Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32312e302f32342d3234203d3e20323635393335.roa
File: 3136342e3136332e32312e302f32342d3234203d3e20323635393335.roa (raw, json)
Hash identifier: a0c7JXYS6L/gvjED2FwE6KrEhCSgZaR67YgknQrOmd8=
Subject key identifier: 9B:99:F2:F8:0D:9E:31:A3:4A:11:6E:38:BB:06:46:F6:B9:D6:31:5C
Certificate issuer: /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial: 3447F6052D6A0650423D0366DC5F3A919DA52D8B
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32312e302f32342d3234203d3e20323635393335.roa
Signing time: Thu 06 Mar 2025 07:52:47 +0000
ROA not before: Thu 06 Mar 2025 07:47:47 +0000
ROA not after: Thu 05 Mar 2026 07:52:47 +0000
asID: 265935
IP address blocks: 164.163.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 21:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:47:f6:05:2d:6a:06:50:42:3d:03:66:dc:5f:3a:91:9d:a5:2d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Validity
Not Before: Mar 6 07:47:47 2025 GMT
Not After : Mar 5 07:52:47 2026 GMT
Subject: CN=9B99F2F80D9E31A34A116E38BB0646F6B9D6315C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:9d:b1:57:0d:36:35:5a:60:0f:68:5d:53:
5a:d0:c4:57:65:f9:45:cf:60:6c:df:07:b2:43:09:
76:f8:18:48:ef:23:72:b5:1f:65:16:a6:6c:22:15:
50:55:fb:64:4e:63:9d:1f:81:62:18:9e:a4:d6:fb:
1c:4e:f0:87:82:73:32:b4:61:93:28:00:15:d3:13:
b8:e8:b0:0d:29:46:71:5d:cf:98:bb:8b:5b:b5:27:
ee:63:61:e2:2e:08:31:8f:ed:cb:6c:f0:79:be:94:
56:46:a5:9d:3a:bc:8b:16:22:b0:45:22:83:e9:6f:
da:d6:39:4c:16:29:a8:f5:bc:0c:24:74:df:d6:e1:
72:85:3c:04:ed:96:13:28:e7:ba:58:89:49:a0:c6:
be:9e:6f:3d:c8:6f:5a:10:c4:92:44:ad:99:c9:d0:
04:16:c2:90:bc:17:2c:62:92:ef:f2:c6:fb:78:de:
c2:50:84:6d:51:aa:22:17:a2:97:47:b0:df:69:dd:
07:ac:08:17:21:54:37:21:cf:e7:79:38:1a:cd:f4:
83:cd:42:99:8c:9c:c4:bc:71:86:df:3d:66:24:29:
8e:6d:e1:2e:26:77:73:23:b0:87:1e:0a:be:da:f0:
98:ca:87:ff:54:36:92:77:31:b5:8b:ba:1c:6c:20:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:99:F2:F8:0D:9E:31:A3:4A:11:6E:38:BB:06:46:F6:B9:D6:31:5C
X509v3 Authority Key Identifier:
keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32312e302f32342d3234203d3e20323635393335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.21.0/24
Signature Algorithm: sha256WithRSAEncryption
91:f9:a6:6b:d6:85:17:f2:ab:4d:7e:63:8e:e6:3d:3b:ea:94:
0d:f9:d1:0a:d0:60:34:16:83:80:81:88:6b:22:88:52:40:5a:
7a:dc:04:cc:29:2e:20:8b:c2:0f:8f:37:e0:0c:fc:38:39:9b:
95:1f:98:68:f6:f1:19:8a:b5:1f:59:57:1f:3a:d1:f3:34:c0:
6d:b2:fe:f2:f7:a5:3f:01:e5:57:9c:30:0a:93:7e:f1:0b:89:
0d:83:cf:e2:68:32:3d:54:21:64:b4:29:5d:1a:88:ea:a0:fc:
5e:ec:01:37:46:eb:42:3a:69:c1:a1:9d:fb:bc:b7:3e:42:25:
76:df:56:ea:b9:91:67:47:cc:a7:56:57:ec:fd:91:9d:49:4c:
4e:b8:75:00:bf:8f:5a:2e:5a:c5:53:c6:83:05:b1:e9:18:bf:
8e:2f:9a:94:3c:f1:2c:71:ed:d9:f0:67:93:c1:c8:80:23:60:
88:6a:fd:96:4c:0a:1b:f4:06:68:71:a8:6a:3f:12:18:84:18:
6b:64:31:4f:45:51:72:62:c5:04:29:94:e0:b1:78:f4:cc:4c:
c6:b0:e7:bb:4a:ac:01:c4:f8:35:4a:ce:db:8e:4c:cd:12:6b:
e5:11:37:6b:8b:4f:6f:5e:7e:58:34:05:c8:db:cd:49:dd:85:
de:24:74:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net