Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/323830343a353333633a3a2f33322d3332203d3e20323638353731.roa
File:                     323830343a353333633a3a2f33322d3332203d3e20323638353731.roa (raw, json)
Hash identifier:          l5lyqBm7kUjmNLqKO9VSO80NU3ToNoSLD1isXJDJuOA=
Subject key identifier:   34:AA:CD:4A:1D:B5:C1:29:C6:8F:76:C4:32:75:5C:F3:8C:45:B3:3A
Certificate issuer:       /CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
Certificate serial:       4E5E6BD05A4DF7EDA0514A055E0B6A44E54C3670
Authority key identifier: ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/323830343a353333633a3a2f33322d3332203d3e20323638353731.roa
Signing time:             Mon 05 Aug 2024 11:45:28 +0000
ROA not before:           Mon 05 Aug 2024 11:40:28 +0000
ROA not after:            Mon 04 Aug 2025 11:45:28 +0000
asID:                     268571
IP address blocks:        2804:533c::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 13:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5e:6b:d0:5a:4d:f7:ed:a0:51:4a:05:5e:0b:6a:44:e5:4c:36:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
        Validity
            Not Before: Aug  5 11:40:28 2024 GMT
            Not After : Aug  4 11:45:28 2025 GMT
        Subject: CN=34AACD4A1DB5C129C68F76C432755CF38C45B33A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:44:36:0a:69:0b:ef:88:c6:dd:c7:20:5a:
                    c8:75:6d:6a:c8:e3:15:1c:93:8c:24:1e:a2:7e:bc:
                    60:88:95:d2:f6:eb:ce:c8:e2:21:73:92:c0:07:ac:
                    2d:33:4d:87:91:1d:1e:d1:eb:d2:11:6c:e1:c9:5c:
                    ac:0a:29:2a:47:2b:25:cb:82:2e:74:e1:e1:4a:4c:
                    b4:d8:77:b3:e2:97:ed:4e:cb:c6:97:ed:a8:8a:bf:
                    cc:ea:24:66:3b:09:76:f3:93:1b:55:96:61:27:05:
                    81:51:22:98:37:ec:7a:29:06:65:2c:c4:16:5f:0a:
                    84:69:ea:a8:53:55:36:2c:d5:54:5f:e8:46:f9:de:
                    c1:58:7f:55:9b:0c:b4:88:ea:37:4e:8a:66:01:cc:
                    f3:72:39:8f:62:5d:fa:c5:7b:cf:d9:7f:cd:c1:82:
                    d9:64:c8:79:99:a9:57:6a:8b:fa:3b:ac:3f:a1:2c:
                    01:c5:bd:df:10:2b:00:88:57:f7:76:f5:bc:8b:fa:
                    66:2b:29:d9:91:2c:d4:c2:2c:17:1b:d2:2a:47:67:
                    d3:f5:6b:22:0e:86:1f:07:f9:9d:0b:ab:96:09:d6:
                    5e:a2:4b:99:c3:3d:6b:63:b3:b4:18:7b:87:3a:56:
                    1a:fb:54:af:44:1d:35:09:bc:af:6f:1e:fd:ba:32:
                    1f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AA:CD:4A:1D:B5:C1:29:C6:8F:76:C4:32:75:5C:F3:8C:45:B3:3A
            X509v3 Authority Key Identifier:
                keyid:ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/323830343a353333633a3a2f33322d3332203d3e20323638353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:533c::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:00:a3:a7:74:18:bd:f6:ad:1b:b8:33:0c:08:81:5b:07:83:
         5e:8d:d2:c2:e9:fc:52:eb:c1:a6:84:56:23:70:ef:9d:b9:c0:
         ab:eb:e6:ff:97:a2:ec:0d:a1:32:5e:4d:96:5d:47:fc:a0:8d:
         0c:37:55:26:d4:0a:58:57:3f:8d:c0:fe:8c:c7:da:4d:92:87:
         19:ea:57:d2:f1:6d:27:d4:1e:d4:78:32:cc:29:51:d9:26:c2:
         fa:9e:30:47:0f:99:fe:d1:4f:c3:01:d2:8e:0f:c8:10:da:c2:
         6e:36:4c:52:79:f0:07:82:15:94:d4:bf:fb:a3:cf:7b:cc:b5:
         c4:79:92:c1:e2:b3:f9:4a:94:ae:6d:8c:dd:50:b4:98:79:e5:
         15:7d:f6:f6:5a:5a:a9:dd:7a:ec:42:5c:f0:a7:81:70:41:4a:
         4c:3a:3c:f4:9d:67:0d:3f:ec:19:56:dd:c3:dc:db:1e:96:ff:
         36:d6:92:1a:16:e7:b6:f8:bb:e5:02:45:04:74:29:06:1b:dd:
         3d:b8:c1:4b:cd:51:35:4c:3f:08:a3:1d:1f:db:c1:c5:08:99:
         8e:45:29:85:b5:58:4f:7a:8e:35:77:3f:47:9a:09:48:fb:26:
         f6:dd:a2:4b:85:e2:67:51:67:a7:39:a2:38:50:2f:e8:11:ca:
         30:48:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 14:49:06 2024 by rpki-client on console.sobornost.net