Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e342e302f32332d3233203d3e203631393030.roa
File: 3137302e3234372e342e302f32332d3233203d3e203631393030.roa (raw, json)
Hash identifier: rbuN3NnW03K/hvvFKIOev013Ea3dDf55Sofe5oNyVOY=
Subject key identifier: DA:D8:43:68:E6:BA:6B:C1:AE:33:C7:D2:83:F9:41:1D:0D:A5:25:A5
Certificate issuer: /CN=717D62DB604520975DE382D0D3273E1BDB591D67
Certificate serial: 3EBD3050D0606707B1E7E28C64A71FFE0E33E15A
Authority key identifier: 71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e342e302f32332d3233203d3e203631393030.roa
Signing time: Wed 16 Apr 2025 14:07:49 +0000
ROA not before: Wed 16 Apr 2025 14:02:49 +0000
ROA not after: Wed 15 Apr 2026 14:07:49 +0000
asID: 61900
IP address blocks: 170.247.4.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 16 Apr 2025 18:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:bd:30:50:d0:60:67:07:b1:e7:e2:8c:64:a7:1f:fe:0e:33:e1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717D62DB604520975DE382D0D3273E1BDB591D67
Validity
Not Before: Apr 16 14:02:49 2025 GMT
Not After : Apr 15 14:07:49 2026 GMT
Subject: CN=DAD84368E6BA6BC1AE33C7D283F9411D0DA525A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:85:c5:65:18:3c:57:b0:61:62:8e:3c:98:22:
fd:02:78:d5:28:3e:3b:ac:fb:94:ea:5a:f3:92:7d:
d2:f2:f2:67:59:9d:40:4b:58:e7:a1:46:6d:73:3f:
a0:a7:f5:fc:7e:4f:89:fb:38:b1:bd:35:ae:a3:28:
48:a4:8d:e0:50:59:14:56:49:d8:83:8f:d3:1a:7c:
20:64:55:0e:1e:7b:a0:79:1c:2e:fe:cc:c7:17:75:
b5:88:84:98:f8:fe:28:0b:00:d0:c9:b2:d5:77:76:
9a:2d:47:b4:05:e4:f0:6d:6d:2d:bf:01:7a:a3:ab:
b6:db:c9:88:26:25:1c:87:d1:14:e4:df:64:71:bd:
79:83:98:bf:8b:e9:ee:a8:80:86:c3:95:13:17:22:
e8:b4:6d:59:5a:6e:ae:fc:2e:df:54:48:4a:24:a2:
35:ac:f2:bc:47:c1:80:0e:d0:f4:16:3f:4d:8f:e0:
95:15:73:b2:c9:8f:10:5f:19:3f:2b:da:3e:21:06:
60:ad:bb:3a:a5:78:6a:3b:a4:1e:3e:fb:cc:a0:27:
20:c2:f7:15:d3:44:2b:1b:4c:b3:0d:34:6b:84:bc:
ee:90:b6:5c:a3:c8:16:36:db:c2:51:ea:97:f7:6c:
ce:8e:90:50:d8:9f:96:08:f2:a3:17:e7:25:91:d7:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D8:43:68:E6:BA:6B:C1:AE:33:C7:D2:83:F9:41:1D:0D:A5:25:A5
X509v3 Authority Key Identifier:
keyid:71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e342e302f32332d3233203d3e203631393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.4.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:5d:dc:1a:6a:5e:4e:e6:85:8f:2f:f2:42:2f:ac:9b:34:f8:
a3:dd:62:3f:fd:47:aa:13:de:ca:e0:d3:bb:0e:66:04:c5:5a:
b4:6e:ce:f6:a5:45:4a:b1:9c:cb:bc:65:57:60:b3:3e:d4:e4:
2f:7a:7e:91:18:7a:a0:a4:b2:e1:fe:0a:6c:1e:04:91:b8:14:
d1:dc:f1:41:e7:75:bc:26:43:00:56:7a:9d:dd:74:0e:0c:69:
51:a8:fd:bb:7f:a2:22:c6:61:5b:f2:16:40:0b:c0:2f:8b:98:
86:83:30:6d:2b:5e:f9:7e:57:af:c4:30:8c:e0:3d:52:35:ba:
7b:02:fc:cb:0e:7d:30:36:ff:7d:72:f3:bb:14:ab:99:e0:f0:
5c:43:f2:66:ac:a5:8f:6e:4c:e7:f6:64:8c:53:e3:47:ce:d5:
7d:48:6d:22:88:db:34:e5:83:85:4b:7f:7a:2a:18:e4:1e:f5:
89:06:1c:80:49:04:2c:56:94:0b:46:35:46:d1:af:e4:7b:19:
33:1c:d8:02:e2:03:c7:b4:16:be:ee:15:d0:27:fd:ee:73:d9:
62:fd:48:05:46:45:2a:bd:f9:36:83:27:4d:ce:3f:c8:dd:21:
73:f3:62:c1:9d:cc:8d:1d:50:18:07:4a:00:da:19:35:69:0d:
b1:2f:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:42:22 2025 by rpki-client on console.sobornost.net