Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132302e302f32322d3234203d3e20323633393830.roa
File: 3137302e3234352e3132302e302f32322d3234203d3e20323633393830.roa (raw, json)
Hash identifier: zdW5v/zAYbBEj70AlVrbrumDpeQE+pigRY6u/GG7+LQ=
Subject key identifier: 41:A1:85:EC:91:6D:27:AF:09:16:A4:74:88:2A:0B:B8:04:D9:11:2D
Certificate issuer: /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial: 254EAB4ACF28609A4F549C371CDA5261BC7E57A5
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132302e302f32322d3234203d3e20323633393830.roa
Signing time: Wed 05 Jun 2024 18:37:17 +0000
ROA not before: Wed 05 Jun 2024 18:32:17 +0000
ROA not after: Wed 04 Jun 2025 18:37:17 +0000
asID: 263980
IP address blocks: 170.245.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 12:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4e:ab:4a:cf:28:60:9a:4f:54:9c:37:1c:da:52:61:bc:7e:57:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Validity
Not Before: Jun 5 18:32:17 2024 GMT
Not After : Jun 4 18:37:17 2025 GMT
Subject: CN=41A185EC916D27AF0916A474882A0BB804D9112D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:8f:23:22:95:76:4a:ab:d5:70:61:08:23:
e2:9e:c9:9a:f0:00:82:ec:cf:24:3a:b7:37:7d:30:
c9:3c:d6:aa:47:c7:bf:6d:53:c9:35:8c:0a:a9:cc:
90:68:8c:04:54:de:64:d3:9d:54:25:ba:31:11:32:
e7:d4:8f:77:ee:c7:14:8e:ed:f4:a1:75:96:6b:23:
39:74:f7:fb:ef:dc:f4:8d:8f:a4:e8:68:5f:19:8c:
42:83:47:78:9d:82:da:fc:f1:4d:5d:89:ca:4d:7d:
4e:7e:b3:3f:59:5d:6a:aa:72:08:04:0d:8c:66:2a:
aa:ff:0a:7f:42:2e:2c:e7:3f:bc:be:f1:bd:39:8d:
17:88:51:82:3b:71:a3:58:88:7b:53:b6:8e:b6:cc:
cb:52:66:10:e6:8b:b6:4b:de:a9:1d:b8:b0:ae:fd:
73:36:be:bc:30:7d:7d:47:41:a7:ad:2e:c4:b3:8a:
07:18:b7:15:47:c3:32:a0:eb:fe:c6:4a:5f:86:77:
32:97:49:be:fc:bf:f3:81:86:06:1b:98:74:07:1e:
e1:72:aa:f2:44:d4:f1:c8:33:d8:ab:a0:e6:43:ee:
d0:56:52:12:18:eb:6a:fb:d3:a3:ef:cf:01:99:3a:
c8:e1:35:5e:f3:06:58:f2:08:1b:89:39:f1:5b:a3:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A1:85:EC:91:6D:27:AF:09:16:A4:74:88:2A:0B:B8:04:D9:11:2D
X509v3 Authority Key Identifier:
keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132302e302f32322d3234203d3e20323633393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:eb:f9:0b:91:be:ea:16:e9:1e:e2:83:38:a7:2d:b9:1b:f9:
b6:e3:a5:57:f3:b4:29:68:7e:f2:5b:58:36:5a:c8:be:1a:38:
8d:e3:c6:cb:ce:a6:e6:fb:bb:6c:4e:7e:39:1d:72:cb:2c:e8:
2c:ec:b3:e3:b9:3e:ed:06:4a:83:d2:bd:db:92:5d:40:a9:c6:
7c:44:e4:60:9b:f1:c8:61:64:bb:d5:01:cc:58:55:7d:1b:43:
66:d3:6f:63:be:1d:22:78:3d:33:2b:7e:1a:6a:9e:53:3e:a7:
03:f7:bd:3c:aa:36:d4:8d:db:49:23:85:56:a2:db:63:f8:48:
6b:1b:23:af:61:75:62:76:2f:39:fb:c1:4b:f7:91:72:91:bc:
42:14:db:80:7f:af:1e:13:06:da:7b:11:0b:73:99:bb:b4:f4:
3e:14:02:cd:71:ab:05:0d:47:21:03:e7:2c:25:41:0c:ee:83:
eb:6e:a2:1f:5c:38:b1:8a:d9:a0:07:29:6c:d8:8b:ab:a6:92:
13:d2:52:ca:fc:e3:7a:0c:34:de:7a:08:1e:07:a5:ac:ff:d1:
fd:50:af:fd:0e:5e:15:e7:11:18:4a:63:ca:36:c7:32:cc:60:
1f:d5:a7:60:d4:72:94:c6:c4:7b:01:87:04:89:d9:db:38:1d:
05:09:cc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 16 13:49:21 2025 by rpki-client on console.sobornost.net