
                    99:69:2a:9f:7d:2e:e9:b8:87:0a:d9:cc:0f:a6:62:
                    a9:c7:09:a6:f9:59:53:f5:88:e5:72:a5:14:74:77:
                    39:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:02:9B:86:FF:75:49:72:0B:B1:D5:BD:08:83:CF:30:06:6B:CC:16
            X509v3 Authority Key Identifier:
                keyid:CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/34352e3138352e3231362e302f32322d3232203d3e20323639333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:46:a4:8b:d7:bf:6b:57:86:43:c0:b1:a8:52:c8:05:16:50:
         01:f9:d0:76:a7:fa:7f:c3:4d:32:dc:29:27:35:c4:a2:30:b6:
         2a:b5:38:0b:8f:f5:55:bc:91:1b:48:d5:04:52:12:ec:ad:20:
         48:e5:04:4e:d5:48:b9:47:6f:2a:4f:2d:11:1a:b4:39:51:44:
         1f:5e:3f:c8:77:e7:db:e2:82:17:e8:4c:9c:cd:56:55:a5:a6:
         23:2f:7d:1f:a2:c0:7f:9f:fc:13:64:82:b2:c5:a9:58:95:e6:
         a4:a9:62:6d:09:23:e8:6d:89:7c:95:e3:bc:f9:4e:96:7a:a9:
         9d:b5:d6:36:90:86:b5:99:e5:d1:26:b8:bd:34:2f:d3:6d:d6:
         d4:91:c2:b2:fd:36:f8:18:93:58:d6:25:e2:1c:79:16:23:bd:
         83:16:25:3b:10:58:29:32:9c:31:84:6a:74:a2:af:f2:32:3a:
         1c:ac:d9:76:cc:b8:e4:32:84:79:6c:ef:1c:3c:ef:d0:58:0e:
         81:f8:22:53:8f:f1:91:e7:38:bb:11:f5:ae:60:b9:a9:c0:cc:
         68:99:a1:35:d2:86:a6:c6:18:cd:3b:1d:5c:38:d4:8e:88:26:
         26:fe:05:8d:4b:d8:fa:34:4a:c7:6b:86:58:38:8f:04:f4:9f:
         98:b9:3b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 3 19:58:10 2025 by rpki-client on console.sobornost.net