Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32342d3234203d3e20323632343738.roa
File:                     3137372e34372e3234382e302f32342d3234203d3e20323632343738.roa (raw, json)
Hash identifier:          7E7Mq83riqXU2+aFpKesNtQFZAFfbTXCXtGeVVOsBEY=
Subject key identifier:   22:74:AD:80:AB:6C:DE:2C:E8:98:9B:F1:4C:4A:1E:B7:EA:E2:DE:BA
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       0266E380B298CF8F044D98F40A21A2AE308C8A7F
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32342d3234203d3e20323632343738.roa
Signing time:             Fri 25 Apr 2025 13:00:07 +0000
ROA not before:           Fri 25 Apr 2025 12:55:07 +0000
ROA not after:            Fri 24 Apr 2026 13:00:07 +0000
asID:                     262478
IP address blocks:        177.47.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 25 Apr 2025 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:66:e3:80:b2:98:cf:8f:04:4d:98:f4:0a:21:a2:ae:30:8c:8a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Apr 25 12:55:07 2025 GMT
            Not After : Apr 24 13:00:07 2026 GMT
        Subject: CN=2274AD80AB6CDE2CE8989BF14C4A1EB7EAE2DEBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:69:c0:3a:b4:34:97:fd:d9:eb:f5:90:a9:73:
                    20:46:2a:2b:e3:b0:60:2a:31:27:c2:ff:2c:b3:c5:
                    c5:ec:83:de:61:3b:1e:01:56:7a:69:49:5d:f8:58:
                    30:d4:c5:ed:f7:2e:a7:74:2a:f4:6d:31:0d:e8:02:
                    7e:04:ad:09:6e:ba:06:ea:10:19:a4:99:59:3b:13:
                    22:86:09:ed:b4:05:c2:39:90:9d:3c:a2:0a:80:60:
                    b0:98:1e:f9:7c:21:2a:42:23:c7:4b:4e:81:de:92:
                    b0:90:f2:dd:f8:55:7f:ff:27:a6:3f:3a:2a:9c:6c:
                    02:f2:ea:7e:7e:f4:98:62:2d:aa:6c:4f:31:ef:b8:
                    aa:20:e6:98:1d:f0:08:a9:00:17:2b:83:03:28:56:
                    43:1d:4b:f3:76:a3:85:ad:c3:48:6b:8c:71:d9:87:
                    67:97:c2:07:fa:c4:a0:5f:38:c3:3f:4c:1f:f3:3d:
                    9d:ba:60:d5:6c:fa:2a:d0:a8:ed:7b:20:a1:76:25:
                    a7:a9:f7:4e:43:b1:d6:6d:c1:2e:2a:cd:93:07:1d:
                    38:96:93:4a:7f:7a:b3:43:36:3e:f2:2e:59:35:55:
                    57:60:68:7c:c9:d1:a2:54:d4:d9:f0:1c:1f:95:9e:
                    db:96:f0:b7:ba:19:a2:37:c2:70:b9:78:da:9a:71:
                    2c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:74:AD:80:AB:6C:DE:2C:E8:98:9B:F1:4C:4A:1E:B7:EA:E2:DE:BA
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32342d3234203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:81:d6:8d:df:bf:88:6c:e1:25:44:19:7e:76:f6:b9:2f:
         da:bf:cc:02:6a:e9:5d:14:b5:9f:3a:cb:e7:60:3f:bd:82:ef:
         f4:e8:15:22:25:03:54:68:37:c0:ce:48:c9:ef:39:cf:bf:17:
         a5:b9:78:07:78:09:7c:87:21:b3:10:fc:8a:b4:9a:41:a0:97:
         fe:2c:1c:85:d8:25:7c:de:de:3c:39:30:6c:67:66:de:d2:92:
         83:af:68:6e:16:8b:95:1d:d4:25:2a:30:e5:73:91:d5:c4:f0:
         e9:73:58:fb:d3:b6:f7:3a:31:5f:10:d6:23:79:be:f5:e9:47:
         12:af:e7:9c:43:b4:79:db:4a:3d:80:fe:bb:2a:fb:29:7d:e5:
         17:3a:01:b8:e3:1e:14:d3:3e:ca:d6:d7:6f:69:b8:5e:89:d5:
         e9:08:19:d0:cf:5c:60:ce:6b:0a:f5:c2:39:56:a1:51:eb:77:
         09:0d:52:49:91:7b:cf:72:21:6c:f8:bb:85:d4:43:7f:c7:2b:
         d9:57:8a:6d:c7:c3:96:37:db:e4:91:60:b4:89:f9:38:bb:7c:
         13:3f:4f:ac:a9:0b:eb:51:46:54:95:1e:67:ce:2c:28:67:6b:
         5c:8e:34:7e:f4:b8:50:39:4a:c1:a3:b0:ef:0b:1f:f3:a4:24:
         87:2c:f7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:35:13 2025 by rpki-client on console.sobornost.net