Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030323a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373030323a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          NDIocvDAROk9PrMa0j3ba9uvR+93cYu1BLvU0TInooU=
Subject key identifier:   65:5F:F6:14:30:93:90:A5:5B:09:63:6B:CA:33:D2:E4:82:7A:F2:E4
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       39F4C4677843E1D5B514CD9666CB608CB428DD61
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030323a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:41 +0000
ROA not before:           Sat 29 Jul 2023 16:21:41 +0000
ROA not after:            Sat 27 Jul 2024 16:26:41 +0000
asID:                     269194
IP address blocks:        2804:60d4:7002::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f4:c4:67:78:43:e1:d5:b5:14:cd:96:66:cb:60:8c:b4:28:dd:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:41 2023 GMT
            Not After : Jul 27 16:26:41 2024 GMT
        Subject: CN=655FF614309390A55B09636BCA33D2E4827AF2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:bf:d3:28:2e:de:a9:ba:4c:f4:b7:21:4b:
                    07:c6:23:bd:10:8a:40:ba:28:4d:f1:a0:07:d3:8e:
                    6e:8e:09:db:56:5a:86:e8:c3:80:44:4b:c4:b7:dc:
                    ea:62:56:18:98:3a:fd:72:83:fc:6e:4c:9e:af:8f:
                    93:2c:7e:4c:65:d6:75:0d:51:b2:75:4e:2b:9b:77:
                    60:65:0b:ef:d1:42:41:53:15:60:c3:07:40:63:4f:
                    dc:ee:99:5d:e0:92:92:74:a5:55:69:ae:e1:4e:be:
                    0d:91:11:fd:36:a2:3e:ed:ef:d3:b3:f6:39:94:6d:
                    ea:a1:c2:c5:af:ff:cc:b8:57:90:52:17:d3:fa:71:
                    a9:b3:f8:3f:b2:71:2c:ec:84:a4:20:f3:45:05:c7:
                    47:51:02:15:dd:30:37:8b:21:9c:e6:6e:a4:6e:8b:
                    4c:ef:5e:4f:bd:57:ca:14:20:7c:fa:f2:79:39:26:
                    08:d5:38:a5:63:72:2f:6b:5d:1d:37:58:21:58:74:
                    eb:c7:f2:be:a1:9b:b5:37:9a:32:1f:c4:e9:43:72:
                    f6:72:20:7d:7d:b7:87:e8:92:a4:8e:fc:c1:e5:2a:
                    24:af:24:e8:d2:55:92:7a:20:fc:37:a6:21:39:37:
                    62:b3:ac:8c:e8:9a:57:2c:38:06:e2:bf:07:7d:b8:
                    e8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5F:F6:14:30:93:90:A5:5B:09:63:6B:CA:33:D2:E4:82:7A:F2:E4
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030323a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:fc:df:3b:93:34:4a:b0:d3:76:fd:8e:c5:7d:17:01:2d:59:
         6b:6b:24:b5:1c:e1:02:2e:6a:a0:0d:aa:94:9e:d1:52:63:69:
         ff:bc:d8:c1:80:67:a5:a3:ec:46:e4:0c:64:ab:ca:42:f6:0f:
         25:e8:9a:27:3f:2a:ba:ea:1e:95:99:cf:82:4c:c9:b9:31:02:
         55:f6:2f:13:c8:1f:58:b7:88:51:1b:e6:05:41:3e:3c:19:3c:
         b4:0b:34:14:e2:ef:6b:3e:61:13:f2:68:65:fd:69:63:b6:53:
         ff:91:76:6b:a4:69:fb:73:59:2b:fa:62:68:c7:aa:2f:0b:0c:
         20:de:da:3b:94:13:ec:e8:3e:91:ba:69:e8:1a:b3:5b:9e:9a:
         34:a3:2b:05:9e:40:4c:46:da:96:b4:ec:db:db:c7:51:5d:e8:
         d5:77:a4:4e:51:b6:30:27:74:59:db:16:2c:e0:5c:c3:b3:f5:
         54:dc:d8:5f:d6:16:fc:2a:0b:9c:97:0c:25:c4:8f:d4:37:2f:
         14:90:4b:ea:be:ac:a3:bc:ba:d0:45:35:28:61:7c:29:99:9b:
         b9:36:e8:b7:99:93:53:4b:aa:17:bc:c4:e8:94:41:25:53:35:
         a4:c0:04:7d:ee:30:4b:59:ae:12:23:5a:bf:46:c8:2b:49:b1:
         2a:b8:69:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net