Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343130303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a343130303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          7uye/Mjm7eBBc50UtoL22tw1QIrIk1S9sp+Wk0O6BW4=
Subject key identifier:   3D:08:5F:0D:AA:9C:4F:05:9F:36:77:02:02:24:0E:C3:D2:92:93:C2
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       656D493736B5411754F5C7B9EC03DAD84234F0E9
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343130303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:41 +0000
ROA not before:           Sat 29 Jul 2023 16:21:41 +0000
ROA not after:            Sat 27 Jul 2024 16:26:41 +0000
asID:                     269194
IP address blocks:        2804:60d4:4100::/43 maxlen: 43

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6d:49:37:36:b5:41:17:54:f5:c7:b9:ec:03:da:d8:42:34:f0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:41 2023 GMT
            Not After : Jul 27 16:26:41 2024 GMT
        Subject: CN=3D085F0DAA9C4F059F36770202240EC3D29293C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:bf:4e:1b:30:ba:7f:ab:8b:76:21:2a:c4:
                    34:95:5c:82:41:b3:c5:64:d9:e5:fe:75:01:2a:a8:
                    ea:58:5e:78:ac:36:fc:06:24:7a:25:4a:02:5f:80:
                    87:d0:d8:d9:a9:bd:92:69:71:fb:08:d1:d7:b2:bc:
                    fa:11:a0:9c:4c:43:44:02:ce:fd:f3:d1:09:c4:74:
                    8b:dd:89:e5:91:6b:a3:7c:f5:ad:fa:6c:ce:7c:4c:
                    b8:78:f2:70:80:53:a2:70:24:41:aa:bf:8a:46:bb:
                    a8:d1:7b:f7:86:e1:77:37:70:a4:31:d3:b1:24:28:
                    e4:44:b5:02:b7:d1:12:d6:e2:f1:30:18:c7:47:34:
                    54:92:da:02:41:6e:b8:9e:14:f1:17:e7:1c:55:90:
                    93:d3:64:57:b3:d1:61:50:9b:9c:7a:c4:bb:42:79:
                    c7:33:0d:47:89:dc:e6:85:a0:b7:36:f6:f6:0e:f7:
                    d2:82:b9:b2:c6:6d:ec:5d:8b:f0:9d:5b:9e:73:66:
                    0e:6c:a3:47:55:77:42:63:69:98:89:67:2b:a4:50:
                    71:45:3f:9f:dd:97:fd:26:ab:64:4f:eb:17:31:44:
                    28:a5:88:3a:20:f4:47:5b:2d:79:1c:84:f3:ce:bf:
                    17:a7:e9:a0:20:db:a9:96:56:c6:2d:56:ab:b1:b9:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:08:5F:0D:AA:9C:4F:05:9F:36:77:02:02:24:0E:C3:D2:92:93:C2
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343130303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:4100::/43

    Signature Algorithm: sha256WithRSAEncryption
         0a:bf:db:e2:2a:3c:10:71:d0:07:4d:08:5a:9e:b2:e6:98:f0:
         a3:f0:2f:03:6f:b9:b8:1d:17:e4:d3:92:f8:12:5e:29:ac:8b:
         58:a0:68:4f:0b:d8:21:82:d9:86:70:4b:28:fa:c9:f2:c2:bf:
         7c:a5:cc:c2:7e:93:37:32:71:12:94:48:8f:84:84:27:10:54:
         7b:05:dd:e4:6d:19:8f:9d:88:39:63:aa:20:8e:79:5d:96:b0:
         74:b1:10:6a:ce:91:d2:43:de:13:02:89:0d:71:4a:bb:ae:f4:
         fe:30:c5:04:47:29:c4:1c:b7:85:6c:dd:e0:fc:68:e6:9d:48:
         d1:ae:9c:0b:2b:6b:86:5a:ba:81:12:9f:a2:78:7e:f0:e8:01:
         45:d8:cb:2c:e1:35:a4:42:69:ea:9f:50:17:45:58:ea:92:32:
         18:23:bc:2a:49:c9:64:3e:e2:5e:ed:60:1c:de:68:40:46:d9:
         fe:00:77:ac:d2:8c:d4:ed:5d:0c:52:99:86:65:e3:c0:53:2a:
         c5:56:30:3e:77:45:18:d3:f5:7a:49:d9:24:c3:fc:06:3f:ad:
         49:00:cc:fa:31:33:8f:7c:f6:51:27:87:03:ec:fd:e7:a5:a1:
         72:bf:57:ac:62:05:21:56:76:ad:76:1a:a3:d7:2a:a3:7d:13:
         c6:97:2a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net