Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/34352e3137332e3131392e302f32342d3234203d3e20323638383130.roa
File: 34352e3137332e3131392e302f32342d3234203d3e20323638383130.roa (raw, json)
Hash identifier: Aewc7MndpnC8pBgAlmw1nsDUmpkeaLB9CeKDyJi6NrE=
Subject key identifier: 6D:98:E2:A3:1E:E6:12:24:DF:79:5B:2D:75:24:F0:90:BB:EE:61:FB
Certificate issuer: /CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
Certificate serial: 017985B94C7B1543B133CAD0529588D90EBC0A1A
Authority key identifier: 98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/34352e3137332e3131392e302f32342d3234203d3e20323638383130.roa
Signing time: Mon 16 Dec 2024 17:18:03 +0000
ROA not before: Mon 16 Dec 2024 17:13:03 +0000
ROA not after: Mon 15 Dec 2025 17:18:03 +0000
asID: 268810
IP address blocks: 45.173.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 14:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:79:85:b9:4c:7b:15:43:b1:33:ca:d0:52:95:88:d9:0e:bc:0a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
Validity
Not Before: Dec 16 17:13:03 2024 GMT
Not After : Dec 15 17:18:03 2025 GMT
Subject: CN=6D98E2A31EE61224DF795B2D7524F090BBEE61FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:69:14:10:a9:23:9e:ab:58:aa:2c:e1:4b:
64:43:3b:a7:fb:d5:5c:7f:ce:09:e2:68:18:91:9f:
65:f3:7c:26:c1:f7:30:c4:b8:af:5f:fe:f2:3e:7e:
7c:ba:71:29:9f:f0:c6:9f:87:0d:d8:d6:e5:0b:ad:
f7:30:13:74:1e:98:71:b9:07:d5:e1:b7:8b:c5:8e:
fa:4a:18:60:f3:8f:a3:ef:31:16:02:dd:64:ff:73:
77:80:7a:5e:ce:84:f0:71:73:c4:c0:8b:40:98:b2:
b9:59:67:28:61:90:fc:29:07:ef:12:16:d0:2d:4a:
a9:85:f1:6e:4f:95:84:f8:a1:27:e6:26:bb:9b:73:
d3:05:0d:d4:85:65:5a:d3:fc:0d:4e:28:54:44:b1:
10:b6:db:b7:00:b8:10:87:71:1e:37:d3:4f:8f:e1:
e5:a8:10:bd:38:c3:aa:61:db:19:cf:cd:7c:93:17:
ee:54:82:29:bd:f8:6b:6a:0d:3a:28:fc:a3:8b:d4:
fd:d6:b3:12:da:55:b4:c4:f8:f1:5f:5d:af:0b:eb:
04:09:00:0b:04:51:1d:45:ec:18:eb:1e:1a:29:22:
b7:7b:45:be:bc:c7:27:82:b1:8a:02:27:c7:e0:3f:
f9:27:c8:5b:36:90:0e:78:6b:b9:96:86:13:9f:dc:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:98:E2:A3:1E:E6:12:24:DF:79:5B:2D:75:24:F0:90:BB:EE:61:FB
X509v3 Authority Key Identifier:
keyid:98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/34352e3137332e3131392e302f32342d3234203d3e20323638383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.119.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c0:3c:ce:64:fb:83:8e:c8:39:ed:36:d5:bf:11:5f:d8:c2:
86:88:19:d9:55:37:79:73:9e:8a:86:88:0f:73:91:2f:28:9b:
af:3d:5a:ac:fc:d7:e8:82:49:e4:37:10:6f:48:d4:1e:4f:38:
e2:c5:db:09:ca:90:1f:45:93:38:c7:e0:a3:c9:29:b2:22:fe:
2c:dc:01:a5:66:44:e2:db:87:74:43:7e:87:2d:f7:4b:50:f0:
f7:08:4b:31:b4:a6:50:32:e0:1a:04:42:88:6b:10:3a:18:70:
13:d6:60:fb:01:cc:76:28:fb:e1:dc:7c:94:a9:c8:72:6e:5f:
7f:bd:ab:a6:93:cd:d7:5c:86:33:2f:59:f8:78:ff:00:3c:a3:
5e:b5:0e:24:cb:f6:d0:24:00:f1:9c:cc:1d:c2:8d:97:56:ce:
7b:30:e0:90:a3:8d:e7:ca:3a:21:6c:5c:ad:02:01:76:6f:d3:
cb:6f:e1:31:cb:7d:4c:24:90:13:64:56:f9:5b:a2:f1:b5:61:
28:54:2a:24:e1:99:0d:61:6f:1f:9f:03:8f:16:62:f0:9d:9f:
11:43:5b:bf:81:7e:2a:3c:1d:4b:81:a1:7e:9e:f0:b4:81:2d:
38:39:fa:04:31:6f:72:ad:69:74:d3:b9:dd:c8:0a:36:e9:98:
c6:6a:14:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 17 15:46:04 2024 by rpki-client on console.sobornost.net