Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/34352e362e3132372e302f32342d3234203d3e20323636313334.roa
File:                     34352e362e3132372e302f32342d3234203d3e20323636313334.roa (raw, json)
Hash identifier:          ohBJShrItHZmJk8K2uJx9xlaz4fFayxtKMgXngEbn/A=
Subject key identifier:   B7:B0:DE:0D:B9:1A:CA:E1:4D:FE:F8:94:5A:60:5E:9C:8C:AE:32:34
Certificate issuer:       /CN=70178983C4174154F25B2BDB5C4454AE61F25EF8
Certificate serial:       332EF94286FAAC2BD70E73963C699B0B06814C56
Authority key identifier: 70:17:89:83:C4:17:41:54:F2:5B:2B:DB:5C:44:54:AE:61:F2:5E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/34352e362e3132372e302f32342d3234203d3e20323636313334.roa
Signing time:             Thu 06 Mar 2025 16:52:50 +0000
ROA not before:           Thu 06 Mar 2025 16:47:50 +0000
ROA not after:            Thu 05 Mar 2026 16:52:50 +0000
asID:                     266134
IP address blocks:        45.6.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 14 Apr 2025 21:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2e:f9:42:86:fa:ac:2b:d7:0e:73:96:3c:69:9b:0b:06:81:4c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70178983C4174154F25B2BDB5C4454AE61F25EF8
        Validity
            Not Before: Mar  6 16:47:50 2025 GMT
            Not After : Mar  5 16:52:50 2026 GMT
        Subject: CN=B7B0DE0DB91ACAE14DFEF8945A605E9C8CAE3234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f1:84:46:f6:86:9d:d3:fd:7e:7c:26:c7:c5:
                    5a:f4:1a:b1:8a:52:b3:81:af:ba:05:af:e6:5a:9b:
                    26:84:09:20:15:bd:c8:17:9b:31:fa:fd:91:e4:43:
                    b1:a4:e2:d3:dc:89:1c:9e:8a:10:e2:7a:53:c3:8d:
                    33:07:e4:ae:1c:df:81:15:3d:a2:d9:f6:e8:3f:6e:
                    a8:ce:41:f0:2b:68:05:20:16:37:f1:39:90:cd:72:
                    78:05:24:69:48:5e:7e:96:77:bf:aa:0e:93:03:cd:
                    d5:19:a2:34:a3:16:72:80:3b:21:83:10:62:3c:9d:
                    c1:fe:ee:21:77:67:04:94:71:8e:b5:af:d1:19:16:
                    51:4d:99:71:d6:ca:d8:1b:01:5c:32:de:86:ff:06:
                    e7:00:31:20:83:c2:4a:f3:ea:d4:0b:58:d3:8b:67:
                    33:1e:31:c1:0d:46:e7:6a:1a:8f:fb:59:72:66:84:
                    bf:53:7f:7b:7d:c4:7b:9f:2c:89:34:c2:95:3c:7c:
                    a2:45:92:fc:84:30:e1:3f:2d:eb:b7:d6:81:77:aa:
                    a0:f4:23:f9:7f:c9:9b:e5:66:29:78:cf:1e:ea:2f:
                    21:61:d9:23:58:16:6a:3a:e5:db:d4:c4:37:80:ca:
                    ce:61:07:18:32:3d:82:d2:77:49:c9:c2:84:87:48:
                    c9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B0:DE:0D:B9:1A:CA:E1:4D:FE:F8:94:5A:60:5E:9C:8C:AE:32:34
            X509v3 Authority Key Identifier:
                keyid:70:17:89:83:C4:17:41:54:F2:5B:2B:DB:5C:44:54:AE:61:F2:5E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/34352e362e3132372e302f32342d3234203d3e20323636313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e1:49:fa:60:7d:d8:2e:a3:a4:9c:c3:ae:98:96:20:92:38:
         e4:7d:9d:b8:ea:6b:4a:d0:6c:18:49:01:73:ff:1e:69:02:04:
         59:78:c3:02:a2:df:0b:51:26:69:9a:c3:2d:fd:1a:0c:51:15:
         1c:67:36:aa:03:85:07:08:da:5a:b8:a2:68:da:1f:b6:72:2d:
         e6:2d:1e:16:54:d7:c5:7f:35:b2:4a:91:ef:c4:00:f9:f5:5d:
         80:d3:84:91:e5:bc:83:41:9b:08:f5:8d:f7:b7:cb:bc:af:5c:
         cc:e9:86:b9:e9:17:9b:2d:68:7d:39:a4:a1:d0:c8:c7:8f:c4:
         f0:48:65:8b:84:a0:67:0b:c2:62:66:fa:30:94:72:6e:ea:c7:
         0c:e7:bd:4e:b7:d1:55:04:03:e9:21:51:c4:e2:69:33:54:1f:
         7a:ae:19:93:0e:5d:e8:a7:7c:b6:48:89:87:2d:28:c7:d1:c3:
         14:e5:d2:9e:41:9c:4e:30:0a:48:b4:bc:74:7a:25:5b:02:92:
         65:af:65:71:48:69:5e:1a:4f:3b:32:a1:9c:77:94:d1:60:86:
         1b:96:e9:49:2e:09:81:86:23:f8:08:0f:41:49:07:b6:56:f7:
         97:6c:b3:a5:5d:c9:ef:3d:de:7e:6e:2d:4c:ab:39:8b:36:1a:
         16:ce:b5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net