Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3133312e3235352e3134372e302f32342d3234203d3e20323634343835.roa
File:                     3133312e3235352e3134372e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          jO/EXn9BIkygVLNVOsfKEcbO5MuhOl02lWdvh4wafEk=
Subject key identifier:   8A:01:AD:85:0A:99:96:2B:47:9F:04:48:D9:24:67:FB:41:5E:05:9D
Certificate issuer:       /CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
Certificate serial:       012F23E5DF95AB4B7B9055C22582FE481B1DA564
Authority key identifier: 6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3133312e3235352e3134372e302f32342d3234203d3e20323634343835.roa
Signing time:             Fri 28 Apr 2023 13:30:31 +0000
ROA not before:           Fri 28 Apr 2023 13:25:31 +0000
ROA not after:            Fri 26 Apr 2024 13:30:31 +0000
asID:                     264485
IP address blocks:        131.255.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2f:23:e5:df:95:ab:4b:7b:90:55:c2:25:82:fe:48:1b:1d:a5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
        Validity
            Not Before: Apr 28 13:25:31 2023 GMT
            Not After : Apr 26 13:30:31 2024 GMT
        Subject: CN=8A01AD850A99962B479F0448D92467FB415E059D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:d9:df:06:e1:d0:9d:3b:13:60:bf:c0:2e:
                    51:07:75:86:2a:3f:28:d2:4a:15:b2:bd:50:2f:05:
                    68:23:f8:e0:26:b7:75:78:3d:c9:61:1b:3c:bb:e0:
                    9a:8d:0a:12:d8:5b:f3:bb:c2:17:5e:e1:10:e5:b0:
                    c2:25:c8:ce:d4:95:34:2a:82:a9:4b:c2:cf:e1:e2:
                    12:b8:3c:6f:ef:94:ae:b8:69:e1:4b:fc:1e:ef:71:
                    a7:3e:9e:82:79:7c:52:e4:66:3e:d0:27:58:f0:31:
                    24:d2:a0:b7:cd:2f:8c:19:d2:cb:91:08:69:86:d3:
                    a6:4d:b0:15:0e:a4:ca:06:c8:ef:a3:27:71:1e:ff:
                    8e:2a:f6:39:a6:cf:a0:45:1f:d2:14:5c:29:bf:38:
                    e0:5c:f4:b2:58:c5:aa:49:13:2b:31:fe:b0:9b:c7:
                    21:6d:de:2f:92:be:79:ce:0c:91:c7:dd:ef:74:52:
                    ec:b2:ec:ae:49:a9:76:cc:04:a8:22:75:04:d1:93:
                    ee:89:3c:04:bb:d6:a7:09:b3:ec:99:20:1f:37:b3:
                    63:b0:3e:4b:27:62:e8:e7:32:58:4a:43:d3:e4:e3:
                    07:43:20:17:ca:6f:9b:42:43:6f:74:38:92:29:3c:
                    12:9f:70:64:a0:27:95:85:54:bc:46:bb:b9:f7:c5:
                    84:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:01:AD:85:0A:99:96:2B:47:9F:04:48:D9:24:67:FB:41:5E:05:9D
            X509v3 Authority Key Identifier:
                keyid:6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3133312e3235352e3134372e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f2:d8:88:36:ab:6e:e8:18:2f:9a:9f:ff:d6:c1:cf:8f:86:
         c3:0f:65:6f:a7:43:41:4d:79:79:23:b7:78:e9:ac:a4:02:c7:
         54:f3:92:0e:d1:99:7c:2e:aa:99:e3:62:94:45:60:91:9a:f9:
         70:2a:38:e3:70:22:a0:a6:4b:54:03:13:21:d7:1d:8f:8f:87:
         f3:d0:db:bd:3e:94:35:79:30:58:a7:f2:9e:79:ae:98:f8:b8:
         c3:69:3a:6b:65:10:83:cd:26:06:be:9d:f7:c5:1f:13:51:ab:
         45:d6:fe:93:90:e6:03:79:ff:92:3f:cd:b5:a8:f7:d9:9a:97:
         9c:cc:bc:27:6b:3d:39:27:22:3c:88:62:f5:a7:d3:3b:5b:ad:
         22:ef:2a:40:e5:d3:8f:68:66:2b:87:b8:ca:b5:3c:32:3c:24:
         d8:78:f5:38:8d:b1:97:de:bc:d4:0e:b2:2f:ef:df:33:00:37:
         3a:75:73:ea:ea:c2:60:94:f9:79:f1:b2:a4:10:4a:20:a4:9b:
         b7:40:f9:5a:ca:9e:5b:9c:04:5d:42:06:04:9e:34:ba:94:83:
         b2:69:85:62:b0:b2:54:1c:b6:ff:ff:48:42:e1:c3:06:30:d6:
         c5:74:04:7b:58:bb:58:ec:b7:88:a8:47:f7:0f:56:cc:10:2b:
         fe:ca:05:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net