Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3134332e302e3230342e302f32332d3233203d3e203532393531.roa
File:                     3134332e302e3230342e302f32332d3233203d3e203532393531.roa (raw, json)
Hash identifier:          +CI0I1F1XBQ14tUMjazSkqCfKs9OXFmXFo9qv7cKzCk=
Subject key identifier:   DE:85:99:C6:95:5A:17:44:B3:5E:86:FF:D3:93:68:E5:D8:7C:BD:EE
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       0BD07E65B4A8A82442AA10ECFEACA03A4793E38B
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3134332e302e3230342e302f32332d3233203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:43:59 +0000
ROA not before:           Thu 28 Sep 2023 17:38:59 +0000
ROA not after:            Thu 26 Sep 2024 17:43:59 +0000
asID:                     52951
IP address blocks:        143.0.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d0:7e:65:b4:a8:a8:24:42:aa:10:ec:fe:ac:a0:3a:47:93:e3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:38:59 2023 GMT
            Not After : Sep 26 17:43:59 2024 GMT
        Subject: CN=DE8599C6955A1744B35E86FFD39368E5D87CBDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:bb:e7:a4:b8:b3:38:c7:c2:51:cd:29:67:
                    80:6c:90:b5:ef:03:d6:18:f7:62:d5:3e:f0:90:57:
                    e0:62:0b:12:a1:2d:c7:c1:45:df:de:e0:a8:5a:14:
                    de:72:7b:fa:22:fd:61:43:16:74:6f:eb:ac:5f:37:
                    6f:bc:fa:53:55:9c:0a:d7:2a:f2:c3:77:57:31:02:
                    42:b1:34:e5:67:5a:35:d7:e2:43:cc:43:b6:b0:f7:
                    93:e4:f4:67:e4:9e:c8:72:79:0f:f5:fa:2c:74:d1:
                    fa:07:55:9e:95:9f:57:bb:89:30:24:02:5e:20:9b:
                    3d:c6:65:9b:1f:d6:47:29:3d:50:4e:8d:29:ac:b2:
                    f5:1a:ac:ac:d2:01:77:0c:0b:f6:c2:d6:84:1b:4b:
                    9b:fe:2a:e4:c2:3b:44:b9:97:48:af:f7:73:70:2b:
                    9a:71:c3:d8:ea:50:a0:60:7c:e1:b6:8f:57:69:73:
                    84:99:04:04:00:f2:30:8d:3c:dc:9c:b0:81:d1:98:
                    c3:36:76:a6:1f:4f:a7:aa:17:3d:ce:b1:a7:7d:e5:
                    5b:48:10:dc:c1:eb:fa:9d:d2:e0:8b:1e:aa:2c:d4:
                    db:31:b4:8f:44:d7:a4:ad:df:c9:8c:4f:e5:c9:67:
                    40:39:2c:48:40:04:66:69:f3:e6:21:fe:1b:fc:43:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:85:99:C6:95:5A:17:44:B3:5E:86:FF:D3:93:68:E5:D8:7C:BD:EE
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3134332e302e3230342e302f32332d3233203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:f9:34:fa:09:b2:8c:c6:27:bc:04:0b:d0:73:ce:dd:8a:0f:
         af:fb:17:92:1c:8c:30:98:0c:68:bb:f5:59:fb:33:7a:eb:4c:
         fd:a7:56:8d:2d:f5:ea:43:1e:0d:f0:73:a2:fa:d3:df:b8:3c:
         67:2f:26:1d:ee:13:7c:ca:4c:f1:d6:fc:58:5c:b3:e9:72:56:
         e4:c8:1d:61:44:80:b5:c0:32:92:a4:df:79:31:b0:fe:e6:96:
         6c:da:de:6c:df:87:35:a4:72:22:4e:b3:38:c5:04:c4:d4:91:
         1b:d3:63:39:19:f0:af:34:9e:eb:d7:6a:6b:a7:4c:16:02:c6:
         42:10:57:f5:ac:fe:0f:af:04:99:c0:1c:78:d2:8e:de:8b:f3:
         97:b4:c8:f3:a7:5d:6b:cf:52:3d:d8:ad:95:95:3e:f8:42:64:
         e6:9d:77:d3:59:6c:d9:3c:15:01:6e:6d:c2:7c:04:09:f6:8c:
         d7:85:3a:3a:2c:25:c2:c1:f1:4c:38:69:2d:99:28:d5:54:d8:
         30:b9:25:c3:7c:32:54:e9:28:9f:14:ce:83:97:52:3e:cb:34:
         ba:23:1a:16:7e:26:f0:ba:23:1e:4c:4f:a7:74:12:84:c3:15:
         ce:7c:4d:97:40:2f:04:9f:6b:04:61:d7:84:8b:a7:7a:4f:47:
         d5:5f:33:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:35 2023 by rpki-client on console.sobornost.net