Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3138332e302f32342d3234203d3e203532393531.roa
File:                     3137372e31312e3138332e302f32342d3234203d3e203532393531.roa (raw, json)
Hash identifier:          68TnHtvb/ot6eek8s/RJ4T7yWM45tuYouVtFJvAtXM8=
Subject key identifier:   D6:C9:35:EE:12:DF:DD:AC:CC:82:D6:62:05:AE:E0:4C:B6:CC:8D:6E
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       296CD03456769C499485C3CC10C8A80BF746BF41
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3138332e302f32342d3234203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:44:03 +0000
ROA not before:           Thu 28 Sep 2023 17:39:03 +0000
ROA not after:            Thu 26 Sep 2024 17:44:03 +0000
asID:                     52951
IP address blocks:        177.11.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6c:d0:34:56:76:9c:49:94:85:c3:cc:10:c8:a8:0b:f7:46:bf:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:39:03 2023 GMT
            Not After : Sep 26 17:44:03 2024 GMT
        Subject: CN=D6C935EE12DFDDACCC82D66205AEE04CB6CC8D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:8a:7d:c5:d4:8e:14:b4:e7:f1:27:fd:57:
                    8a:83:96:a5:94:60:86:c9:30:6f:e7:04:e8:b0:f9:
                    dc:02:d1:30:b0:20:6a:60:cb:f7:c6:c5:d3:0a:52:
                    5c:9d:fd:e6:22:d5:ed:d1:f5:74:db:47:ea:cd:01:
                    3d:93:d7:e8:67:5d:ee:f4:3c:fa:4f:66:fb:00:17:
                    f4:6e:40:bd:fa:12:4d:23:e7:d0:b5:98:ae:8a:e9:
                    21:7a:85:9a:8e:e2:cd:ef:23:0b:9e:3e:55:0a:45:
                    4a:22:59:25:f5:f4:ee:2c:fa:40:c3:36:20:6d:52:
                    9d:78:a6:a4:29:1d:1e:1f:ea:9c:cd:54:73:21:d1:
                    d9:9e:83:55:d0:d3:41:de:c2:cf:58:63:8e:7b:12:
                    a6:77:6c:87:8a:8a:d7:e4:59:30:d2:98:11:63:11:
                    3d:c3:c9:53:85:14:ee:84:32:cd:f6:14:e1:a6:64:
                    4c:0c:86:bc:b4:d0:8e:3a:f2:85:fb:4e:f0:95:70:
                    b9:1c:cf:44:a3:5b:f0:3f:ec:16:e9:e2:5a:aa:99:
                    6b:7b:86:02:eb:02:91:73:08:f9:86:93:28:0a:9b:
                    2a:d1:03:8e:e8:f9:25:12:d9:d4:8a:0c:3d:a7:8d:
                    23:36:ee:bd:4a:cb:d4:e8:2d:3d:2d:0c:6c:2b:54:
                    18:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C9:35:EE:12:DF:DD:AC:CC:82:D6:62:05:AE:E0:4C:B6:CC:8D:6E
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3138332e302f32342d3234203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:30:22:9e:90:4a:fc:82:bb:27:c2:ff:7b:ed:c4:a1:2b:b6:
         ea:77:d7:71:6b:f8:8a:22:55:a9:08:31:3f:96:26:57:79:b5:
         a1:14:bf:5e:cd:e5:6a:39:c6:31:77:8c:1c:8e:68:e8:a1:6a:
         d0:ef:b9:30:47:77:4e:00:e2:e0:74:08:17:48:b4:ef:78:ff:
         8e:3a:d4:88:1d:63:c8:4b:71:54:b2:37:85:f8:ce:e2:9b:6f:
         ba:3f:30:58:f5:25:12:82:60:dd:37:d4:03:d6:27:5b:97:5e:
         cf:0e:91:a8:08:fb:9f:dd:02:19:b4:d3:93:d9:58:43:8d:4f:
         61:02:0d:56:a1:11:1a:f5:f8:b1:96:42:7d:cf:38:4a:3b:b5:
         11:68:53:83:e9:30:a7:cf:f6:97:4d:a7:e0:64:2e:31:07:29:
         1e:b5:63:1d:65:41:e1:c0:ee:7e:fd:95:40:94:bf:ca:f7:42:
         b4:2b:a2:04:21:25:44:d2:1f:17:80:e1:f7:4f:81:61:3d:ac:
         7c:db:65:41:22:f9:bb:5d:4a:fb:8b:21:16:90:71:ec:66:a2:
         ce:1c:ad:7b:53:d6:3f:c6:bd:6f:26:a8:e5:be:87:28:65:e6:
         6f:b2:12:8e:86:34:77:2c:5d:49:a6:09:15:7c:6c:ae:c4:f2:
         3e:0a:96:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:35 2023 by rpki-client on console.sobornost.net