Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/34352e3136332e3136302e302f32332d3233203d3e20323638353731.roa
File:                     34352e3136332e3136302e302f32332d3233203d3e20323638353731.roa (raw, json)
Hash identifier:          gE4GVmw8kad3IoAAcXUtSMRgXPcRjD4918cjwQxq6MM=
Subject key identifier:   44:BE:F9:F0:2D:E9:96:4D:83:15:8F:16:57:39:3C:5C:F4:00:2A:5D
Certificate issuer:       /CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
Certificate serial:       073F31ABD3902B5CF21783D22EE96B185CE85643
Authority key identifier: ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/34352e3136332e3136302e302f32332d3233203d3e20323638353731.roa
Signing time:             Mon 05 Aug 2024 11:45:20 +0000
ROA not before:           Mon 05 Aug 2024 11:40:20 +0000
ROA not after:            Mon 04 Aug 2025 11:45:20 +0000
asID:                     268571
IP address blocks:        45.163.160.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 13:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3f:31:ab:d3:90:2b:5c:f2:17:83:d2:2e:e9:6b:18:5c:e8:56:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
        Validity
            Not Before: Aug  5 11:40:20 2024 GMT
            Not After : Aug  4 11:45:20 2025 GMT
        Subject: CN=44BEF9F02DE9964D83158F1657393C5CF4002A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:71:61:00:77:0e:20:86:50:8e:b3:03:69:2f:
                    92:76:51:2b:03:ad:bf:97:a3:4b:ec:97:54:1b:90:
                    81:58:6d:6e:b1:be:c3:ef:ba:10:e3:96:fb:e2:79:
                    1a:e9:8b:fe:9a:34:54:c2:b4:6a:9c:75:ef:b3:ac:
                    bc:10:9c:fa:26:d8:e5:34:53:7b:b1:62:79:60:41:
                    dd:f7:f1:b8:79:06:dd:d5:e6:3b:90:cf:83:c6:d6:
                    7d:7f:8d:f4:74:ea:dc:f9:05:eb:45:74:87:c6:5a:
                    c9:9f:77:23:d8:de:5f:94:82:77:72:c5:87:46:04:
                    0c:44:6a:b5:a7:c5:32:02:9b:24:11:e9:b1:12:23:
                    cb:d5:f4:03:87:2a:75:fd:fe:26:fc:b5:cd:46:60:
                    4a:30:d7:7c:93:31:e5:0d:ba:fe:bb:8f:d2:94:97:
                    61:a8:0f:68:e0:f1:6d:df:cb:98:71:e0:3e:48:76:
                    4b:a3:67:1f:e0:b2:1b:5c:a2:79:dc:eb:7c:03:cc:
                    69:28:38:70:5f:2e:ab:e3:6e:4b:1b:9b:d9:c0:3c:
                    5d:d5:b7:0f:2f:d8:b3:d8:96:dd:f2:1e:9d:a0:5e:
                    71:2f:f6:b1:98:ea:69:71:7e:14:b4:38:b4:90:b2:
                    0d:46:c1:d6:83:45:51:a4:8e:60:d7:76:d3:f4:bc:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BE:F9:F0:2D:E9:96:4D:83:15:8F:16:57:39:3C:5C:F4:00:2A:5D
            X509v3 Authority Key Identifier:
                keyid:ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/34352e3136332e3136302e302f32332d3233203d3e20323638353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:63:4d:a2:4d:6a:06:14:f3:09:38:38:62:4f:5e:1a:6a:1b:
         07:76:6f:d7:60:92:02:da:03:c1:9d:cb:9b:bf:27:4e:60:dd:
         16:82:9a:84:c4:38:b0:3e:5e:68:37:97:61:58:89:74:82:ce:
         9d:3d:04:db:64:b9:46:e8:fa:7d:a9:6b:47:33:3b:19:e8:cd:
         bd:41:4f:82:fc:08:df:cc:fb:f8:4e:9f:c1:ad:73:e6:6b:05:
         5b:f4:4d:52:ae:fe:e6:57:c7:46:ca:64:d7:23:f2:2a:69:41:
         29:6c:64:bc:78:88:f5:23:4f:c7:33:72:c2:fa:22:bc:85:40:
         40:e9:76:e4:fc:a5:13:89:da:cc:a1:44:8b:7f:10:b5:50:cc:
         68:85:11:9c:13:59:cf:46:69:42:95:17:72:82:15:7d:66:88:
         7f:eb:61:b8:e5:96:84:3e:a2:93:48:ff:33:d7:2f:cb:09:7f:
         29:b9:8e:b9:28:ed:0e:dc:5e:67:ea:12:61:46:52:d6:36:57:
         5e:d9:2f:38:ff:09:31:66:10:e3:3d:80:b7:ea:a8:b0:0b:6b:
         e2:7a:c6:7f:e4:47:b5:8a:b3:fe:8b:c0:18:84:2e:9c:33:ee:
         74:14:62:39:9a:cf:2b:e2:dd:db:51:d1:11:6e:9f:48:7e:d7:
         d2:50:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 14:49:06 2024 by rpki-client on console.sobornost.net