Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3137362e302f32342d3234203d3e203532393531.roa
File:                     3137372e31312e3137362e302f32342d3234203d3e203532393531.roa (raw, json)
Hash identifier:          ymePY8oj195TL1QCIsCBZf6Q2YX6NWVQ2Kcvttq+ayk=
Subject key identifier:   4C:CF:23:FB:BC:3D:C4:97:AE:3D:E4:04:3F:8D:E1:59:41:DD:67:A6
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       24C43FBEFA771ECC9C5A9CA6316E8F438AAB70BE
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3137362e302f32342d3234203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:44:01 +0000
ROA not before:           Thu 28 Sep 2023 17:39:01 +0000
ROA not after:            Thu 26 Sep 2024 17:44:01 +0000
asID:                     52951
IP address blocks:        177.11.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c4:3f:be:fa:77:1e:cc:9c:5a:9c:a6:31:6e:8f:43:8a:ab:70:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:39:01 2023 GMT
            Not After : Sep 26 17:44:01 2024 GMT
        Subject: CN=4CCF23FBBC3DC497AE3DE4043F8DE15941DD67A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cc:90:82:39:91:a7:c5:86:68:07:ee:c1:ef:
                    6c:af:93:c0:27:51:bc:0c:f8:b1:f3:b7:f3:1b:50:
                    e8:19:04:e2:b8:57:6f:06:6a:79:c9:80:aa:20:a6:
                    bf:19:fb:c0:22:8f:5c:99:61:48:f6:d8:21:38:be:
                    9f:01:3d:88:ca:08:12:65:23:db:63:c2:d8:ea:1c:
                    4f:56:45:0a:01:5d:d0:47:d5:6f:3d:97:2e:cf:92:
                    57:bc:cd:19:fa:19:45:de:8c:cc:f9:43:b8:12:6d:
                    12:ce:70:bd:a8:e4:23:4c:c9:ed:5b:b5:54:c4:f5:
                    b9:61:ba:e7:be:d0:63:bf:b2:34:4e:84:8a:d9:84:
                    d8:76:29:73:2b:50:63:5c:4f:7d:bb:04:06:2b:4e:
                    ae:aa:23:7c:97:f2:ef:9c:af:92:ba:85:db:e0:b7:
                    5a:75:6e:d7:2a:39:77:97:f9:35:e4:a7:1e:8f:be:
                    e9:01:3b:1d:45:e9:91:09:35:85:6e:11:bc:cd:d9:
                    77:32:a1:43:18:c3:77:b2:50:11:90:c7:f6:9b:c8:
                    ec:2b:0c:6c:c2:92:51:1e:a8:74:6a:0d:98:cd:fd:
                    7b:c8:be:42:67:bd:87:37:4c:13:76:af:63:86:e4:
                    67:32:f5:de:c3:33:a5:3f:64:ea:e1:c7:d4:ea:32:
                    1e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CF:23:FB:BC:3D:C4:97:AE:3D:E4:04:3F:8D:E1:59:41:DD:67:A6
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3137362e302f32342d3234203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:0b:2a:66:27:69:3b:2f:e9:e6:df:0b:97:8f:5d:d6:52:4c:
         69:95:08:ea:9b:10:ff:f6:ed:51:24:70:8c:c4:08:a9:aa:47:
         2e:11:04:04:0b:c6:35:e9:7c:11:14:84:eb:ae:15:23:f5:b2:
         60:f2:8c:89:d3:07:21:f0:d2:0c:a2:e2:ea:78:e4:55:d9:7b:
         52:55:13:00:be:ed:d8:8b:53:f6:ae:09:1f:14:40:1b:54:0d:
         9d:68:c9:49:99:07:43:c8:dc:ab:10:6e:05:06:a4:12:5c:6b:
         00:34:ee:8e:44:62:3d:11:13:ed:48:00:88:d0:1d:70:6b:6a:
         4e:eb:09:99:d3:52:bf:9f:a1:71:b9:e5:d6:fa:37:2f:45:33:
         ed:84:59:08:75:6a:f5:fb:10:2e:1d:4f:36:8d:cb:51:75:52:
         c7:3d:d0:4c:df:77:01:40:da:10:72:eb:5f:ca:73:21:23:67:
         cc:ac:a4:0f:6e:50:b2:b3:77:c1:dc:5d:5b:03:3b:59:bc:06:
         69:3d:de:8d:c9:76:99:b4:ca:77:b6:df:17:26:11:3c:fd:64:
         d7:08:7b:7f:76:46:76:f8:dd:2d:ea:35:26:c9:c7:5a:d8:7e:
         c5:40:72:4a:09:34:d4:14:f9:fe:f2:db:d2:ae:09:e9:59:97:
         1b:84:e5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:35 2023 by rpki-client on console.sobornost.net