Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3134332e302e3230342e302f32342d3234203d3e203532393531.roa
File:                     3134332e302e3230342e302f32342d3234203d3e203532393531.roa (raw, json)
Hash identifier:          P93B1DzAgh3B2xpEjHgndwZOan6xkuJgqI//i8HAw1Q=
Subject key identifier:   E8:C7:03:4A:30:DB:0F:B8:01:34:95:53:22:AF:FD:4B:52:C6:2A:FB
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       D2D299313B5C7442DFF3CB51E8A1C3F54E4A0B
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3134332e302e3230342e302f32342d3234203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:44:02 +0000
ROA not before:           Thu 28 Sep 2023 17:39:02 +0000
ROA not after:            Thu 26 Sep 2024 17:44:02 +0000
asID:                     52951
IP address blocks:        143.0.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d2:d2:99:31:3b:5c:74:42:df:f3:cb:51:e8:a1:c3:f5:4e:4a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:39:02 2023 GMT
            Not After : Sep 26 17:44:02 2024 GMT
        Subject: CN=E8C7034A30DB0FB80134955322AFFD4B52C62AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:fa:1d:7c:9a:72:f4:be:ce:66:c1:7c:89:
                    0e:11:71:f5:16:ca:c0:76:2a:dd:a7:73:6b:a5:5c:
                    30:37:3b:a6:a0:87:a5:07:c4:a2:40:24:31:a5:f0:
                    84:1b:a8:9b:09:ed:b4:d0:4b:74:68:6a:2f:50:31:
                    78:12:15:d4:63:be:b4:49:d6:86:51:78:cf:2c:b5:
                    d3:2b:17:e1:3a:4f:fc:79:76:36:99:87:ef:15:3d:
                    71:40:5e:21:59:47:88:a4:c7:b9:36:e1:be:c2:4d:
                    ec:ec:32:fb:9c:74:ae:70:94:eb:64:de:8c:c4:24:
                    9c:53:28:4b:f7:15:26:14:31:8f:ec:9e:16:de:da:
                    09:b4:3a:56:8d:be:10:c2:8d:48:8d:bb:64:3d:71:
                    25:9b:3c:7a:f5:82:96:47:7c:b8:ab:90:af:0d:42:
                    d3:c8:43:4f:3f:c9:7c:ba:98:25:44:d7:7a:ad:63:
                    38:c0:62:0d:4d:3e:33:56:ee:64:a0:6f:b1:13:19:
                    0d:3c:d2:ce:e1:cf:9c:86:58:ea:67:24:60:47:04:
                    20:5b:1f:0f:0e:43:0c:21:20:1b:80:54:3a:fc:1a:
                    61:c0:6a:7d:84:e4:23:76:95:a7:8c:0d:44:7d:f6:
                    bc:a5:76:cb:78:ae:fa:7f:1d:80:3e:a5:8b:5f:61:
                    41:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C7:03:4A:30:DB:0F:B8:01:34:95:53:22:AF:FD:4B:52:C6:2A:FB
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3134332e302e3230342e302f32342d3234203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:f7:fd:bd:bd:f5:82:79:5e:de:96:bc:17:3b:f6:cd:d0:56:
         a5:5f:35:e4:7b:7b:5a:1c:08:ce:6b:12:65:cf:a6:6d:b6:e7:
         5e:bb:c2:ea:55:3f:48:94:0a:28:08:40:f8:9e:fd:32:90:19:
         50:a4:28:17:26:0f:8b:07:01:0e:53:a7:30:b0:8d:d7:7a:c4:
         0e:b3:59:9c:8b:4e:64:cb:39:c0:3e:cc:b1:d9:09:54:d9:0b:
         0c:86:0e:1d:12:0b:ce:86:17:c9:ad:29:b8:55:3b:54:75:a1:
         52:d3:0f:1f:ed:cb:67:35:db:2b:6c:96:cb:7c:12:50:e3:51:
         05:e9:10:d2:15:0e:f6:e2:2f:51:7b:6c:da:c6:7d:f9:e8:d9:
         07:97:c7:05:10:6b:14:3c:f9:36:42:6d:de:aa:25:20:cd:ee:
         7c:fa:88:d9:35:57:d9:19:18:a7:a3:90:29:59:02:ac:5d:cd:
         2e:8e:ac:b9:e3:87:99:db:14:8d:ca:25:09:25:0a:ce:8f:b1:
         17:c7:fe:0c:92:4e:9c:58:d2:86:73:61:11:20:14:47:d7:aa:
         ad:ec:85:7f:a0:ba:aa:10:4e:3e:14:89:ac:1a:fb:b9:82:c8:
         97:5f:ea:80:7e:25:40:75:6d:50:b1:d0:7a:d7:1d:64:d7:a4:
         31:14:38:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:35 2023 by rpki-client on console.sobornost.net