Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e36382e302f32342d3234203d3e20323635323037.roa
File:                     3137392e302e36382e302f32342d3234203d3e20323635323037.roa (raw, json)
Hash identifier:          zxgN+999rbSWWzY26kStn4NsK3+O70+Y03v2WKZ1rbE=
Subject key identifier:   0C:2D:B0:CF:50:88:81:BB:12:3C:2B:3F:9C:87:B1:CA:FF:CB:7A:86
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       45C7FE43B9F9CFD02C406996B12C5EDD8DE05F86
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e36382e302f32342d3234203d3e20323635323037.roa
Signing time:             Thu 06 Mar 2025 07:25:21 +0000
ROA not before:           Thu 06 Mar 2025 07:20:21 +0000
ROA not after:            Thu 05 Mar 2026 07:25:21 +0000
asID:                     265207
IP address blocks:        179.0.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 26 Apr 2025 12:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c7:fe:43:b9:f9:cf:d0:2c:40:69:96:b1:2c:5e:dd:8d:e0:5f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Mar  6 07:20:21 2025 GMT
            Not After : Mar  5 07:25:21 2026 GMT
        Subject: CN=0C2DB0CF508881BB123C2B3F9C87B1CAFFCB7A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:47:d7:da:92:cd:b1:92:fa:9c:1e:23:1e:
                    68:43:9a:a5:6a:58:2d:d6:65:69:05:d0:bb:d0:45:
                    67:23:c2:32:3c:5c:ff:d2:95:1a:5c:b5:8b:e3:be:
                    4e:7a:f5:e8:53:04:ee:d4:2b:99:2e:26:a8:d6:fe:
                    9d:5e:8b:3b:a0:94:35:87:15:97:83:58:9f:1e:fb:
                    c5:17:05:d7:e3:bf:ac:be:99:6e:c2:24:41:6e:30:
                    77:02:45:87:1a:a3:1c:60:8f:f8:71:14:43:1a:53:
                    46:98:2b:3b:17:7c:e9:17:e6:7e:5c:b8:27:b0:ef:
                    a9:d8:e3:46:25:77:5b:84:32:3e:02:68:84:a9:ca:
                    ba:9d:2f:ae:ef:b0:04:70:9d:d2:ed:78:21:89:37:
                    29:c7:f7:e4:18:c7:0e:92:df:99:f2:5c:89:ff:6e:
                    e3:74:33:de:e5:e4:9a:14:82:9d:be:65:43:ed:ac:
                    57:40:69:c7:15:e0:ce:7b:29:eb:69:e4:da:b6:1c:
                    55:d9:a2:12:8c:97:00:eb:45:ef:e7:62:c9:1b:09:
                    7a:5c:82:96:c2:e7:ef:2f:c8:24:5a:23:49:0f:aa:
                    d1:c7:63:f7:ea:37:60:cd:ed:50:0b:1b:bf:17:47:
                    ad:5a:ea:2c:de:ca:9d:2c:78:05:1c:98:62:63:77:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2D:B0:CF:50:88:81:BB:12:3C:2B:3F:9C:87:B1:CA:FF:CB:7A:86
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e36382e302f32342d3234203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:ab:a7:17:37:21:f3:18:31:52:11:94:31:ec:cb:95:64:04:
         6f:79:7b:8c:dd:5d:da:47:7e:b1:e9:8e:93:be:1b:5d:f2:c5:
         02:33:86:b8:0e:7e:44:a9:c0:70:dc:09:cb:0f:d3:4a:6a:52:
         d7:c0:d3:e5:74:ef:f9:d3:e7:1d:88:7a:91:f4:61:05:b6:00:
         0e:58:80:97:ec:e5:3e:49:b6:bc:71:54:4f:54:5c:bd:91:a3:
         fa:2e:88:15:a4:3b:97:9b:fc:ff:bc:f2:b6:9b:9e:5b:4e:53:
         8a:a3:d9:f2:d5:31:f7:32:bc:db:9a:95:91:e5:4e:ba:76:f2:
         f4:08:93:98:0c:b5:0c:fc:66:d7:f7:8e:24:38:fa:26:cc:bf:
         b0:cc:9f:78:96:1b:86:22:b7:d5:5b:aa:bc:dd:1e:59:f9:b9:
         4f:42:a3:5d:f2:f8:e2:66:0f:5e:13:11:9d:5d:ee:9b:6d:a4:
         41:82:16:44:4a:ff:e0:7b:b7:71:3f:d1:87:d4:b5:c0:8b:89:
         32:2a:e0:4d:8e:5e:cc:ec:4c:19:96:7f:97:d1:f7:d3:b4:2d:
         90:f5:da:29:bd:0f:ab:fc:68:30:10:53:0c:4d:cd:bd:94:51:
         59:d4:50:db:6e:f2:b1:31:01:0a:b2:fc:40:67:89:60:77:98:
         aa:e1:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:56:59 2025 by rpki-client on console.sobornost.net