Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e37302e302f32342d3234203d3e20323632333639.roa
File:                     3134332e3133372e37302e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          5VY4eGXB70AdKfjqH6dx/ygLdMqFLmgrnSTr9+MCN+k=
Subject key identifier:   E0:7F:CD:CF:E4:21:AD:92:6B:B8:71:97:7E:D3:DB:78:B3:CC:1B:98
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       6DFF2AF6C1543952D27DAD9880072E4E81175B9F
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e37302e302f32342d3234203d3e20323632333639.roa
Signing time:             Mon 10 Jun 2024 14:04:31 +0000
ROA not before:           Mon 10 Jun 2024 13:59:31 +0000
ROA not after:            Mon 09 Jun 2025 14:04:31 +0000
asID:                     262369
IP address blocks:        143.137.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Jun 2025 14:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ff:2a:f6:c1:54:39:52:d2:7d:ad:98:80:07:2e:4e:81:17:5b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Jun 10 13:59:31 2024 GMT
            Not After : Jun  9 14:04:31 2025 GMT
        Subject: CN=E07FCDCFE421AD926BB871977ED3DB78B3CC1B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:14:16:fb:df:a9:22:fb:32:7a:f5:c7:07:0a:
                    1d:40:62:3d:29:c7:26:e0:f6:4d:13:47:4e:a9:f5:
                    a1:5e:80:dd:a1:51:e4:92:e1:f6:32:91:6a:36:8b:
                    dd:94:f9:62:bd:1d:db:eb:6c:59:fa:cf:1e:c7:2e:
                    87:49:5a:79:fc:aa:3a:45:37:b3:08:ae:9a:c6:e2:
                    b3:d4:29:48:a7:ba:ae:19:df:59:0a:81:4d:1d:2c:
                    17:3d:a0:1b:50:51:ec:1e:f0:52:3d:0a:f2:bd:46:
                    be:d9:ba:b9:72:fe:ee:31:3c:f9:12:29:e6:c1:42:
                    d7:8f:d4:48:88:e3:61:cf:41:6a:df:85:13:5d:57:
                    d6:86:b4:00:7c:5b:75:e5:e4:d5:5a:21:52:16:56:
                    70:f6:28:3a:c2:87:55:cd:49:0a:59:20:f1:98:ff:
                    66:9b:d5:af:cb:6e:0c:3f:56:ad:1f:25:03:8a:7c:
                    95:00:b5:4f:4c:86:95:2d:05:70:30:be:37:48:e7:
                    40:53:aa:90:95:f1:f8:1d:c9:da:75:12:35:46:93:
                    d8:9d:9c:14:e3:b7:8a:c1:26:e6:83:40:17:a4:59:
                    b5:ef:6e:d4:88:66:5b:a8:67:c1:25:7c:ad:6b:f2:
                    1a:5f:01:6c:4a:ba:09:c3:e5:29:e9:7f:15:76:d6:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7F:CD:CF:E4:21:AD:92:6B:B8:71:97:7E:D3:DB:78:B3:CC:1B:98
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e37302e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:85:6c:8e:2c:c3:08:0d:e5:a5:b8:a3:41:e7:d9:f9:62:aa:
         1c:4b:0d:9d:5d:0f:f7:9b:90:d6:67:55:5c:70:74:76:0d:4d:
         64:5f:2b:4a:bf:39:2e:2f:ff:47:96:48:9d:92:9c:25:9a:ba:
         2d:51:e3:cd:90:67:fb:f7:53:6d:93:bc:09:a0:40:23:b9:ae:
         a2:72:83:2a:06:4e:07:9f:c9:81:2b:bb:2b:33:1c:f2:d3:ca:
         44:d1:5e:91:d9:e1:6b:e4:61:12:3f:8b:f6:dc:81:f3:60:97:
         79:b8:1e:0a:f0:fe:05:f1:c8:94:8b:aa:38:57:dd:e9:ce:36:
         ad:bd:db:94:bc:48:70:7a:a9:e7:19:c2:26:8a:93:c4:a1:8f:
         fd:fc:e0:9a:1f:b8:4e:65:fd:12:cc:50:c4:5a:b8:2f:a0:fd:
         a4:f5:76:8b:9e:22:cd:f8:59:20:90:0c:d6:5f:8a:60:6f:44:
         1a:ab:52:57:fd:b3:21:8a:2a:02:37:51:15:5d:c7:46:a1:8a:
         ab:62:39:aa:8b:33:28:84:86:f1:a2:60:e0:63:ed:a6:02:8e:
         40:94:db:37:dd:97:0d:65:ba:a1:6e:ef:2f:30:31:59:a5:da:
         fc:9c:91:05:20:66:64:58:e1:4f:c6:fa:be:7c:47:ff:7e:e3:
         b1:88:b6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 19:39:13 2024 by rpki-client on console-fra.rpki-client.org