Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e36382e302e302f31362d3136203d3e2034323330.roa
File:                     3137392e36382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          tqZthtR+DlQtiN51c6BfbQjOUojDabHNg0tNNE8WhLc=
Subject key identifier:   0D:09:BC:7F:61:64:AC:84:DC:DB:D9:A2:D3:5A:1C:22:DB:70:C7:8A
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       0B1C066875E422580080BE5AF71077DB38F5CA62
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e36382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:14 +0000
ROA not before:           Wed 03 Apr 2024 18:26:14 +0000
ROA not after:            Wed 02 Apr 2025 18:31:14 +0000
asID:                     4230
IP address blocks:        179.68.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1c:06:68:75:e4:22:58:00:80:be:5a:f7:10:77:db:38:f5:ca:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:14 2024 GMT
            Not After : Apr  2 18:31:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:7d:90:04:56:e3:df:92:21:32:dd:82:1f:
                    ec:bc:db:81:46:0f:e5:6d:c8:45:bd:96:8c:0a:55:
                    1d:4b:ca:8f:a5:70:1a:ee:1b:bd:95:60:6f:16:39:
                    a1:a6:e7:a8:62:cd:e5:24:99:a8:b7:3d:5d:a0:62:
                    31:81:77:74:2b:37:1d:30:04:33:b0:d1:f5:51:ee:
                    d4:a2:77:58:21:86:8d:b4:0a:d3:bb:68:80:e1:a6:
                    72:88:f5:69:da:0c:77:83:fd:1e:0d:53:00:b2:12:
                    72:62:34:02:b2:9b:c2:87:4d:e2:a9:2d:29:e6:46:
                    2d:1c:21:c0:1e:63:ea:ee:95:df:e3:1e:b5:d9:ad:
                    9b:4c:37:e3:87:3d:57:f5:41:ba:0b:9a:c6:87:10:
                    a0:84:d8:0a:ef:f3:8f:2f:43:cc:20:58:87:78:f4:
                    52:1c:ce:5e:25:6b:04:6a:9f:63:70:b4:8e:9a:fd:
                    86:7d:9d:21:04:99:80:9a:a7:1e:03:27:6f:b8:62:
                    69:5a:23:a1:5a:2f:44:65:fe:a9:4c:06:a2:1b:16:
                    37:01:a7:73:98:2f:63:10:61:cd:0b:2a:63:37:f2:
                    f7:ae:62:e2:9f:a4:9f:99:39:93:0f:30:a3:35:73:
                    11:dc:22:d6:05:07:11:4e:16:c7:f2:1e:08:4b:33:
                    e8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:09:BC:7F:61:64:AC:84:DC:DB:D9:A2:D3:5A:1C:22:DB:70:C7:8A
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e36382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.68.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:be:f9:c8:2b:aa:67:43:cc:c1:d0:f9:5f:71:c2:24:d7:d0:
         a1:85:46:20:06:5b:e4:5a:8e:e4:b9:01:38:af:7c:b4:a5:6c:
         3a:31:82:41:bb:6c:6a:47:34:d3:40:dc:3e:15:11:67:4c:f0:
         29:bd:d8:21:c1:06:30:92:86:0d:e4:69:ab:b8:c8:b8:3d:ec:
         3a:2c:54:4b:b5:48:be:24:67:ce:11:58:f2:7b:ce:69:c8:ad:
         18:67:fc:a0:63:e8:3f:ae:ce:2f:34:91:3f:cf:a4:4e:ba:e4:
         77:92:9d:0e:a2:09:48:35:04:d8:52:80:c2:f3:8a:5a:aa:4a:
         e2:26:56:52:0c:fd:f1:97:81:b9:27:c9:f9:ef:09:90:86:c9:
         da:ab:5b:80:35:14:eb:c7:3e:f7:d4:ae:30:c6:b9:08:7e:67:
         27:aa:df:a5:20:9a:7e:e9:be:8f:3a:23:b5:ca:2b:1b:1a:ed:
         c6:f4:6c:ed:8c:cb:ed:43:9c:ff:bb:59:4c:98:2b:b9:45:83:
         b2:24:4c:aa:44:64:d6:29:db:63:4c:6c:e9:62:b9:3e:2b:a2:
         e6:13:f0:77:17:4e:e2:0f:44:b0:05:e2:16:89:55:b8:10:86:
         61:b2:ba:f7:a9:3d:19:b4:af:66:bd:e2:fe:30:dc:e4:56:ff:
         a3:e2:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 18:30:11 2024 by rpki-client on console-fra.rpki-client.org