Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e322e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e322e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          wY4kb2EweqJLK0g+wDgn43DAs4h3IeJSPeT2lo50w38=
Subject key identifier:   55:0B:62:13:59:81:4C:C4:65:DE:AC:E1:B4:18:7E:8F:1C:C4:FE:5B
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       1DDBAB0A2BB0AA8D94707112E41024C6DF696F30
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e322e302f32342d3234203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:48 +0000
ROA not before:           Wed 17 Apr 2024 11:34:48 +0000
ROA not after:            Wed 16 Apr 2025 11:39:48 +0000
asID:                     28182
IP address blocks:        189.89.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:db:ab:0a:2b:b0:aa:8d:94:70:71:12:e4:10:24:c6:df:69:6f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:48 2024 GMT
            Not After : Apr 16 11:39:48 2025 GMT
        Subject: CN=550B621359814CC465DEACE1B4187E8F1CC4FE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:c1:d4:8a:69:94:f9:3d:91:16:c5:0d:ff:
                    b2:47:fb:89:21:90:2c:98:df:a8:42:77:ec:75:7f:
                    37:dc:60:7c:0d:5e:16:07:75:a8:17:08:aa:ea:36:
                    67:2a:18:6d:7d:e9:86:35:88:4c:be:1b:42:55:eb:
                    93:e2:bd:2a:af:cb:69:15:25:a3:0c:24:33:c8:c7:
                    92:df:0a:43:81:16:bd:ab:d6:37:2e:43:ba:a8:71:
                    71:e6:0f:04:ad:24:d5:be:0f:2e:00:a6:df:cf:85:
                    ef:d5:8d:99:e8:3b:94:33:47:47:c7:52:ab:25:ef:
                    f2:43:54:8a:4a:ac:fe:40:15:e5:28:b7:75:61:01:
                    b0:79:12:8d:e0:ac:71:3b:a2:7c:b1:11:75:4e:7e:
                    9f:15:44:6e:06:96:6d:2f:2d:a7:1e:5d:f9:5d:0b:
                    1e:ea:89:16:df:30:0f:7d:7b:c2:71:8f:7c:c7:26:
                    eb:ff:5a:2c:09:1d:80:35:7d:fa:6f:42:1f:29:13:
                    27:af:74:86:0e:7a:93:1a:d6:0e:36:a7:2d:ad:40:
                    82:12:2f:35:bd:57:ed:63:d6:a0:48:f8:4b:43:bf:
                    f8:be:99:4e:16:4d:6d:0f:e2:27:ec:6a:d7:e0:db:
                    b2:13:53:89:d4:68:60:95:47:8f:94:8c:92:ee:1a:
                    ee:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0B:62:13:59:81:4C:C4:65:DE:AC:E1:B4:18:7E:8F:1C:C4:FE:5B
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e322e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:cd:f4:3e:ee:f7:12:7c:bb:a2:33:9f:80:42:ba:26:81:48:
         5f:f9:3f:fe:bb:66:88:b3:b5:07:f2:7a:f7:58:59:03:67:84:
         54:a7:a8:41:7c:10:74:35:38:71:00:99:12:7a:ba:38:48:ef:
         1b:10:57:66:44:59:b7:4f:27:b3:22:7e:57:9a:51:2b:c9:0e:
         bf:e3:08:f7:5e:ce:38:64:0d:a1:3b:bd:54:d9:8c:09:41:49:
         98:46:5e:42:25:53:ec:fc:51:00:8c:5d:d7:c6:ce:57:3b:d3:
         cc:0c:ee:6c:a4:77:22:9f:1f:df:98:89:64:27:6b:96:26:bd:
         5b:f5:ad:6e:00:d5:38:3b:07:97:a5:91:68:3d:8d:31:42:99:
         50:21:7c:cb:49:91:72:4b:38:7b:7a:6f:e6:c3:e8:d1:3e:7f:
         91:de:2f:a5:ab:a5:67:cb:25:64:8f:99:d9:e7:5e:67:e4:19:
         0a:0d:f0:28:fd:11:ac:ed:49:30:53:16:f9:66:ba:6d:e2:9e:
         21:52:83:bb:06:48:47:1e:23:31:de:4b:45:c3:7a:db:44:05:
         20:1e:7c:e7:ad:06:e4:8f:38:18:5e:76:8e:52:10:92:a0:99:
         18:37:45:cd:c0:4d:07:fd:b9:93:11:f8:cd:12:41:46:b3:ad:
         44:30:2a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org