Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136372e302f32342d3234203d3e203532393531.roa
File:                     3137302e37392e3136372e302f32342d3234203d3e203532393531.roa (raw, json)
Hash identifier:          x5XMmGiI01CL1YHD6UZFXtSBYQDsBIC9Y7azLyh43VE=
Subject key identifier:   49:7F:0A:8E:71:E8:10:3B:1F:31:F8:16:12:7A:A0:77:DA:A8:4F:F6
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       6B1BF813D695E11C7B1EBFD2F1A9A2C7C2FE1EA3
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136372e302f32342d3234203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:43:59 +0000
ROA not before:           Thu 28 Sep 2023 17:38:59 +0000
ROA not after:            Thu 26 Sep 2024 17:43:59 +0000
asID:                     52951
IP address blocks:        170.79.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1b:f8:13:d6:95:e1:1c:7b:1e:bf:d2:f1:a9:a2:c7:c2:fe:1e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:38:59 2023 GMT
            Not After : Sep 26 17:43:59 2024 GMT
        Subject: CN=497F0A8E71E8103B1F31F816127AA077DAA84FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:59:aa:72:96:7f:56:1f:c5:53:de:87:84:
                    7d:09:f2:47:f6:4d:a5:8f:2f:8b:6c:18:58:e9:6b:
                    d3:70:f4:f0:16:45:2a:5f:d7:2c:84:c8:9d:69:e6:
                    f4:b0:71:dc:f4:c8:ad:47:84:aa:1f:63:4d:44:48:
                    f8:6c:d2:d4:e5:61:95:be:55:2b:76:98:5b:51:c5:
                    08:94:ad:fd:fa:c0:91:1b:7d:7a:34:36:42:0c:13:
                    36:a1:fa:d9:47:c9:86:07:b8:68:a8:c8:f4:23:0e:
                    07:6f:73:38:16:36:47:94:85:d0:90:61:ee:08:48:
                    ee:bc:12:4a:7e:37:9e:07:4b:ff:0c:85:81:6b:5e:
                    e3:5b:99:64:53:f7:58:b9:df:24:d1:4e:23:9c:bb:
                    ae:d9:f5:9f:df:22:36:a4:c4:2d:68:d3:fb:9a:09:
                    7b:5a:cb:73:99:32:11:e5:10:6e:c7:46:13:9c:e7:
                    63:42:82:96:df:ff:82:05:78:61:44:4f:71:0d:c5:
                    ca:de:72:ad:15:4c:71:9e:ad:fd:13:88:dd:3c:9c:
                    5d:0a:fd:29:84:05:b7:bb:62:04:c2:88:3a:9d:c4:
                    c8:55:17:2d:31:83:4d:59:c2:96:2b:84:d2:40:7a:
                    fd:52:f5:27:0c:fb:a9:79:cf:8b:bf:bf:b5:e5:da:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7F:0A:8E:71:E8:10:3B:1F:31:F8:16:12:7A:A0:77:DA:A8:4F:F6
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136372e302f32342d3234203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:69:69:fe:6d:a8:a0:48:4c:97:a0:21:2d:a2:7e:1a:f9:b8:
         cf:d0:dc:35:88:2f:1a:88:6e:79:08:a1:d6:57:3d:cd:12:6c:
         15:f4:cc:57:48:37:ca:02:e7:10:bc:dd:09:0b:6f:5f:ff:ff:
         e6:e6:d7:30:44:3e:ad:68:f6:29:6e:d3:80:ad:41:c5:22:89:
         6d:fe:70:c3:0e:d2:f9:03:51:9c:48:96:ec:48:38:8e:b0:1c:
         1d:f3:e3:2a:7c:3d:6e:5e:18:f7:1a:f5:6f:b7:66:f6:e1:c0:
         7c:8b:8c:38:9d:90:86:0d:97:04:7b:97:a3:38:1d:a3:74:13:
         82:75:f1:1c:f1:75:f1:91:bf:8d:a8:1d:4f:75:0f:5e:68:e6:
         56:5a:71:28:60:50:d9:ce:a8:4b:3c:c7:d5:33:82:58:ee:cf:
         28:71:80:03:9a:80:55:43:76:df:4a:dd:5c:e0:b0:3d:d0:d8:
         77:c0:08:31:a1:cf:2a:8a:28:d5:1c:ca:65:d6:8b:ab:e2:10:
         e9:4f:b1:23:40:c3:c9:e7:cd:91:32:16:1a:a2:42:5d:11:be:
         10:41:dd:c8:a5:5a:9a:71:98:6a:cc:70:cb:c9:ee:39:c9:18:
         71:09:a2:23:62:8f:30:d6:28:bb:ab:33:60:a9:7c:f9:32:4a:
         bc:87:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:35 2023 by rpki-client on console.sobornost.net