Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032383a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373032383a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          CfJZGc2CTNKSf9ajUU7CVzNNLIyHAjtukHxsX+8VC7Y=
Subject key identifier:   87:CC:09:1B:15:E7:C6:02:3A:95:D6:E7:49:AD:FB:4B:F8:70:28:B6
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       6D39C3FD1D9ACEBA2CD59E5CC429915052930081
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032383a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:42 +0000
ROA not before:           Sat 29 Jul 2023 16:21:42 +0000
ROA not after:            Sat 27 Jul 2024 16:26:42 +0000
asID:                     269194
IP address blocks:        2804:60d4:7028::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:39:c3:fd:1d:9a:ce:ba:2c:d5:9e:5c:c4:29:91:50:52:93:00:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:42 2023 GMT
            Not After : Jul 27 16:26:42 2024 GMT
        Subject: CN=87CC091B15E7C6023A95D6E749ADFB4BF87028B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:ad:36:82:15:61:f6:2d:41:fd:c5:2d:f3:
                    82:00:72:b8:2e:f1:3d:0b:94:9b:94:b4:51:3d:fd:
                    96:61:62:67:9e:c1:b3:09:97:cf:fe:55:cc:47:dd:
                    af:0c:02:57:72:88:57:cc:70:b7:a5:3f:8b:c2:cb:
                    34:70:7d:70:ca:9e:56:d7:3f:d1:59:e7:e1:d3:26:
                    21:b5:7c:7f:2c:72:59:64:06:4d:cb:c6:27:4e:94:
                    23:c9:c9:1d:4a:ef:83:a6:12:e5:48:41:83:fc:26:
                    c5:e8:99:9d:ed:bf:e5:0b:4e:cc:05:33:11:05:45:
                    8e:bb:fd:36:f8:1d:5b:76:78:65:44:94:d2:58:c9:
                    3a:f4:1b:e0:be:be:53:90:96:5b:96:9b:59:e0:74:
                    b0:b4:1e:08:56:2b:e6:2a:b3:73:fb:d5:95:72:24:
                    50:f7:75:6f:17:29:44:45:81:da:00:1d:40:c3:44:
                    b4:22:e0:5c:eb:7a:fd:fd:73:0d:97:c9:fd:b8:9d:
                    e7:ac:2f:33:eb:33:97:65:c1:97:72:51:12:5d:c6:
                    3d:3e:26:93:c2:1b:af:b4:db:ff:94:e7:15:35:c8:
                    c7:13:a4:e6:43:03:69:3e:63:b5:d0:f7:a3:7c:3f:
                    40:c5:ae:78:e0:ca:ca:b2:6d:a6:9d:60:fa:bc:74:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CC:09:1B:15:E7:C6:02:3A:95:D6:E7:49:AD:FB:4B:F8:70:28:B6
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032383a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7028::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:0b:c1:bb:07:e6:d6:d3:24:76:d0:b4:de:a9:3b:af:db:87:
         85:57:3b:74:63:d5:37:7a:4c:1b:dd:b9:b5:2c:38:90:68:de:
         88:d7:dd:78:42:96:36:2f:96:d3:cb:5b:f7:d1:2c:a4:3f:90:
         51:e0:c0:03:4d:84:c4:e3:c7:ed:6d:19:4f:6b:8c:17:b9:53:
         9d:ab:fc:42:b1:b8:56:3a:e0:76:7c:ca:29:3a:9b:21:c8:56:
         79:c0:95:47:ed:01:0e:07:0a:e7:ce:da:0a:de:15:11:de:fe:
         de:1d:5e:35:f8:c3:ac:21:8a:c4:7c:5d:c4:ca:a4:32:f6:e6:
         91:d5:b0:4d:ec:3a:6e:ba:bc:65:79:5e:f4:a9:17:77:82:08:
         b0:e6:84:0b:c5:64:75:d9:d5:b1:d2:4f:f1:6e:ed:99:84:fe:
         27:f3:ab:1e:40:b7:03:51:b2:7a:53:b7:75:4c:32:11:f2:e5:
         31:5c:ac:e1:ce:c8:a0:2d:d7:e4:4c:5e:22:ef:3c:8f:5a:e8:
         11:e2:c3:46:89:8e:02:99:db:d4:38:3a:15:9a:f7:75:30:39:
         a5:32:7a:c1:5e:19:73:88:0c:04:70:13:47:d1:8b:dc:24:6e:
         ca:2c:85:9c:67:6f:17:5a:62:b6:4d:0c:60:54:90:c7:bb:16:
         b4:98:9c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net