Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133312e302f32342d3234203d3e203131393231.roa
File:                     3230302e3135302e3133312e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          x6Z+XI+YDV33U0I6uKm6xhVGlqLWO7hRFLV8jE5Kyyw=
Subject key identifier:   DE:81:80:0F:30:38:19:D7:E9:B1:D5:E5:E2:D3:E3:C4:12:E8:04:77
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       28752C8F639FA6D7F551D03571770CE097B12687
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133312e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:35:54 +0000
ROA not before:           Wed 31 Jul 2024 13:30:54 +0000
ROA not after:            Wed 30 Jul 2025 13:35:54 +0000
asID:                     11921
IP address blocks:        200.150.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:75:2c:8f:63:9f:a6:d7:f5:51:d0:35:71:77:0c:e0:97:b1:26:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:30:54 2024 GMT
            Not After : Jul 30 13:35:54 2025 GMT
        Subject: CN=DE81800F303819D7E9B1D5E5E2D3E3C412E80477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:00:78:0a:67:2d:50:32:5b:10:ab:3c:44:
                    5a:39:78:f7:3b:7f:a8:83:73:a6:c1:64:45:f9:9f:
                    4c:94:9e:88:6c:db:a2:1a:fd:01:77:2d:f5:f8:7e:
                    8d:82:78:b9:4b:df:c5:94:3e:17:48:da:f0:0b:e7:
                    fb:11:8d:c6:5f:0f:4c:3f:34:6e:14:ba:e0:eb:2b:
                    d1:d8:ed:9b:d5:57:3f:d3:f1:fc:15:cb:3c:75:60:
                    31:25:45:9f:96:db:13:19:70:52:40:d2:f7:96:84:
                    fe:8f:e7:dd:89:d7:7b:b0:d4:bb:96:29:25:ca:55:
                    23:02:fd:4c:43:00:55:6a:40:ca:39:10:98:ac:cc:
                    57:8b:4f:50:82:b7:e0:c6:a6:84:08:c9:8b:7e:01:
                    23:f0:51:bd:89:53:10:ea:78:1a:e2:ff:0b:4c:2e:
                    e8:fe:b9:1d:fc:5a:5c:8b:da:3b:55:66:17:6a:08:
                    ec:5e:b7:2a:64:56:ac:8a:a9:1a:33:60:9f:c4:c7:
                    cf:87:f0:4e:dc:2e:2c:67:9a:8f:a5:0d:cf:51:3e:
                    e7:6f:60:fc:f7:86:6a:cb:ed:dd:7e:d8:c3:8c:9a:
                    77:6f:59:ce:99:46:be:90:7f:e2:20:8d:fd:82:42:
                    76:09:ea:02:65:05:53:3c:0d:86:a9:8f:32:a0:9f:
                    38:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:81:80:0F:30:38:19:D7:E9:B1:D5:E5:E2:D3:E3:C4:12:E8:04:77
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133312e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:14:9e:5e:34:2d:76:2b:c4:cd:88:50:cd:53:72:0d:11:09:
         e1:90:bf:a6:77:7e:a8:24:8d:ef:d7:ed:5c:29:9b:d6:d1:b1:
         29:ef:43:ba:76:5b:6a:62:42:1c:b3:dc:fb:7e:2e:5c:d1:2b:
         fd:d4:66:12:0b:ba:4d:9a:f6:b2:54:22:bf:2d:81:df:a5:52:
         77:10:bd:5b:bd:5b:a6:78:ae:f1:9b:64:70:fc:65:ec:49:a2:
         f2:c1:e1:c3:7c:72:30:f7:5f:88:50:f8:98:6f:c3:8d:d5:2d:
         2d:1e:1a:96:0e:51:95:f8:dc:20:2a:9e:e6:65:e8:ac:6d:77:
         e0:86:d3:fb:ed:af:31:f8:3f:c5:2d:56:76:0b:0a:bf:f2:f4:
         de:28:63:af:dd:7e:fe:8f:99:cd:71:7c:2d:3c:01:1e:6d:5f:
         ac:90:d2:0c:a3:47:b2:51:c4:38:05:09:26:19:cf:fd:2e:06:
         b4:5c:b0:d4:f4:bc:cb:03:c0:4b:ac:18:8b:c8:89:39:93:88:
         6e:28:e8:bd:21:91:d4:96:5a:ef:17:b9:84:8f:c8:4c:99:0d:
         7a:a1:f5:6f:c7:3f:0c:ab:f9:6c:e7:94:9d:53:6c:02:fe:48:
         ba:2a:1a:94:04:83:56:bc:14:b9:92:72:b5:de:82:d0:76:ea:
         04:f9:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net