Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/34352e3233382e34352e302f32342d3234203d3e20323638333132.roa
File: 34352e3233382e34352e302f32342d3234203d3e20323638333132.roa (raw, json)
Hash identifier: ufts9mAIezP+IJpQxiULahb22bGS8Y4XjSVAGCE4J04=
Subject key identifier: DB:14:7A:58:7B:69:EB:B0:22:6E:BC:21:C7:97:EB:5A:4F:EF:DB:61
Certificate issuer: /CN=1A1E771886DB4FAE27F017DADDDAE982732C274F
Certificate serial: 34D65B9235BD219C865B6DD9668F28580D974A12
Authority key identifier: 1A:1E:77:18:86:DB:4F:AE:27:F0:17:DA:DD:DA:E9:82:73:2C:27:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/34352e3233382e34352e302f32342d3234203d3e20323638333132.roa
Signing time: Mon 05 Dec 2022 12:22:36 +0000
ROA not before: Mon 05 Dec 2022 12:17:36 +0000
ROA not after: Mon 04 Dec 2023 12:22:36 +0000
asID: 268312
IP address blocks: 45.238.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d6:5b:92:35:bd:21:9c:86:5b:6d:d9:66:8f:28:58:0d:97:4a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A1E771886DB4FAE27F017DADDDAE982732C274F
Validity
Not Before: Dec 5 12:17:36 2022 GMT
Not After : Dec 4 12:22:36 2023 GMT
Subject: CN=DB147A587B69EBB0226EBC21C797EB5A4FEFDB61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:c1:5c:65:75:11:7e:de:91:0e:3b:ee:2f:
55:93:36:4b:ea:62:40:2f:cb:24:45:26:86:d1:29:
14:63:10:6b:e2:37:1a:55:96:4b:36:12:18:35:b1:
1d:b9:03:35:ba:5b:69:8e:c7:4d:c3:16:22:74:4c:
ea:5e:64:5a:77:2e:3d:f8:94:4d:1a:74:4a:b1:b0:
27:45:de:e5:ad:f5:73:4e:72:9d:90:2f:f6:90:32:
2d:03:71:26:3a:02:07:5c:b0:85:02:4e:2c:4f:b8:
b1:e9:fb:43:7b:92:21:e9:69:dd:3a:62:d4:c8:ec:
35:83:8a:f4:ef:ed:0f:04:ff:27:53:20:c7:77:ec:
04:f3:91:1c:01:71:61:78:6a:e0:aa:e7:02:4c:05:
ca:86:a4:5b:cb:06:15:9b:3d:a5:7a:e5:3b:4b:79:
66:8a:b5:6f:aa:1c:6c:01:5f:4e:47:bb:95:55:ff:
ac:27:1c:41:56:e5:b8:11:76:33:c6:0a:4b:38:92:
bb:61:35:e9:28:1d:7c:7e:a0:a5:bf:b2:e6:81:9e:
9e:60:38:4c:57:22:04:99:a6:e0:20:04:65:ce:42:
69:fb:63:65:d9:83:58:29:15:93:21:71:b1:77:76:
1a:b1:e0:50:07:59:f4:06:c1:2f:03:9a:19:68:30:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:7A:58:7B:69:EB:B0:22:6E:BC:21:C7:97:EB:5A:4F:EF:DB:61
X509v3 Authority Key Identifier:
keyid:1A:1E:77:18:86:DB:4F:AE:27:F0:17:DA:DD:DA:E9:82:73:2C:27:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/34352e3233382e34352e302f32342d3234203d3e20323638333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.45.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:06:2f:2e:35:4d:3b:0e:7d:42:89:d3:9b:47:4f:85:c4:e1:
92:01:14:90:90:09:47:3b:87:73:e5:81:74:b1:e4:38:5e:59:
ea:85:ab:25:51:c5:d7:e9:cb:d6:6b:e9:6b:bf:23:d5:0c:a4:
c1:b6:4a:51:67:82:29:40:5b:2a:5a:0f:67:bd:b7:78:87:c0:
98:b7:a3:99:c6:e5:ac:c1:24:fc:82:dd:e4:2c:43:6f:f1:e8:
8c:56:da:70:fb:90:53:2a:32:bf:87:c3:47:87:89:4d:0d:7b:
f9:ea:66:55:60:43:e6:85:44:e5:44:d3:40:2a:7a:60:a5:a4:
7a:9b:9f:b2:62:19:01:ff:4e:56:d5:95:44:3d:19:33:a7:9a:
f3:ab:c9:d8:d4:ce:9f:fc:be:a1:e6:66:92:aa:af:e4:ce:86:
34:7c:da:3a:b0:7c:c3:49:71:ac:c6:ef:46:ee:6d:dd:3f:2b:
69:72:1c:cc:a5:dc:0e:49:8d:0d:07:d2:f0:41:2e:39:e3:5b:
ff:bd:f7:93:f2:70:9c:e2:9b:2a:29:ae:9d:20:1a:ed:f2:86:
71:5f:11:ba:34:a6:1a:e3:7f:d1:f2:fa:49:bd:32:1b:10:01:
84:85:fa:26:77:ff:23:3e:8d:67:52:61:e1:7f:12:de:5b:14:
dc:22:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:21 2023 by rpki-client on console.sobornost.net