Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230302e302f32342d3234203d3e20323638303333.roa
File: 34352e3136362e3230302e302f32342d3234203d3e20323638303333.roa (raw, json)
Hash identifier: HdUehb0Mmbe+x4wu0FjORciJ+5rVu/Qy4t07qEcScVg=
Subject key identifier: 92:88:CE:18:A5:14:65:47:A7:D0:93:E3:DE:FF:BC:44:59:7C:78:1C
Certificate issuer: /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial: 646D3C9CD61FEA706474A3F5B40101F90B0D23FC
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230302e302f32342d3234203d3e20323638303333.roa
Signing time: Thu 10 Apr 2025 12:16:51 +0000
ROA not before: Thu 10 Apr 2025 12:11:51 +0000
ROA not after: Thu 09 Apr 2026 12:16:51 +0000
asID: 268033
IP address blocks: 45.166.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 12:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:6d:3c:9c:d6:1f:ea:70:64:74:a3:f5:b4:01:01:f9:0b:0d:23:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Validity
Not Before: Apr 10 12:11:51 2025 GMT
Not After : Apr 9 12:16:51 2026 GMT
Subject: CN=9288CE18A5146547A7D093E3DEFFBC44597C781C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:3e:b2:3a:c6:b9:9f:12:71:01:d5:b6:d2:
2e:86:d9:b1:39:11:bd:e1:09:98:0d:34:c3:a4:77:
bf:1e:1d:50:3a:c9:e9:b7:72:e3:57:52:ee:62:2f:
03:e4:9b:47:76:f6:42:e7:ec:df:7a:b6:00:26:7e:
04:36:67:d8:13:c7:4a:fa:28:16:3c:6e:54:77:aa:
a9:4a:f2:59:19:76:c1:37:1a:9d:3b:99:22:20:f0:
b8:4c:d1:9f:9c:35:2f:02:63:3b:e7:96:b0:9a:cb:
64:50:1e:3b:0b:e6:31:b6:cc:94:68:06:56:e8:dc:
51:95:2d:cc:59:09:c8:7f:1b:2e:21:a9:76:61:d9:
2e:bb:0c:65:39:ba:f1:e9:5a:30:c2:93:cb:3c:e1:
b3:01:5f:be:90:2b:bb:36:3c:11:14:ba:35:70:01:
37:62:94:fc:8e:9e:d9:21:cf:7d:24:1b:91:ae:b8:
c0:49:78:7d:31:ec:f2:c0:72:4e:1a:d2:98:07:e8:
f1:6c:bb:3e:82:b9:44:b2:e1:a3:51:15:93:ff:24:
b1:24:c9:09:fd:fa:10:2c:6a:5b:8a:44:c0:b5:ee:
a3:a1:23:01:d0:86:1e:3b:6e:b1:8c:77:49:0b:bd:
47:4e:1a:5c:c3:e9:fa:78:5b:00:d6:37:6c:89:d0:
43:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:88:CE:18:A5:14:65:47:A7:D0:93:E3:DE:FF:BC:44:59:7C:78:1C
X509v3 Authority Key Identifier:
keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230302e302f32342d3234203d3e20323638303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b0:9b:f9:76:8e:12:36:70:c6:46:e2:28:2f:2b:92:16:5f:
c9:a4:c6:26:88:24:43:ec:35:db:66:a6:bf:39:74:f9:a7:94:
34:61:ab:9b:46:00:60:6b:e5:c7:7f:4e:65:1a:71:b4:4a:86:
74:e5:1f:72:a1:e9:7c:c6:07:0e:e5:e2:e9:b1:12:d9:ac:20:
9f:58:7d:a8:00:f3:17:e5:0e:f8:6c:5f:89:6a:43:3e:0d:4e:
64:df:26:90:ad:9d:4b:df:ed:61:ff:25:e6:1b:4e:66:eb:99:
db:93:9d:c1:79:87:92:48:e3:77:36:9e:cb:b8:09:55:2f:3d:
cf:81:57:ac:29:e2:db:c2:03:99:6b:15:8c:5d:df:be:22:d4:
9f:eb:91:c8:8f:61:9a:57:8a:fd:60:72:f5:fc:70:38:5d:58:
8d:94:79:74:0f:d7:87:20:69:db:7a:94:bb:38:73:fb:eb:1c:
39:03:9c:8d:ee:39:e3:5f:f7:2a:08:e9:a0:52:b0:9b:6c:e0:
2e:a6:75:fa:2e:ec:6d:a2:c5:83:4e:27:5f:93:6e:50:9f:52:
6f:7d:e2:ca:95:4e:30:de:b2:5a:c2:7c:77:7f:41:5e:1e:e6:
ed:a3:19:64:9b:b7:a7:00:d8:04:ff:f3:18:39:d2:7a:17:b3:
d2:8f:78:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:08 2025 by rpki-client on console.sobornost.net