Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230332e302f32342d3234203d3e20323638303333.roa
File: 34352e3136362e3230332e302f32342d3234203d3e20323638303333.roa (raw, json)
Hash identifier: zgqJcv6Qfmxbx6VKfv3EibXZRr6ZxoPw+hK9WmnKRnw=
Subject key identifier: 3F:EA:0A:01:97:9F:5C:6A:A6:C0:07:49:02:FA:D9:9F:21:6A:88:6A
Certificate issuer: /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial: 75D81B9F6DF5695F1E576F8E3EA785C71DD70E0F
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230332e302f32342d3234203d3e20323638303333.roa
Signing time: Thu 10 Apr 2025 12:16:52 +0000
ROA not before: Thu 10 Apr 2025 12:11:52 +0000
ROA not after: Thu 09 Apr 2026 12:16:52 +0000
asID: 268033
IP address blocks: 45.166.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 12:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:d8:1b:9f:6d:f5:69:5f:1e:57:6f:8e:3e:a7:85:c7:1d:d7:0e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Validity
Not Before: Apr 10 12:11:52 2025 GMT
Not After : Apr 9 12:16:52 2026 GMT
Subject: CN=3FEA0A01979F5C6AA6C0074902FAD99F216A886A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:32:a8:03:d4:f0:38:d8:f4:5e:22:be:01:
20:b3:cc:aa:4c:04:24:5b:f8:df:d8:ba:eb:1c:8d:
25:05:60:15:54:10:7e:9b:87:54:13:fa:05:0a:f6:
6f:55:09:54:ff:ae:72:03:ed:1d:82:fc:b4:4f:41:
db:87:3c:64:24:ba:c2:2a:fc:0f:ff:f9:4d:a2:22:
06:b3:4b:2c:65:d6:23:2d:85:fa:3f:b0:b4:2b:e8:
9f:6d:4a:6b:27:79:6a:07:88:05:77:97:6e:e1:8b:
d8:5c:46:a3:86:2a:6f:09:ee:4e:99:09:b4:fc:ff:
12:dc:9d:42:4d:3d:a4:d0:ff:bc:74:5d:f1:52:04:
0b:ec:f2:d8:72:e6:c7:84:85:78:51:28:03:e4:f1:
70:b7:b2:3a:68:85:f0:8d:38:e7:5b:13:d3:d6:5d:
6d:8f:0a:a3:46:4a:70:76:4f:e1:d5:76:63:98:b4:
34:57:b2:68:18:cc:d5:20:4c:c9:14:35:e4:63:65:
9a:18:0a:85:7c:be:77:83:a5:48:68:00:83:23:8f:
14:d8:6f:24:9e:61:ea:bb:c6:ac:9b:08:fd:c8:9a:
7f:b9:19:90:b1:82:39:e8:24:f8:8c:38:ae:14:68:
7f:60:2a:93:fd:bf:5b:2b:13:b4:39:0d:be:9b:0e:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EA:0A:01:97:9F:5C:6A:A6:C0:07:49:02:FA:D9:9F:21:6A:88:6A
X509v3 Authority Key Identifier:
keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230332e302f32342d3234203d3e20323638303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.203.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:58:5e:85:b5:8e:ac:c1:e1:12:11:57:d7:54:a7:43:aa:b9:
53:72:ef:39:10:d5:c4:df:67:bc:33:f4:1a:99:48:fd:dc:e8:
cb:ff:9e:22:96:80:a8:b6:87:9b:9f:27:fa:56:25:d2:ac:59:
07:0a:ec:52:45:e5:6b:bf:b8:ec:39:28:17:0e:f0:eb:2a:24:
4c:f8:c4:cc:0f:b0:16:b1:3e:fc:1d:70:b5:50:ad:36:84:86:
1b:b1:96:35:02:20:6e:87:03:f7:95:93:9f:32:98:76:a3:0b:
00:db:eb:67:53:3c:d0:30:9b:01:6d:4e:07:2d:29:fb:5b:92:
bb:19:aa:6e:f5:6d:03:99:37:3c:ac:85:33:31:cf:a4:41:07:
4a:19:f3:32:32:c1:db:f7:70:33:c2:f1:c4:62:c7:44:5a:15:
48:c8:74:b1:c8:99:8c:08:cf:62:91:ab:64:1b:10:01:98:a1:
16:f0:c7:7c:19:0b:4b:e3:df:c9:6e:0c:18:e3:6f:62:e0:8e:
c6:c7:0f:51:45:1f:a9:74:d7:88:aa:39:89:48:57:27:b5:d6:
b2:a0:e4:a2:cb:0b:21:04:c5:3f:39:50:fa:fa:6a:80:9e:d2:
4c:96:79:be:70:f4:41:0e:3d:26:ed:fe:d4:b9:f7:0f:9a:50:
03:d3:22:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:08 2025 by rpki-client on console.sobornost.net