Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36372e302f32342d3234203d3e203131393231.roa
File:                     3230302e3233332e36372e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          /aXdcU/USjn3tl0WESMpl7AwFS+oeNJ+EIcPqUx9W4A=
Subject key identifier:   55:FB:95:94:D9:DC:43:20:6D:08:E5:B1:30:EB:FC:E4:A5:CA:06:B9
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       4F06EB5B5E675FBAB26020F943388C24511523AA
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36372e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:39:13 +0000
ROA not before:           Wed 31 Jul 2024 13:34:13 +0000
ROA not after:            Wed 30 Jul 2025 13:39:13 +0000
asID:                     11921
IP address blocks:        200.233.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:06:eb:5b:5e:67:5f:ba:b2:60:20:f9:43:38:8c:24:51:15:23:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:34:13 2024 GMT
            Not After : Jul 30 13:39:13 2025 GMT
        Subject: CN=55FB9594D9DC43206D08E5B130EBFCE4A5CA06B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3e:47:e0:d2:7e:f6:01:94:9e:68:24:e3:cb:
                    1e:d1:4d:ba:19:ab:50:56:3e:86:85:18:c9:b3:26:
                    50:d1:11:9b:8d:2f:0e:bc:4b:7a:9d:c7:54:73:d4:
                    35:ea:b3:db:80:c5:76:e4:e1:78:79:17:ca:1a:b4:
                    e3:38:2b:9d:76:63:73:f1:11:4b:81:73:0c:5d:93:
                    6b:d6:cb:39:eb:2d:24:50:e3:bf:9c:7d:fe:29:2e:
                    36:41:5d:33:ed:71:6f:4b:85:a5:6d:3f:a6:b4:e2:
                    5e:d2:9d:78:18:9a:25:cf:df:e3:c6:d8:52:0f:14:
                    2c:26:32:0d:81:58:74:b9:b5:91:91:67:2a:fd:35:
                    7b:33:06:6b:2b:10:61:63:62:2b:cd:71:5f:1b:12:
                    25:d8:72:99:f1:72:66:fa:50:c1:a3:1a:9e:74:20:
                    a9:19:1e:9a:64:8b:57:fe:4b:e5:64:48:49:ac:33:
                    f8:fc:46:31:f0:f2:2f:f6:e6:60:83:40:93:9f:ce:
                    d1:01:19:46:c6:c5:2f:76:24:96:6c:7f:8e:48:e2:
                    cb:f0:d1:8b:76:77:19:c3:00:c5:6b:31:a5:69:48:
                    6d:ca:6f:4c:90:d2:4d:7c:e5:1c:b1:f2:07:16:be:
                    7a:b6:42:ec:30:5e:53:1f:5c:5f:20:b6:73:24:cf:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FB:95:94:D9:DC:43:20:6D:08:E5:B1:30:EB:FC:E4:A5:CA:06:B9
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36372e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:93:09:48:af:5c:62:44:63:bb:86:88:b6:48:29:c5:b0:ea:
         ea:25:c3:3a:2b:fa:62:37:3d:af:f1:50:1f:bd:78:8e:a2:0f:
         84:cd:6c:be:2a:a1:9d:08:93:fc:6d:7b:03:07:8a:46:6a:83:
         32:e7:fb:41:ce:16:07:98:1f:5b:da:1c:bb:82:45:de:c9:01:
         9a:3d:36:11:ba:73:d3:f9:74:42:e6:4a:36:fb:21:99:87:be:
         be:78:e2:87:55:8c:8e:6f:2c:0f:3b:e2:25:92:4c:95:e1:a3:
         27:d6:01:35:50:ec:4c:d9:52:c4:d1:c2:9d:30:1d:83:81:6a:
         5c:d4:81:67:8e:bf:0b:65:44:ee:19:7e:2d:54:9d:23:e4:49:
         66:5d:e1:13:df:f3:04:1c:fd:cf:39:72:29:89:e7:66:10:08:
         3d:54:88:45:db:05:ea:f0:9d:c9:52:a4:3c:9a:2a:54:6a:59:
         00:40:7b:de:3b:e2:7c:17:35:01:fb:dc:0b:2c:3f:4a:60:59:
         7e:cd:9b:7e:60:4f:3c:e3:be:89:04:2a:c3:7e:a2:2d:8f:50:
         40:ac:e5:04:bb:ef:b9:59:8a:2c:1a:be:db:d7:cd:8c:df:bc:
         82:83:89:ce:7c:31:cd:7d:09:16:e1:8b:34:15:a0:5f:e3:e1:
         89:2c:e7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net