Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137372e38392e302e302f31362d3136203d3e203238323230.roa
File: 3137372e38392e302e302f31362d3136203d3e203238323230.roa (raw, json)
Hash identifier: kUv7b8xYfJfTyTS9GdwRQDSLCdCwerR17aMWvMJTNjU=
Subject key identifier: 7C:07:B5:85:2E:61:3B:DC:5A:7A:80:FB:0D:18:19:8D:5D:C4:D9:72
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 5A05A77FE3F90B6D43285A50EBE7A1DB157BFD61
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137372e38392e302e302f31362d3136203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:27 +0000
ROA not before: Mon 08 Apr 2024 20:00:27 +0000
ROA not after: Mon 07 Apr 2025 20:05:27 +0000
asID: 28220
IP address blocks: 177.89.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 09 Apr 2024 20:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:05:a7:7f:e3:f9:0b:6d:43:28:5a:50:eb:e7:a1:db:15:7b:fd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:27 2024 GMT
Not After : Apr 7 20:05:27 2025 GMT
Subject: CN=7C07B5852E613BDC5A7A80FB0D18198D5DC4D972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1b:24:d8:aa:68:ed:e4:38:75:c4:ef:97:f8:
da:ec:90:af:75:76:c8:0a:c8:33:3c:56:9b:24:34:
06:c0:9d:d3:f3:a1:e8:c1:b9:3f:ce:af:72:2c:99:
b0:f7:31:dd:00:64:ff:19:2a:6c:a7:cc:ed:c4:5f:
90:7f:a8:0f:1b:fb:a1:11:94:9e:ad:4c:8b:76:db:
11:1d:09:c5:87:bc:8e:35:ae:b2:9b:ee:61:d3:81:
a7:db:33:1a:74:9b:2d:98:62:89:45:14:19:1a:aa:
7b:53:d4:0a:f9:57:98:51:ee:d3:8b:e0:39:e9:a2:
e0:f2:66:ef:79:51:b4:02:b6:4d:95:20:07:7f:f8:
b1:01:94:ac:a7:c6:de:cd:91:89:ea:5f:d0:71:ab:
60:20:1d:9b:d1:37:b7:6a:8d:e1:59:27:dd:18:ff:
c3:c1:56:c3:a7:ab:78:7d:0c:93:d5:10:64:82:17:
e2:fa:3d:80:1a:03:23:a8:98:19:1f:0d:f6:d3:c3:
d4:c3:8b:60:19:ba:67:58:b1:83:c4:2d:85:73:03:
4e:98:e6:1d:b7:62:18:3a:2b:e8:98:79:fa:e2:3d:
4d:8d:10:e7:5e:5a:e8:90:8c:7a:52:19:0a:de:64:
d2:d8:a0:fb:8a:5e:a3:67:38:3c:7d:3c:14:e3:fb:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:07:B5:85:2E:61:3B:DC:5A:7A:80:FB:0D:18:19:8D:5D:C4:D9:72
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137372e38392e302e302f31362d3136203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:20:32:ee:57:5d:a0:e1:d6:f1:7f:60:3f:0f:88:6a:bc:94:
1d:e6:63:02:9f:e1:9d:0f:bb:8f:12:39:7d:79:6d:65:1e:c8:
d2:84:da:cd:d5:63:24:83:53:da:5e:d0:ea:1e:4e:eb:e7:40:
c7:b5:9d:f8:92:6f:8b:9c:00:a6:b4:a6:e0:03:87:97:e4:ed:
a3:2c:61:36:d5:4d:1f:4e:8c:06:32:fa:42:42:2f:60:39:0e:
e4:7a:74:79:3d:e3:87:1c:6c:ba:50:8a:cb:5b:74:25:46:7b:
21:5f:cf:04:ea:b8:e6:70:a4:7d:da:29:db:d4:1e:61:d8:4c:
c7:01:1a:22:77:17:c2:b6:d0:ef:db:d1:27:45:20:a0:d3:ff:
fa:f2:27:3b:39:2c:30:e3:30:bf:0e:75:1f:97:20:2e:79:ff:
90:e5:79:fa:20:ec:43:1c:b8:70:06:cd:4f:f7:b8:28:9f:a2:
71:89:08:b7:47:47:63:cc:1e:12:b9:1c:77:3a:43:36:18:f5:
28:9d:52:9e:79:af:17:35:82:28:4a:06:ad:a6:fa:ea:5a:30:
1d:85:ad:ea:eb:67:03:08:4b:e9:0d:03:c8:a1:8c:43:5a:6c:
dd:01:d3:4a:b3:28:db:57:84:c9:6f:4d:17:ce:b9:cc:f1:4a:
07:6e:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 00:28:30 2024 by rpki-client on console.sobornost.net