Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e36382e302f32332d3233203d3e20323635323037.roa
File:                     3137392e302e36382e302f32332d3233203d3e20323635323037.roa (raw, json)
Hash identifier:          Etr/wYcPZR52ctCAV7ilVicxTQHVsHmMVJLmdLUely8=
Subject key identifier:   1C:6C:44:ED:F8:45:F3:33:F0:B5:CD:B1:BB:3F:7E:20:3C:FF:AB:BA
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       3187505A2048473E1CD57AD8CAF6E61B5159D6B2
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e36382e302f32332d3233203d3e20323635323037.roa
Signing time:             Tue 25 Mar 2025 13:25:32 +0000
ROA not before:           Tue 25 Mar 2025 13:20:32 +0000
ROA not after:            Tue 24 Mar 2026 13:25:32 +0000
asID:                     265207
IP address blocks:        179.0.68.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 26 Apr 2025 12:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:87:50:5a:20:48:47:3e:1c:d5:7a:d8:ca:f6:e6:1b:51:59:d6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Mar 25 13:20:32 2025 GMT
            Not After : Mar 24 13:25:32 2026 GMT
        Subject: CN=1C6C44EDF845F333F0B5CDB1BB3F7E203CFFABBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:0e:cf:ee:8f:2e:3e:e2:c1:2a:5b:a0:c1:
                    e5:59:d0:74:30:ce:cc:a9:67:f6:65:c7:e1:d7:3d:
                    d6:dc:3c:97:f1:67:88:92:71:80:8d:c3:c3:2e:77:
                    c0:3c:5c:99:9f:e0:ac:d8:75:c5:2b:38:cb:74:2f:
                    97:5b:8a:bd:b5:94:b9:26:85:39:cc:b0:91:17:04:
                    ab:f2:04:ce:34:cb:d0:be:a6:cd:e3:80:9a:90:f9:
                    37:c9:a6:50:a5:db:9a:b4:57:d8:63:86:55:74:3d:
                    c3:47:80:73:67:b8:15:c1:c3:60:b9:92:9b:46:e6:
                    c6:70:6a:48:e2:f8:4a:cd:ab:75:83:8b:d6:a8:74:
                    e2:2c:c9:10:e2:58:13:87:d1:ab:1a:46:42:2d:eb:
                    62:d9:a8:17:49:1e:a9:9b:8f:85:59:f9:1f:c3:2e:
                    81:2c:2f:8b:f0:9a:b4:96:0e:17:4a:65:83:93:4c:
                    b4:21:fa:de:96:8e:02:9e:8a:ce:27:5f:50:36:e5:
                    12:71:76:26:29:d0:1a:f6:1c:be:74:c0:a5:5f:09:
                    7b:d4:fc:ae:1a:2f:75:9b:29:8b:68:7b:7b:dc:c9:
                    2b:a4:b2:81:15:67:53:74:01:86:df:e2:68:3f:a7:
                    f9:cc:73:24:dd:72:ec:0c:4d:8b:9c:bc:2a:ab:f1:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6C:44:ED:F8:45:F3:33:F0:B5:CD:B1:BB:3F:7E:20:3C:FF:AB:BA
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e36382e302f32332d3233203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:18:7f:03:f9:af:79:7d:62:5a:2e:6a:19:61:39:cf:8b:6a:
         d8:9e:28:d5:1b:b0:7b:65:99:77:ab:fd:e4:dd:c1:84:8d:07:
         8a:4e:ba:f4:c3:0f:5b:d8:e9:0b:a0:b0:40:d4:cd:6a:7c:da:
         23:ee:36:87:70:e6:62:75:48:3a:ed:c6:c1:57:fc:5a:0a:3c:
         3d:0a:8b:fa:1a:e7:e9:36:ed:34:f5:ee:4a:39:a5:c8:ec:ac:
         5a:d0:aa:44:31:40:6f:95:c7:27:ef:80:1a:33:08:05:62:5f:
         1b:3f:f5:e4:12:6c:47:e9:63:d5:46:a6:38:6c:da:fe:05:09:
         84:8e:6c:79:19:01:89:dd:b0:25:c4:89:c2:5a:a1:6c:9d:63:
         df:00:35:69:e1:71:7b:a1:40:36:ac:44:0e:8d:80:48:61:e3:
         64:31:6b:3b:ce:0a:48:b1:a2:63:f8:de:51:49:88:9b:b3:18:
         3d:62:eb:2c:56:7b:6c:18:8f:dd:03:96:de:69:20:77:ff:a6:
         3d:80:57:74:3f:83:1b:ae:58:5a:9d:2f:e9:4d:12:c1:4f:d9:
         60:de:f0:f0:06:f4:f1:03:07:b1:d7:df:47:4e:ff:c3:8d:62:
         8e:ce:c4:35:26:b4:9a:dc:56:bc:95:2f:c6:f0:e3:4f:12:d8:
         78:e2:64:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:56:59 2025 by rpki-client on console.sobornost.net