Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a393030303a3a2f33362d3336203d3e20323730363834.roa
File:                     323830343a366663383a393030303a3a2f33362d3336203d3e20323730363834.roa (raw, json)
Hash identifier:          lj3QKIMwmNcApf7EKiOlp76uvZCusLwQhH77wIfxl4I=
Subject key identifier:   1C:3E:59:FC:39:97:34:9E:2D:FE:5D:DF:8E:47:C6:19:CC:8A:BA:EE
Certificate issuer:       /CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Certificate serial:       07A8FA4A58112AB5A7BB89DA7CF26261E77A5718
Authority key identifier: 89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a393030303a3a2f33362d3336203d3e20323730363834.roa
Signing time:             Tue 08 Oct 2024 11:00:28 +0000
ROA not before:           Tue 08 Oct 2024 10:55:28 +0000
ROA not after:            Tue 07 Oct 2025 11:00:28 +0000
asID:                     270684
IP address blocks:        2804:6fc8:9000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 13:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a8:fa:4a:58:11:2a:b5:a7:bb:89:da:7c:f2:62:61:e7:7a:57:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
        Validity
            Not Before: Oct  8 10:55:28 2024 GMT
            Not After : Oct  7 11:00:28 2025 GMT
        Subject: CN=1C3E59FC3997349E2DFE5DDF8E47C619CC8ABAEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:e0:f3:47:6c:6b:86:1f:c5:45:da:4c:29:
                    eb:d3:78:17:77:e6:0c:0b:e5:c0:ae:2c:1a:de:ea:
                    8e:8c:80:2e:a1:d0:3f:42:3a:12:1b:e9:29:dc:f1:
                    9a:61:3d:dc:d1:0f:df:15:f1:45:a6:64:70:cb:d3:
                    42:69:8c:d8:a7:d8:a8:36:ff:da:31:17:62:8d:18:
                    84:cc:fd:85:14:2b:17:a7:25:1c:a7:64:bd:15:b0:
                    8b:1c:75:78:f9:a2:76:56:fb:5a:bb:61:b0:0f:8f:
                    09:f3:4f:ec:d6:30:05:44:a5:30:e8:2a:e6:36:1c:
                    28:57:c3:a8:ce:36:30:a2:c2:88:b1:1f:b7:63:19:
                    38:ce:f1:3d:13:4e:d5:4f:2b:77:8e:b8:83:24:62:
                    80:73:83:1f:a4:26:4b:76:9b:5a:da:80:06:74:95:
                    d8:ae:a1:de:6a:b3:4c:10:05:5d:0f:bb:4b:99:af:
                    76:ce:3b:0b:23:6b:f9:5d:70:d8:43:27:b5:f1:cf:
                    9b:2d:fa:4e:21:a2:01:eb:15:35:f6:94:9a:ed:67:
                    61:a6:d1:33:56:26:d7:67:8d:b5:c5:9d:2b:e7:58:
                    db:32:32:38:f1:85:fd:ae:ba:46:34:57:aa:70:28:
                    11:54:14:79:d5:88:a6:f0:a1:67:55:24:9c:dd:ac:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3E:59:FC:39:97:34:9E:2D:FE:5D:DF:8E:47:C6:19:CC:8A:BA:EE
            X509v3 Authority Key Identifier:
                keyid:89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a393030303a3a2f33362d3336203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         23:69:8a:25:16:c9:a1:d6:90:3a:3e:6d:48:d5:4b:6a:50:49:
         14:48:32:55:cb:93:f6:7c:95:8a:4f:17:c3:24:f2:cb:cd:a3:
         d1:ca:72:18:93:12:da:c1:4e:be:27:e6:8e:fd:49:b6:37:0f:
         8d:b8:8f:c0:c1:a9:de:af:c1:65:57:04:f6:1d:51:0c:5c:9a:
         bb:17:45:ee:0e:84:03:a9:6a:5d:3c:c4:4d:d0:d3:7a:f1:d6:
         b0:bb:83:88:6d:c6:72:99:fc:4b:90:b1:d0:78:00:31:df:5d:
         aa:20:a7:cf:d7:70:4a:2b:0c:14:9b:fe:d5:a8:04:07:a0:ea:
         8a:9a:fa:61:82:7f:c2:4c:35:ad:58:68:84:25:fc:7b:5b:b3:
         a8:3a:38:11:42:f1:d3:2f:e3:5d:0c:56:84:a4:35:25:3d:3b:
         8f:30:e3:f5:2a:95:2b:ae:64:af:0d:41:07:e4:07:86:3c:d7:
         9e:a2:8e:4f:75:82:91:c2:b5:96:8d:68:b5:0e:26:4a:8b:3f:
         9a:44:46:d8:18:88:ff:31:01:3b:5a:b5:0d:5c:43:ca:a1:5d:
         10:33:8c:0d:1a:7b:0c:fe:5a:3a:88:c4:82:0a:e7:7f:1d:16:
         29:f8:b0:6b:ab:b8:13:74:73:77:9f:ce:eb:0c:ba:90:15:6b:
         95:c0:e4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 15:29:17 2024 by rpki-client on console.sobornost.net