Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133302e302f32342d3234203d3e203131393231.roa
File:                     3230302e3135302e3133302e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          cQwIJCeqElZUbxhCVKcVK0Qj6Eqn1hTkzljvj+K9ZDU=
Subject key identifier:   9C:06:AE:44:BD:F2:76:FD:92:29:A6:F2:15:F7:32:25:FF:EC:6A:30
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       1F16313D8C144223E698EF530F2136E86E3060DA
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133302e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:35:54 +0000
ROA not before:           Wed 31 Jul 2024 13:30:54 +0000
ROA not after:            Wed 30 Jul 2025 13:35:54 +0000
asID:                     11921
IP address blocks:        200.150.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:16:31:3d:8c:14:42:23:e6:98:ef:53:0f:21:36:e8:6e:30:60:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:30:54 2024 GMT
            Not After : Jul 30 13:35:54 2025 GMT
        Subject: CN=9C06AE44BDF276FD9229A6F215F73225FFEC6A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:5a:e0:22:d5:e2:e4:ea:10:92:71:a5:de:
                    2f:bd:5c:0c:b7:48:16:3a:0f:04:ab:24:d9:07:21:
                    3c:fe:04:18:87:a9:58:c2:ae:98:67:e3:5e:9c:33:
                    27:92:e5:65:47:ba:85:95:eb:c3:dc:5e:08:9c:89:
                    d5:eb:44:b2:16:6c:9c:83:58:48:c8:96:bd:2f:1d:
                    d1:26:40:1c:d2:2a:93:9a:5a:af:78:12:e5:5a:7b:
                    9f:f2:78:af:8c:48:89:9f:68:ad:13:55:76:6c:2e:
                    5d:73:8e:58:64:1b:9f:64:04:49:36:de:8e:86:7c:
                    a3:2b:7f:84:31:da:bb:ba:6d:bd:9a:eb:3d:f1:e1:
                    d6:e0:79:c1:47:09:d2:ad:b5:a0:a1:5d:2b:cf:ff:
                    ca:91:e8:ee:7f:71:b6:a6:d3:02:37:92:74:f9:e2:
                    70:82:aa:ba:8d:1c:4e:57:1a:9c:cc:fc:74:0e:f5:
                    84:b9:cb:4e:bf:e8:18:41:6b:42:be:f3:cf:8a:82:
                    f6:17:43:b4:50:77:4f:b4:6b:cd:c2:80:7f:d9:a1:
                    12:e7:76:96:cb:6b:2e:36:86:dc:cd:06:21:ed:9c:
                    a7:22:10:9f:70:ed:46:20:b7:02:cf:ce:0a:e7:07:
                    f4:2f:3b:8c:93:8d:ba:2e:3a:07:20:df:53:89:5b:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:06:AE:44:BD:F2:76:FD:92:29:A6:F2:15:F7:32:25:FF:EC:6A:30
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133302e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:65:c2:70:0d:81:35:57:6b:b6:5f:31:84:6e:bd:4f:62:
         f3:83:d4:f1:e2:f1:22:87:47:5e:1a:9d:59:9d:f5:65:92:27:
         53:12:c2:28:4d:ec:7b:59:7d:f4:57:8b:f6:0a:6a:83:42:25:
         c0:ae:37:7b:53:ad:ea:a8:2f:e9:98:3e:17:f6:15:d2:62:ff:
         df:98:86:5d:1a:e0:31:7e:de:0c:81:1d:26:5b:f7:2b:a9:10:
         ad:43:7a:b3:15:15:e3:43:1b:b7:c5:08:e6:06:f4:4e:4a:87:
         19:74:a5:89:ec:5d:55:48:98:42:33:54:9f:13:99:b4:b7:eb:
         04:81:c6:1f:15:76:1d:cb:3e:e3:e4:3f:43:07:50:34:51:46:
         5a:1e:84:87:e1:6b:b8:fa:47:77:00:51:46:72:90:a5:e8:5e:
         02:f3:b7:ff:33:70:7f:37:19:83:43:aa:d4:51:26:48:ae:8c:
         a9:ae:57:e8:a6:83:85:06:06:92:cb:51:0e:63:a1:00:38:65:
         df:ef:a0:e2:11:49:56:96:69:21:aa:56:db:62:8d:82:14:1f:
         40:0d:df:ba:97:88:fd:e6:94:dc:27:8c:ee:cd:20:94:53:c2:
         9b:0f:6a:fb:c6:be:5f:d0:5c:b6:16:af:97:8f:7d:09:9b:56:
         a9:d0:d4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net