Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234392e302f32342d3234203d3e20323632343738.roa
File:                     3137372e34372e3234392e302f32342d3234203d3e20323632343738.roa (raw, json)
Hash identifier:          6zh5uFt2QAoKP1y83ZWBYlPY6tLv/CU7Hl+U8SfBJ1Y=
Subject key identifier:   22:78:60:60:A7:C4:3D:92:80:10:02:33:22:2D:75:32:78:BE:50:B7
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       2631EB55F0E2DCDD117949F6DD2CD1D88FDDD502
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234392e302f32342d3234203d3e20323632343738.roa
Signing time:             Fri 25 Apr 2025 13:00:07 +0000
ROA not before:           Fri 25 Apr 2025 12:55:07 +0000
ROA not after:            Fri 24 Apr 2026 13:00:07 +0000
asID:                     262478
IP address blocks:        177.47.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 25 Apr 2025 17:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:31:eb:55:f0:e2:dc:dd:11:79:49:f6:dd:2c:d1:d8:8f:dd:d5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Apr 25 12:55:07 2025 GMT
            Not After : Apr 24 13:00:07 2026 GMT
        Subject: CN=22786060A7C43D9280100233222D753278BE50B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:46:2a:f1:1a:a2:2d:f8:65:f9:fd:ed:1d:
                    9b:2a:3f:e8:22:96:9c:f1:c3:d2:8b:1c:22:a2:79:
                    a6:21:09:ab:a0:5f:68:47:de:1d:a3:ab:e6:45:2e:
                    08:0f:c4:19:0d:5d:8a:1f:53:93:5f:68:00:c6:7f:
                    28:04:e8:42:ab:9c:93:c7:69:9b:98:32:9e:4e:90:
                    cc:15:9c:39:38:48:52:74:68:45:6f:b9:68:fc:ea:
                    b8:41:93:c4:5b:2f:d2:db:81:fb:1e:5d:ce:23:60:
                    02:f1:e7:a1:18:f7:c6:a4:3e:27:ad:55:1e:f4:55:
                    89:1e:33:fd:8b:dc:85:c9:24:ab:be:6d:84:96:4b:
                    9b:ec:00:7d:3c:5e:ba:1d:a8:bb:10:f4:20:0d:2e:
                    b1:e3:17:f4:06:d5:64:94:70:8a:b3:74:bb:2a:09:
                    54:24:ea:83:43:01:92:c0:78:25:6d:88:c1:cd:97:
                    b9:5f:29:97:ff:32:8b:25:c9:b6:36:84:02:fe:16:
                    b0:90:b7:0f:1b:9b:b9:9c:4e:db:a1:ee:3f:f2:3f:
                    c3:50:bb:67:1e:2a:94:9e:31:d4:bb:ee:8b:12:a3:
                    55:1c:31:b7:39:74:66:47:e8:30:3a:d6:6b:5d:4e:
                    50:4e:44:dc:9f:1c:e0:a5:ef:ac:cb:01:e7:42:da:
                    b3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:78:60:60:A7:C4:3D:92:80:10:02:33:22:2D:75:32:78:BE:50:B7
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234392e302f32342d3234203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:32:a3:d2:eb:d5:2c:d0:b5:d4:51:0a:1c:fa:2e:80:5d:1a:
         13:03:44:22:3c:18:15:94:c9:31:b5:c7:75:39:66:83:d9:d9:
         1f:66:12:71:d0:2e:69:5d:45:4b:44:46:2d:a0:9b:95:76:3b:
         6f:d4:6c:b6:ac:2d:15:ea:d4:59:a7:b4:9d:e8:68:ec:b4:81:
         f1:0e:d3:65:69:ea:00:e7:b9:58:c3:cc:56:8c:c4:80:95:0e:
         17:22:1f:78:b0:3e:b7:de:76:fc:81:69:8b:47:66:c3:47:b8:
         b3:39:58:56:e3:35:0b:4a:e3:cb:b2:0d:4d:72:66:f5:fa:61:
         1d:9e:0f:12:3e:dc:c6:9b:4c:b7:cb:bf:fb:92:25:17:9a:84:
         ac:38:e2:4e:ba:df:fd:eb:5b:56:31:09:81:be:d1:1c:ea:c2:
         f1:59:ff:5c:1d:ee:ed:86:ec:1b:02:e0:96:5e:84:c6:ac:27:
         bd:65:66:b3:f0:9d:b1:21:a4:19:b4:78:b9:f5:3f:4d:34:79:
         ff:92:0e:3d:bd:b2:66:b2:6e:c8:1a:27:6e:7e:38:54:5b:9b:
         bb:aa:96:7c:3d:70:77:83:ac:1c:2a:87:a2:3c:85:f8:9d:1b:
         bc:a8:61:07:a4:b0:96:f7:a7:a2:0e:89:b5:e4:d9:e6:6e:85:
         a9:df:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:35:13 2025 by rpki-client on console.sobornost.net