Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136362e302f32342d3234203d3e203532393531.roa
File:                     3137302e37392e3136362e302f32342d3234203d3e203532393531.roa (raw, json)
Hash identifier:          W11QSBzXmW/5jPmqxuua6zmgmeQGEwLs0xEIH8yzUdg=
Subject key identifier:   B2:93:B8:AC:2E:79:F8:EF:82:8D:7C:60:FC:5D:66:CF:33:C0:9D:30
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       60428B089277ECEAEA9497EBB4AF4B4AF40A23FD
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136362e302f32342d3234203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:44:01 +0000
ROA not before:           Thu 28 Sep 2023 17:39:01 +0000
ROA not after:            Thu 26 Sep 2024 17:44:01 +0000
asID:                     52951
IP address blocks:        170.79.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:42:8b:08:92:77:ec:ea:ea:94:97:eb:b4:af:4b:4a:f4:0a:23:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:39:01 2023 GMT
            Not After : Sep 26 17:44:01 2024 GMT
        Subject: CN=B293B8AC2E79F8EF828D7C60FC5D66CF33C09D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:48:4e:59:0d:38:17:da:31:2a:9d:68:35:3d:
                    5c:3f:cd:78:c7:ec:1d:7c:95:ee:9b:86:9e:da:63:
                    64:04:a0:f0:90:0e:14:65:5e:3c:a4:99:a3:3a:0f:
                    14:ae:b6:3d:19:bb:00:01:76:67:aa:fe:fe:bb:97:
                    bd:1c:4c:2a:77:32:3e:57:bf:8d:a9:c8:49:d6:54:
                    7e:c9:97:3d:54:22:06:56:0c:6b:89:ba:a9:c3:62:
                    ee:86:4b:ad:84:f3:15:2b:d0:62:49:dc:09:8b:05:
                    40:27:c7:c5:b9:f1:5a:0c:07:23:7e:e0:9f:c1:48:
                    42:d4:7d:5d:36:09:c2:41:92:90:bd:59:5d:d0:90:
                    68:46:28:e3:ae:30:96:7d:f7:eb:3f:3f:d6:3b:38:
                    3f:c7:9a:2b:28:7f:39:73:b0:33:f4:e8:f0:49:67:
                    94:03:a2:54:7f:2e:56:59:ea:cd:e8:d7:8e:e8:c2:
                    02:58:4c:84:b0:28:54:1e:eb:b5:ac:66:45:f6:f9:
                    a1:ea:51:ca:9b:41:57:a6:02:e6:4a:56:f6:07:34:
                    e8:b5:c3:52:3e:e2:14:0e:4c:08:15:60:39:09:3e:
                    af:a0:84:62:f3:db:ed:29:81:32:39:c2:9b:1a:e9:
                    cd:2f:a1:59:72:76:52:bb:41:ab:d2:d4:52:96:5d:
                    3d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:93:B8:AC:2E:79:F8:EF:82:8D:7C:60:FC:5D:66:CF:33:C0:9D:30
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136362e302f32342d3234203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:01:0d:d8:85:03:dc:bc:78:70:c0:a6:3c:d2:61:84:eb:59:
         22:32:17:d1:6b:d6:ce:3b:6c:92:12:0c:bb:c7:49:70:95:44:
         63:5a:f4:61:8d:64:02:61:6d:d9:ce:fa:f8:de:8d:6c:41:7f:
         35:05:1b:c0:ec:e2:6f:73:60:cf:b5:e2:42:ec:ee:3f:33:2e:
         56:6c:7c:2e:4a:18:ef:36:c3:26:a9:0c:4f:35:65:a4:63:ba:
         5f:ee:49:47:7a:a4:00:1b:f5:71:68:01:a6:4e:b9:b3:3b:46:
         d4:32:f0:d8:48:04:27:7b:6e:76:60:52:aa:e8:41:57:0b:e7:
         d1:22:5e:39:16:5f:c1:c2:fd:c8:b5:7b:d9:8f:8f:92:03:37:
         03:d2:a0:0a:b1:94:ed:10:41:ac:5a:a2:03:cd:e0:e5:24:a0:
         31:6d:34:c8:d7:50:c8:90:b5:a8:dd:5a:95:63:4e:5e:3e:2c:
         fa:f4:90:f6:f3:6a:f8:42:24:4e:0d:63:75:de:8a:08:18:40:
         cb:5b:ba:31:dc:66:01:82:ce:46:a1:b1:cf:68:61:51:af:69:
         c1:08:2a:f1:56:fe:a3:33:54:96:ae:de:d1:c4:8b:ad:ec:c7:
         10:1e:d9:e5:dc:45:5f:38:8a:62:c3:d9:2a:ac:fd:95:4b:99:
         4b:c0:7a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:35 2023 by rpki-client on console.sobornost.net