Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e36382e302f32332d3233203d3e20323632333639.roa
File:                     3134332e3133372e36382e302f32332d3233203d3e20323632333639.roa (raw, json)
Hash identifier:          JDpxUpHfipp1JJ3wvkGPXTiEoEbjWuuUbUT+2wqqxG0=
Subject key identifier:   A1:BC:F2:9E:8B:2C:80:71:03:7B:56:C7:F3:D4:B1:BB:4E:9B:CB:18
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       365C0F65F7F4455E7B91D4C40C3D1C75D0F6C76E
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e36382e302f32332d3233203d3e20323632333639.roa
Signing time:             Wed 03 Apr 2024 18:33:01 +0000
ROA not before:           Wed 03 Apr 2024 18:28:01 +0000
ROA not after:            Wed 02 Apr 2025 18:33:01 +0000
asID:                     262369
IP address blocks:        143.137.68.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5c:0f:65:f7:f4:45:5e:7b:91:d4:c4:0c:3d:1c:75:d0:f6:c7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Apr  3 18:28:01 2024 GMT
            Not After : Apr  2 18:33:01 2025 GMT
        Subject: CN=A1BCF29E8B2C8071037B56C7F3D4B1BB4E9BCB18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fa:39:18:5a:0f:a9:af:87:e4:39:c0:63:95:
                    66:cf:f2:36:93:89:57:32:fe:35:01:6c:dc:42:41:
                    29:db:a6:46:93:92:76:a8:be:93:cc:26:a6:f5:6f:
                    7c:24:be:22:5a:59:ec:1c:85:9d:88:3f:75:8e:23:
                    33:67:e9:51:b9:db:6a:b8:64:f5:39:35:65:dd:42:
                    5f:b4:73:b8:86:b8:f0:69:c8:da:93:3a:3b:00:ae:
                    29:2e:21:0b:24:e7:af:e3:b1:32:06:c4:79:5e:a3:
                    9f:eb:73:1c:f8:99:0c:b4:35:5d:da:f2:07:6f:e4:
                    27:44:38:d8:16:be:cd:42:93:2f:82:b3:10:c8:7b:
                    61:b2:09:f8:13:a0:18:20:97:77:d0:3b:5e:98:6f:
                    8f:38:e9:da:1b:39:fc:e7:da:36:53:0f:39:e0:b1:
                    16:32:62:13:0b:71:77:01:43:a8:09:97:b3:83:ee:
                    e3:2f:17:fc:f5:1f:5b:03:89:aa:db:47:ba:39:c7:
                    23:61:c4:83:6f:c3:57:4d:f7:d4:b8:ec:c8:b4:c1:
                    88:8d:9a:55:88:6f:00:2c:0f:b6:74:2f:17:00:ff:
                    a4:cb:f3:b2:31:b7:75:b1:b1:08:cc:a7:7c:b5:79:
                    bf:86:82:85:10:38:f7:0f:68:6d:e9:5f:97:dd:ea:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BC:F2:9E:8B:2C:80:71:03:7B:56:C7:F3:D4:B1:BB:4E:9B:CB:18
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e36382e302f32332d3233203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:ba:ad:7e:8e:e6:57:67:49:d5:13:c3:92:85:3a:e2:2f:f7:
         b0:81:6e:6a:dc:f9:81:8d:a1:87:f1:08:e6:b7:01:d2:37:01:
         63:ba:09:a1:32:95:2e:62:c9:9e:ff:a6:0c:9c:5a:e8:81:cb:
         80:4c:e6:32:0e:6c:38:5b:95:27:0f:ac:ad:33:e4:0b:d9:3d:
         c0:56:4a:50:da:29:e2:90:46:84:9f:66:e3:f8:4f:7f:fc:c3:
         71:b7:72:e4:0d:e7:ff:38:ac:c2:1a:73:6a:3c:62:49:1d:2e:
         0b:90:82:0f:a9:2b:4b:bb:47:79:72:07:c3:cd:ad:b9:00:0f:
         e0:06:41:71:7a:11:b8:59:ee:df:79:ec:2f:f8:99:80:d8:b0:
         7f:c4:06:2a:d5:e7:f6:d7:a8:90:f6:32:56:16:67:13:8b:8e:
         31:eb:bb:ba:b4:8b:e9:15:47:0c:73:74:02:e6:3c:5f:6b:0d:
         cb:5a:ab:49:ce:7c:c5:1c:5c:29:b3:2d:73:79:0b:91:f1:23:
         e1:36:18:bc:c3:b4:53:a9:fc:08:d8:e9:23:f5:ca:90:00:d1:
         a1:9d:fe:22:cc:ca:e0:a2:0d:f0:a7:91:2d:16:94:7a:17:70:
         8e:9a:c1:75:45:26:56:56:9f:ba:69:62:fb:10:b8:4c:f7:8b:
         7b:3a:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 21:17:14 2024 by rpki-client on console-ams.rpki-client.org