Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230302e302f32322d3232203d3e20323638303333.roa
File: 34352e3136362e3230302e302f32322d3232203d3e20323638303333.roa (raw, json)
Hash identifier: nvqqSZGS8IHeheG5gcx//6axIXrRkuodLbSsK8uycTU=
Subject key identifier: D0:0E:F7:1B:66:07:91:C3:23:18:31:2C:0D:19:DA:EF:88:93:72:D4
Certificate issuer: /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial: 1BF797B6405CCE358410847058F46319BC03248A
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230302e302f32322d3232203d3e20323638303333.roa
Signing time: Thu 10 Apr 2025 12:16:53 +0000
ROA not before: Thu 10 Apr 2025 12:11:53 +0000
ROA not after: Thu 09 Apr 2026 12:16:53 +0000
asID: 268033
IP address blocks: 45.166.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 14 Apr 2025 12:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:f7:97:b6:40:5c:ce:35:84:10:84:70:58:f4:63:19:bc:03:24:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Validity
Not Before: Apr 10 12:11:53 2025 GMT
Not After : Apr 9 12:16:53 2026 GMT
Subject: CN=D00EF71B660791C32318312C0D19DAEF889372D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:06:99:e5:91:70:82:e5:4c:7c:76:7c:6a:
33:45:8a:e4:77:3a:43:77:2b:88:8b:b2:69:0d:fb:
be:65:de:3e:29:12:96:32:c1:76:52:e1:24:de:d3:
c5:6d:2c:27:ae:2a:14:a1:e4:b4:6b:a8:48:2a:0e:
28:15:55:d4:ac:da:a9:74:0f:44:75:3f:c4:ff:30:
69:a7:cb:83:85:18:8c:a4:d1:db:66:c8:bb:6f:19:
51:26:7f:4a:34:6a:67:6c:58:30:08:ae:5e:8c:b8:
ac:59:3c:cc:b0:4b:1a:e1:f2:b3:33:a2:48:e5:98:
03:33:ff:b9:4c:f8:92:5d:dc:7d:53:34:99:ac:0b:
35:95:8e:01:b1:4d:db:a9:58:b9:f1:73:1d:35:bf:
69:cb:53:3d:96:db:3b:4d:43:57:2e:17:82:08:dc:
36:55:10:9f:1c:f1:18:7e:4c:7e:0f:eb:14:4b:fc:
ae:d2:86:07:49:02:99:d4:92:2c:4e:3f:14:90:8f:
a2:75:1b:81:9f:3c:57:7a:5a:fb:d1:12:0b:9f:8c:
ec:d9:a8:b8:6a:27:81:36:9e:e8:ab:18:b3:2d:8f:
17:e4:9a:86:0a:47:ae:e5:5e:66:8d:94:68:38:a0:
a0:2d:1e:ff:dc:c2:c1:40:c3:3e:ea:15:22:bc:4f:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0E:F7:1B:66:07:91:C3:23:18:31:2C:0D:19:DA:EF:88:93:72:D4
X509v3 Authority Key Identifier:
keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230302e302f32322d3232203d3e20323638303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.200.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:37:f2:38:10:60:1b:58:2d:b7:35:14:49:a4:83:0a:b6:24:
01:f2:28:90:c8:2a:09:2a:21:9d:1d:96:bc:33:27:42:2a:b9:
c1:bd:2b:40:7b:77:ae:b4:30:13:50:db:d5:6b:59:6f:65:0f:
3e:a2:88:7d:73:9c:40:74:30:a0:2d:35:43:47:a9:15:8f:c8:
e7:fc:c7:0a:95:2b:27:ab:da:30:0d:93:97:ef:89:e1:59:04:
68:18:53:3c:1f:c7:6e:8e:b1:e6:04:70:65:3a:bd:67:dc:47:
27:6f:7a:8c:f0:bd:fa:4a:94:b6:86:1c:66:77:aa:da:f4:e9:
54:a6:6c:4a:da:37:bf:84:1d:90:36:6f:7d:93:cf:70:cd:a1:
59:e4:07:50:22:03:46:1d:39:63:ee:6a:e0:7d:db:73:7e:f9:
22:f1:36:ff:6b:9a:86:4c:70:96:32:1a:1f:80:0a:62:43:7f:
00:ae:d0:cd:64:e5:f3:26:bf:29:80:81:70:49:35:d0:30:e2:
b4:9c:29:32:ba:fb:34:85:af:95:8a:c8:9e:02:2b:a5:cb:a5:
77:99:b8:1a:a2:d0:d2:f9:b7:cb:5c:91:db:73:40:41:a6:b6:
68:53:08:ae:f8:b8:8a:1a:54:59:b0:90:52:6f:90:85:dc:b7:
f1:a4:ba:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:08 2025 by rpki-client on console.sobornost.net