Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgRGqjJFRBYufCZTo2DzW7BmGLDrujRuVbhW5EZcy3zu/0/3137372e31302e3134302e302f32332d3233203d3e203532393236.roa
File:                     3137372e31302e3134302e302f32332d3233203d3e203532393236.roa (raw, json)
Hash identifier:          4J/m7utMMKhUphZmWkKpGojYGoy/DLWR3nxr8/q+N7k=
Subject key identifier:   BD:2A:6C:4C:E4:FA:84:64:96:02:8B:C2:C8:6D:9B:74:74:03:5F:F5
Certificate issuer:       /CN=7ABD0BD500D8C0F7E2BED54B84975B5EE77AC60A
Certificate serial:       1D6C4239EFDF9BF2083563DB35FF0819B895F2AA
Authority key identifier: 7A:BD:0B:D5:00:D8:C0:F7:E2:BE:D5:4B:84:97:5B:5E:E7:7A:C6:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABD0BD500D8C0F7E2BED54B84975B5EE77AC60A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgRGqjJFRBYufCZTo2DzW7BmGLDrujRuVbhW5EZcy3zu/0/3137372e31302e3134302e302f32332d3233203d3e203532393236.roa
Signing time:             Fri 28 Mar 2025 19:42:12 +0000
ROA not before:           Fri 28 Mar 2025 19:37:12 +0000
ROA not after:            Fri 27 Mar 2026 19:42:12 +0000
asID:                     52926
IP address blocks:        177.10.140.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 08 Apr 2025 18:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6c:42:39:ef:df:9b:f2:08:35:63:db:35:ff:08:19:b8:95:f2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABD0BD500D8C0F7E2BED54B84975B5EE77AC60A
        Validity
            Not Before: Mar 28 19:37:12 2025 GMT
            Not After : Mar 27 19:42:12 2026 GMT
        Subject: CN=BD2A6C4CE4FA846496028BC2C86D9B7474035FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:be:91:6c:41:4e:0e:e2:04:64:2a:39:f4:b4:
                    cb:bf:d0:ac:68:04:a1:9a:0e:b8:ed:8a:0c:ea:d9:
                    c5:3b:bc:a4:3d:c1:b0:71:21:a6:d2:85:a3:f6:ad:
                    32:02:74:04:fd:09:52:d3:05:b4:e7:f2:68:58:ae:
                    83:ef:4b:ab:20:c1:40:9c:78:ba:a7:46:f9:52:60:
                    3d:d4:aa:f1:b0:1f:c7:f1:f5:5e:80:31:1f:7f:9b:
                    98:35:15:a1:d8:dc:45:4f:89:ba:cb:85:02:a4:2e:
                    f7:53:ff:48:22:83:4b:4a:fc:ef:ef:82:72:c0:ec:
                    0d:b3:8d:78:da:85:49:75:69:7e:6c:a5:85:29:ee:
                    62:8b:c1:78:9c:f0:57:5c:30:d5:46:10:96:1f:c0:
                    4f:6e:a6:ae:4e:20:e9:bb:8d:91:17:c8:0f:e4:a1:
                    44:13:e4:35:25:93:3d:26:af:78:14:1d:63:dd:08:
                    da:54:df:01:9f:30:b8:88:26:d2:d8:cc:31:1f:67:
                    f8:86:5d:8b:48:87:a2:9c:36:67:97:eb:02:81:60:
                    72:2d:c6:05:34:56:76:b5:15:2d:0f:93:ea:18:8e:
                    0a:0c:59:6d:a5:bd:9f:62:b5:69:40:39:09:35:a0:
                    94:37:40:d9:24:79:6f:4b:58:b5:a9:1b:21:47:59:
                    1f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2A:6C:4C:E4:FA:84:64:96:02:8B:C2:C8:6D:9B:74:74:03:5F:F5
            X509v3 Authority Key Identifier:
                keyid:7A:BD:0B:D5:00:D8:C0:F7:E2:BE:D5:4B:84:97:5B:5E:E7:7A:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgRGqjJFRBYufCZTo2DzW7BmGLDrujRuVbhW5EZcy3zu/0/7ABD0BD500D8C0F7E2BED54B84975B5EE77AC60A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABD0BD500D8C0F7E2BED54B84975B5EE77AC60A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgRGqjJFRBYufCZTo2DzW7BmGLDrujRuVbhW5EZcy3zu/0/3137372e31302e3134302e302f32332d3233203d3e203532393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:7f:b1:53:2c:5d:cf:6f:14:d2:4a:cc:c9:69:dd:b2:39:15:
         3d:4f:fc:fb:c1:98:ac:3d:52:22:53:97:b7:b8:2a:e8:d5:e4:
         8c:44:02:23:8c:b0:2f:6f:c0:dc:a6:30:09:81:44:3f:57:8f:
         46:fa:5a:d3:29:ad:7a:7c:7e:13:55:3c:10:7e:4e:fe:e5:49:
         c2:01:c3:9b:bd:21:44:91:2d:08:96:1c:f9:50:ff:39:64:87:
         66:87:aa:14:ec:1d:c2:5d:b5:91:de:86:80:df:77:c0:0c:42:
         8f:e5:c7:4d:8f:c6:44:6f:74:20:a6:9b:eb:d7:d5:0a:96:5e:
         4a:35:98:d5:12:f0:b1:72:b1:04:26:d8:b2:79:af:06:3d:c5:
         0b:0a:ed:2d:df:2b:8e:66:93:55:9e:27:43:d0:61:ab:8c:6e:
         b4:5f:a2:43:13:c5:a3:11:db:a3:f0:52:d3:e4:e1:7c:49:04:
         1e:2b:d8:a2:e6:b0:95:73:87:fa:d9:bb:11:cb:0c:2c:1e:3e:
         8a:51:10:d3:5e:06:2e:e7:6a:41:41:ad:82:39:b3:cd:9f:2e:
         22:80:81:af:61:8f:50:52:b1:07:66:f3:ac:6a:7b:37:53:90:
         fa:b1:db:01:a0:b1:6d:73:ca:f4:7f:fc:3b:19:13:18:86:f1:
         8b:62:ab:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:23:29 2025 by rpki-client on console.sobornost.net