Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/3137372e32322e35302e302f32332d3233203d3e203532393533.roa
File:                     3137372e32322e35302e302f32332d3233203d3e203532393533.roa (raw, json)
Hash identifier:          YTGT1HScA/uhFm3SqdwqOids9FF5vcYBUIQHXtYsq5U=
Subject key identifier:   51:8D:73:A1:E0:60:E8:B1:51:F4:CC:73:FD:42:22:E9:49:C4:CE:E0
Certificate issuer:       /CN=52A6D195524E5D77063F4811A6C89136CC740F16
Certificate serial:       6A45EA39B4FB3AB4C22FA53BE7C5A95810CD7DC1
Authority key identifier: 52:A6:D1:95:52:4E:5D:77:06:3F:48:11:A6:C8:91:36:CC:74:0F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52A6D195524E5D77063F4811A6C89136CC740F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/3137372e32322e35302e302f32332d3233203d3e203532393533.roa
Signing time:             Wed 16 Aug 2023 13:15:56 +0000
ROA not before:           Wed 16 Aug 2023 13:10:56 +0000
ROA not after:            Wed 14 Aug 2024 13:15:56 +0000
asID:                     52953
IP address blocks:        177.22.50.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:45:ea:39:b4:fb:3a:b4:c2:2f:a5:3b:e7:c5:a9:58:10:cd:7d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A6D195524E5D77063F4811A6C89136CC740F16
        Validity
            Not Before: Aug 16 13:10:56 2023 GMT
            Not After : Aug 14 13:15:56 2024 GMT
        Subject: CN=518D73A1E060E8B151F4CC73FD4222E949C4CEE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:62:55:b8:4b:bb:d0:6f:0b:1b:9b:d9:42:
                    5a:a2:4f:9c:95:24:c1:4d:d3:23:04:95:34:61:d9:
                    f8:37:91:17:aa:25:ae:1e:ff:6f:3b:12:be:16:43:
                    3d:42:32:82:7f:e6:4b:dd:ba:e7:15:9f:79:7a:8b:
                    92:fa:e6:2e:31:1e:4f:b5:56:c3:53:41:1d:82:78:
                    ee:a9:7b:d5:f6:36:49:30:0e:d4:50:76:3e:56:16:
                    ac:3c:e6:9d:9d:fa:29:81:04:b2:c8:d5:3d:da:88:
                    78:5c:e6:4d:54:88:e0:a9:9a:21:df:5a:71:48:56:
                    9d:ae:1b:d7:71:16:cb:c1:27:85:db:a8:05:58:ae:
                    9d:88:14:6b:4c:fa:ab:64:ca:e7:5b:28:12:13:fa:
                    fb:66:62:b7:23:17:b8:8c:86:f4:be:1f:71:e3:b3:
                    cf:8b:bd:97:75:60:b3:e4:e9:38:81:b5:a1:ed:05:
                    a3:ee:a2:91:f7:1f:02:de:0a:3b:71:0f:9f:bc:39:
                    86:7c:f0:dc:42:51:db:8c:54:6f:ff:66:f7:c8:9d:
                    a8:ca:35:f0:b0:32:bb:d6:47:b4:f5:75:6f:12:2e:
                    ab:6b:b0:9d:94:f9:f3:69:ea:27:ac:40:66:d8:25:
                    ba:36:9f:b5:3f:54:5d:62:c6:c8:b2:5d:f2:58:de:
                    c1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8D:73:A1:E0:60:E8:B1:51:F4:CC:73:FD:42:22:E9:49:C4:CE:E0
            X509v3 Authority Key Identifier:
                keyid:52:A6:D1:95:52:4E:5D:77:06:3F:48:11:A6:C8:91:36:CC:74:0F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/52A6D195524E5D77063F4811A6C89136CC740F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52A6D195524E5D77063F4811A6C89136CC740F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/3137372e32322e35302e302f32332d3233203d3e203532393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:c0:01:14:da:18:ac:a9:60:65:23:0e:0d:5a:28:b5:ac:d0:
         1e:40:b4:5d:19:53:2d:c9:17:1c:b3:61:cc:ec:32:9f:19:a5:
         1a:0e:42:9b:f0:98:2d:8a:da:e2:cf:de:f5:68:fa:37:c3:53:
         35:47:a6:f7:ad:41:0a:09:b9:87:78:43:80:0d:ee:5f:fa:f2:
         53:75:a9:d7:c5:83:b7:51:1b:03:9d:82:dc:27:22:2a:bf:bd:
         6b:8a:09:3d:fa:08:97:15:c4:bb:23:5d:6f:a2:78:dd:32:63:
         5b:72:d2:49:32:68:e1:93:e0:b4:82:12:eb:2a:12:30:8b:0c:
         38:57:e9:8b:e5:47:46:ed:98:8a:dc:ab:65:c1:74:8c:5c:99:
         90:6e:ff:ac:ac:a3:1a:2c:73:0c:56:96:cb:79:66:07:1e:d1:
         8e:f2:af:24:d6:06:d0:f7:66:9d:94:2d:8b:02:61:eb:55:64:
         ff:fc:e3:0c:d3:a4:49:2b:2e:85:1f:75:e1:2f:d5:e5:14:5a:
         da:a6:9f:b0:f6:3d:29:d6:21:64:a1:de:51:bb:09:3e:13:78:
         99:6f:77:fd:24:b4:6e:77:a5:8f:59:02:8d:9c:e2:8d:fb:a9:
         3c:67:cf:c2:52:bd:3a:ea:7d:37:2c:7e:77:bc:1d:ca:1f:a2:
         d4:49:c0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net