Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137372e31312e302e302f32342d3234203d3e203532393632.roa
File:                     3137372e31312e302e302f32342d3234203d3e203532393632.roa (raw, json)
Hash identifier:          Nw1fzr2kYReg5C9jVxJ38N8Mja++djRckBMkCYsBlUU=
Subject key identifier:   06:88:41:DF:24:0C:C1:B7:6C:19:36:F6:49:6F:C9:3A:86:40:8A:DA
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       40496AF2A1711E9896B76DC1D39F1A18B665C631
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137372e31312e302e302f32342d3234203d3e203532393632.roa
Signing time:             Tue 15 Apr 2025 02:16:40 +0000
ROA not before:           Tue 15 Apr 2025 02:11:40 +0000
ROA not after:            Tue 14 Apr 2026 02:16:40 +0000
asID:                     52962
IP address blocks:        177.11.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Apr 2025 13:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:49:6a:f2:a1:71:1e:98:96:b7:6d:c1:d3:9f:1a:18:b6:65:c6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Apr 15 02:11:40 2025 GMT
            Not After : Apr 14 02:16:40 2026 GMT
        Subject: CN=068841DF240CC1B76C1936F6496FC93A86408ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:14:50:21:69:ed:16:b8:d6:c4:c6:ea:ec:
                    d6:45:76:48:74:1d:c3:de:29:ce:80:b8:03:e8:11:
                    54:66:67:c3:a4:02:a6:64:32:54:0a:c5:17:b2:4f:
                    4a:6a:a0:c7:4f:8c:b3:8a:83:31:b5:fe:53:97:4e:
                    91:ce:f7:74:da:87:e5:78:89:28:77:c1:75:a2:7a:
                    9d:b3:fb:e2:19:48:a5:1c:24:14:a9:52:fd:97:21:
                    a9:b2:3f:a1:3a:71:f0:dd:1e:f9:bd:24:5a:3f:d5:
                    e1:27:28:b1:e7:db:9c:88:83:3e:3e:95:bf:de:6e:
                    da:de:69:bd:dd:af:94:03:e7:e7:92:1d:84:b9:2f:
                    a1:9c:a3:38:69:7d:ea:67:08:1f:76:86:14:41:ac:
                    91:22:dd:da:23:12:87:23:18:f0:3c:86:67:3e:d0:
                    9f:66:78:f8:a0:19:56:03:f4:83:dd:42:91:5e:d4:
                    27:1e:5b:60:32:81:f0:9c:6e:bc:1a:b3:ea:04:6f:
                    4d:bb:aa:0f:20:39:ef:6b:c4:b9:75:32:5a:48:7f:
                    ed:70:5d:5b:4e:af:4b:d5:bd:10:41:51:53:57:56:
                    b3:10:82:02:bb:77:69:d5:1e:a6:3e:23:99:d9:86:
                    ff:21:81:bf:be:8e:47:85:54:9a:5d:f7:7e:da:db:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:88:41:DF:24:0C:C1:B7:6C:19:36:F6:49:6F:C9:3A:86:40:8A:DA
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137372e31312e302e302f32342d3234203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:25:d3:3a:3d:77:0e:2b:a0:5b:5d:e9:95:b8:22:8e:9c:6d:
         28:d4:9c:58:2d:6a:c7:ed:d7:7d:95:df:67:7c:fd:66:77:37:
         b5:00:a6:45:73:8d:79:10:80:ef:72:25:d5:63:15:92:31:10:
         eb:91:dd:3c:2c:2a:2c:b4:c6:08:97:76:52:70:67:da:c0:39:
         db:9b:ef:1f:4a:25:87:99:4f:46:60:5d:15:d1:c8:5a:31:e8:
         e9:70:85:9a:f5:55:5b:ca:ae:9e:39:16:db:41:b3:23:07:03:
         e7:1c:e4:c1:0f:a7:b4:b7:14:e0:3d:d5:9b:50:2c:00:c7:db:
         7e:63:83:06:75:14:ed:b4:ce:88:ae:8f:c7:75:6b:65:74:cc:
         7f:e8:19:c7:71:49:e5:0d:d3:07:5c:d6:cb:3e:23:3e:26:a2:
         d2:65:8e:93:ca:7d:cf:98:00:1a:f0:f7:98:d1:68:18:45:43:
         ef:99:01:97:53:d0:73:5a:8e:9e:bd:18:70:f6:fd:b1:c8:38:
         cb:79:19:25:a4:86:8b:14:8f:bf:6d:46:b9:d5:5f:10:6a:e2:
         36:a7:38:d1:48:61:64:2b:33:6b:6b:2c:74:fb:26:c6:3b:68:
         ee:5a:c7:c3:dd:bd:dd:6c:f6:d1:cf:76:42:9d:88:4f:38:98:
         cc:d0:d6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:48:32 2025 by rpki-client on console.sobornost.net