Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36382e302f32342d3234203d3e203131393231.roa
File:                     3230302e3233332e36382e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          sB4XEfb7WtpCeCv4U/L2bPC9zKGb9i34/8NQ4pm/r4c=
Subject key identifier:   97:55:1C:F7:03:5C:F6:AC:F7:BE:C3:72:AD:1E:4B:99:14:C3:07:1E
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       75CFE7ADDAA22256676DB9BA5B15700FD7E64386
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36382e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:39:14 +0000
ROA not before:           Wed 31 Jul 2024 13:34:14 +0000
ROA not after:            Wed 30 Jul 2025 13:39:14 +0000
asID:                     11921
IP address blocks:        200.233.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cf:e7:ad:da:a2:22:56:67:6d:b9:ba:5b:15:70:0f:d7:e6:43:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:34:14 2024 GMT
            Not After : Jul 30 13:39:14 2025 GMT
        Subject: CN=97551CF7035CF6ACF7BEC372AD1E4B9914C3071E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d8:24:f0:06:d5:37:dc:f8:2e:58:1a:b7:cf:
                    53:a0:e8:06:ed:e0:48:b2:65:7a:3d:3a:68:a1:1e:
                    4f:75:73:2a:89:29:56:5e:b9:a1:35:37:f7:71:e2:
                    00:7e:0b:5f:c4:3b:5c:17:70:a8:34:9e:84:95:b8:
                    7b:cb:86:b3:95:2e:d4:9b:3f:f1:99:6b:cd:d8:9c:
                    af:f2:15:5a:34:d9:36:ed:39:e7:e0:41:ae:f9:70:
                    f2:95:e2:3f:09:00:98:44:5c:75:89:be:ad:54:f3:
                    b9:d8:ed:4c:83:ae:6c:fb:f5:a9:28:dd:a8:84:d3:
                    d2:44:d8:6c:1a:9e:c9:2a:4f:19:34:5e:a2:64:73:
                    a7:f4:64:cf:2d:28:85:aa:66:da:b2:39:96:b5:a3:
                    08:c9:ff:55:71:d0:b6:ed:20:ff:2c:e9:8a:d7:fa:
                    fc:79:3d:82:72:07:fd:31:78:58:fb:31:90:18:61:
                    3b:e9:4a:27:1a:d9:75:b5:36:c6:09:e3:c6:cf:6f:
                    d0:d8:c2:08:2c:9a:9a:8a:e7:38:1c:85:b4:02:3b:
                    4d:2e:d6:70:24:eb:7d:03:20:59:94:1e:ff:1a:e7:
                    9f:b3:d4:09:cf:dd:df:92:28:9c:26:3f:4d:d2:c8:
                    be:99:a2:a7:1c:26:a2:6c:b8:ec:0d:e9:7a:88:63:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:55:1C:F7:03:5C:F6:AC:F7:BE:C3:72:AD:1E:4B:99:14:C3:07:1E
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36382e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:f0:b6:14:13:a0:ad:ae:77:f7:55:60:fc:f6:22:43:3f:f0:
         c4:7c:32:e8:80:1c:21:9a:c3:a7:de:b5:79:62:3a:b2:42:a9:
         bd:8c:58:c0:63:02:eb:6f:a7:98:f7:59:31:6d:43:7b:ee:cd:
         a6:65:4f:1b:ae:a7:72:4c:cb:01:76:87:b4:86:8f:a8:d2:b3:
         40:d4:86:84:65:d7:6c:b1:c1:ac:4a:82:58:d5:29:00:95:c8:
         65:97:c1:58:05:62:80:97:89:53:94:9f:d5:b5:a6:94:79:c3:
         b0:00:9f:38:33:13:90:9e:7c:2d:24:a9:b4:9e:4c:ee:6b:e8:
         68:e4:cf:d8:4b:05:3e:bf:b7:22:1e:b7:e2:5d:cf:82:4d:5b:
         00:f4:3a:07:fd:e9:41:bf:f3:52:7b:f0:d2:77:30:fe:4c:a4:
         14:4f:7a:f1:36:83:25:4c:4c:de:88:58:f8:00:06:cc:08:09:
         b5:74:ae:a6:e0:10:ba:60:fc:11:5c:a4:9d:2a:ad:4c:9a:15:
         18:b5:fd:b0:ef:f6:c6:12:0b:6b:e2:8b:1b:d9:89:f1:38:13:
         82:18:46:54:36:22:2a:e7:ea:3c:cf:22:00:87:1e:6e:25:0b:
         8b:0a:79:5b:2b:e3:43:56:a9:b2:e1:92:41:c7:45:e7:ac:0d:
         a5:40:54:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net