Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3230203d3e203238313832.roa
File:                     3138392e38392e302e302f32302d3230203d3e203238313832.roa (raw, json)
Hash identifier:          tshTNHT36bUrrM0PMp/WfxrMpZBdvFbtwDnWnpiZ/6A=
Subject key identifier:   75:ED:30:8B:16:79:15:F2:F0:08:66:00:48:A3:C6:30:96:9F:D6:0F
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       2E329A41676A2E1F6F352FFB91688E45D277A4F9
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3230203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:48 +0000
ROA not before:           Wed 17 Apr 2024 11:34:48 +0000
ROA not after:            Wed 16 Apr 2025 11:39:48 +0000
asID:                     28182
IP address blocks:        189.89.0.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:32:9a:41:67:6a:2e:1f:6f:35:2f:fb:91:68:8e:45:d2:77:a4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:48 2024 GMT
            Not After : Apr 16 11:39:48 2025 GMT
        Subject: CN=75ED308B167915F2F008660048A3C630969FD60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:c4:87:39:09:8b:09:88:d1:0f:96:ad:40:
                    d0:a9:ab:3d:63:ed:4f:f4:ff:23:ed:f2:6b:f3:13:
                    24:02:81:fe:67:dd:a3:db:fb:29:68:ab:16:aa:64:
                    5b:3c:4c:d5:e4:80:c8:89:d9:80:64:aa:72:15:a6:
                    0f:2d:01:d3:fb:51:fc:92:24:27:c3:44:fb:87:e8:
                    05:ab:9c:38:0d:d7:52:86:fb:08:25:1d:6c:36:f8:
                    ea:54:de:c0:df:9a:fe:b3:f7:ea:e0:6d:80:66:ea:
                    0d:44:c1:87:9f:db:fe:2c:49:d7:00:45:95:61:ea:
                    03:8e:db:07:69:b5:1e:49:80:7c:cf:e8:bd:ff:7b:
                    44:34:54:f5:0d:32:85:44:69:6a:97:8e:de:17:fb:
                    b7:92:18:5b:2d:f4:48:40:cb:4c:35:61:9e:bf:54:
                    be:fe:c0:02:4d:99:4b:50:aa:92:7b:c3:d4:50:57:
                    05:ee:4e:6d:6e:22:c5:f8:f7:3e:43:24:0c:11:6a:
                    85:af:15:e0:86:bf:b2:01:f6:05:e0:c7:54:e4:05:
                    76:b0:99:b3:4c:ca:33:2e:8a:0c:6b:b8:7a:26:74:
                    65:89:96:2f:40:e8:92:4a:48:1b:ea:af:4d:21:77:
                    83:27:0f:26:ec:cc:ef:22:53:91:89:71:86:7f:c3:
                    04:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:ED:30:8B:16:79:15:F2:F0:08:66:00:48:A3:C6:30:96:9F:D6:0F
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3230203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:1e:32:34:c0:d2:61:65:26:47:66:dc:d1:9f:88:0b:6e:87:
         fc:d3:1e:81:0a:d8:6b:8e:80:78:75:a2:6e:6e:de:99:37:da:
         f2:20:ec:5f:63:17:d4:4d:2a:45:27:e2:b4:be:04:3a:fd:24:
         e4:1f:12:6a:5e:b1:ec:21:8d:c5:1a:7b:ac:5e:d4:49:29:96:
         91:f1:37:0f:a7:dd:ef:b7:3c:8f:58:e1:2f:ef:fd:84:ab:47:
         0e:0b:89:8a:1f:68:ad:64:92:67:02:1b:4a:0d:a5:81:47:4a:
         21:6b:8e:25:1b:07:65:9d:b7:9e:d2:6a:d0:f1:8c:1b:c2:e5:
         0e:35:dc:b2:e8:ac:fe:00:2a:ea:9f:07:c2:56:4b:f6:29:be:
         b1:0e:bc:33:aa:5d:7d:e7:c3:17:2f:e4:49:0f:88:7f:15:64:
         69:55:ea:46:25:99:bd:7e:90:38:1a:33:ab:61:3a:04:d9:b1:
         e5:9c:9f:5f:ae:52:63:77:9f:13:93:c9:d1:3a:6c:ae:d7:aa:
         ff:25:85:c6:2a:0d:0a:2f:62:e5:7d:44:75:82:02:12:0f:a3:
         fc:0c:4a:81:79:84:2b:3b:5b:f1:f3:f2:9b:94:11:f1:76:4d:
         9a:4e:60:ff:3e:ad:44:0a:f2:31:be:7e:c5:55:28:1d:9d:58:
         76:2a:d0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org