Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3137372e302f32342d3234203d3e203532393531.roa
File:                     3137372e31312e3137372e302f32342d3234203d3e203532393531.roa (raw, json)
Hash identifier:          nMXcPC72e503t6KeimqxZXdauloPr35jHSXp0nUn0m4=
Subject key identifier:   2A:9C:54:E3:56:34:88:26:23:BD:D7:7C:C8:F3:48:9F:84:72:5B:9C
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       1F122C29104481D0E3053D2EED6E8B162D1D21B4
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3137372e302f32342d3234203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:43:58 +0000
ROA not before:           Thu 28 Sep 2023 17:38:58 +0000
ROA not after:            Thu 26 Sep 2024 17:43:58 +0000
asID:                     52951
IP address blocks:        177.11.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:12:2c:29:10:44:81:d0:e3:05:3d:2e:ed:6e:8b:16:2d:1d:21:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:38:58 2023 GMT
            Not After : Sep 26 17:43:58 2024 GMT
        Subject: CN=2A9C54E35634882623BDD77CC8F3489F84725B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:e8:b9:d5:36:98:6a:6b:66:e4:9b:8e:07:
                    08:f8:5c:25:ca:c9:32:c8:dd:1b:0f:76:ef:ff:1f:
                    a8:0d:2f:1e:51:2e:4b:cd:b5:dd:78:aa:ae:87:d0:
                    c5:5b:1d:85:d9:0e:65:a6:c0:9a:e3:3d:01:e0:98:
                    a0:6d:56:e7:72:16:6c:91:1a:7a:b5:96:dc:70:26:
                    9d:86:35:2d:22:e8:ac:9c:1d:b1:5a:77:85:e0:2d:
                    5b:30:65:23:58:3b:9a:3a:4d:2c:ec:97:7d:6b:a3:
                    13:0d:d2:f0:01:7b:cc:3e:83:9e:28:5f:08:cb:5e:
                    5c:c6:0e:9c:a8:14:ff:72:be:9c:cc:9d:1c:d1:41:
                    fa:a8:9e:a1:59:ee:9b:1a:c2:55:a2:de:9d:b3:34:
                    2a:bc:34:e1:2c:98:9c:70:d6:95:10:14:45:2d:04:
                    ea:b8:f1:43:15:f9:25:14:65:aa:dc:5c:aa:c7:90:
                    ce:78:dc:fe:27:22:0d:5a:57:2c:40:3d:52:2c:8c:
                    38:d6:b7:d5:7c:c7:37:fe:86:9c:f5:2a:d8:9c:bf:
                    c3:61:49:64:3f:5a:87:d2:4c:23:7b:0e:26:5d:f4:
                    4f:ed:f6:b3:54:27:fd:85:6f:2f:0d:92:bb:56:7b:
                    ff:79:40:50:9e:a9:06:07:6f:b1:e5:6e:72:4a:6a:
                    eb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9C:54:E3:56:34:88:26:23:BD:D7:7C:C8:F3:48:9F:84:72:5B:9C
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3137372e302f32342d3234203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:4d:6a:c8:be:a1:e9:b3:f6:ed:f6:78:4d:66:23:0a:6f:36:
         0c:78:c7:bd:93:85:9c:db:bf:53:3b:4e:52:e3:da:29:98:a5:
         b9:d5:8f:03:7e:33:70:f4:6a:6b:ea:be:40:f1:74:55:37:a4:
         73:4e:00:d2:87:20:e8:e4:90:46:a9:9a:74:5c:ea:b5:27:9b:
         32:fb:5a:a8:27:0e:47:fe:7b:09:28:b8:5b:e1:cb:89:c0:47:
         f2:42:47:65:ed:d4:a8:63:7c:8e:97:af:02:99:af:2c:6c:e4:
         d4:52:58:5e:2a:07:9c:37:33:a6:4d:13:6c:d3:25:01:15:3d:
         ec:bb:27:27:e7:56:0b:41:38:50:be:8a:0f:bd:39:e9:6a:28:
         b3:a0:dc:ab:90:9c:d5:02:14:71:63:f5:ee:d1:84:23:25:c5:
         ee:bd:7a:26:9a:2f:20:2a:c0:44:be:ec:bd:e3:38:a5:a1:60:
         ce:63:eb:e1:54:d3:ba:d5:0c:e2:34:60:ec:59:3f:36:14:5c:
         68:ac:55:a3:f6:50:44:7a:73:5e:d3:00:ed:0e:01:e4:34:3d:
         b4:28:70:67:61:5f:b4:18:30:6c:8e:7d:6b:5a:dd:30:e8:86:
         59:7a:1c:df:4f:5a:e5:8f:82:c4:6c:bf:0e:84:2f:cd:5c:87:
         63:18:f8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:35 2023 by rpki-client on console.sobornost.net