Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130342e302f32342d3234203d3e20323730363834.roa
File: 3230302e3138372e3130342e302f32342d3234203d3e20323730363834.roa (raw, json)
Hash identifier: wQtcohkGTEuaxwqF4aiVQd7vqGvTwh7KAc0LTe8WiaI=
Subject key identifier: EA:D6:A1:CA:AF:A8:F8:05:A7:22:FE:16:F5:B1:6F:FB:24:DD:C0:BF
Certificate issuer: /CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Certificate serial: 3631FB9F903D67AE7E6DCC00063A9CF0BC52BA0B
Authority key identifier: 89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130342e302f32342d3234203d3e20323730363834.roa
Signing time: Tue 08 Oct 2024 11:00:20 +0000
ROA not before: Tue 08 Oct 2024 10:55:20 +0000
ROA not after: Tue 07 Oct 2025 11:00:20 +0000
asID: 270684
IP address blocks: 200.187.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 13:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:31:fb:9f:90:3d:67:ae:7e:6d:cc:00:06:3a:9c:f0:bc:52:ba:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Validity
Not Before: Oct 8 10:55:20 2024 GMT
Not After : Oct 7 11:00:20 2025 GMT
Subject: CN=EAD6A1CAAFA8F805A722FE16F5B16FFB24DDC0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:3e:f5:8f:36:2b:f3:d7:64:22:5a:05:90:
af:31:a7:51:85:f5:77:b5:76:e2:08:e4:ac:d1:32:
8c:55:1c:bd:97:c6:74:d7:46:c8:f2:89:a4:0b:7e:
52:42:9a:50:0d:1d:56:80:97:4f:72:da:b2:ef:8e:
e9:90:e5:6d:6c:10:2c:ec:b8:bd:87:4e:81:9f:35:
81:d6:b7:c3:08:7f:e4:1f:cd:c5:4c:88:05:46:36:
fb:e5:55:cb:af:4a:de:dc:91:f5:20:d2:11:ee:9f:
0a:8c:cd:d5:af:54:46:62:1f:93:08:c4:fd:a0:35:
81:59:f0:f0:e5:22:d8:0b:86:b5:ab:78:e9:bf:8c:
3e:91:f7:98:2f:dc:c5:bd:96:36:47:34:35:e7:36:
76:be:22:99:54:cf:a7:cb:c8:e1:e0:b2:ef:16:99:
66:c5:df:f7:ec:df:6d:49:c2:21:ab:df:b1:94:ad:
cf:d4:5c:cf:93:10:bc:e3:48:74:63:31:77:1e:27:
54:eb:59:53:36:0d:b1:bb:2b:d2:70:5b:ac:f2:5a:
6f:9f:1c:c8:76:e9:23:32:0e:1d:87:0c:2a:f4:a6:
03:f7:59:e5:38:67:e8:ef:93:ee:56:46:0b:c9:f3:
34:59:ee:b1:72:36:f3:cc:8c:58:b5:10:f4:5a:cc:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D6:A1:CA:AF:A8:F8:05:A7:22:FE:16:F5:B1:6F:FB:24:DD:C0:BF
X509v3 Authority Key Identifier:
keyid:89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130342e302f32342d3234203d3e20323730363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.187.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a2:39:73:e9:92:5f:dd:db:03:d0:33:a9:54:ec:97:d9:a9:
c0:8f:33:f9:9c:74:0a:a8:e9:d6:32:03:b5:45:21:8a:9a:68:
9c:36:b9:f8:79:a7:35:8d:d2:3d:4f:1c:cd:bc:a7:20:81:1b:
87:ea:7f:b4:4b:07:b5:b4:ad:ec:f3:bc:f5:aa:b0:62:cc:b6:
1d:cc:6e:41:bb:fd:8f:24:cb:14:c3:a2:1f:9b:cd:e1:aa:ff:
53:d8:e6:de:74:b0:fa:a0:92:83:51:bf:5e:99:c5:7d:1e:e1:
40:56:46:06:dc:5f:d5:da:8d:b0:e3:d0:60:bc:6b:a3:1e:fd:
b5:69:f6:a3:73:7d:89:45:d6:e9:cd:59:43:76:4b:d1:2f:97:
ab:2d:ee:9a:4b:87:e8:ac:e2:b1:d0:d7:89:3b:86:2a:3a:d6:
21:ed:59:96:b0:51:c1:87:42:c6:e5:c6:a4:6a:a3:b4:b6:36:
67:4b:32:7f:78:ff:76:70:3f:7e:e9:b6:e9:38:d5:45:29:26:
ad:7b:7e:ba:45:f7:46:50:e8:cb:99:16:a7:87:61:7b:2e:45:
a3:1b:28:29:43:0e:ff:cc:e5:81:10:72:61:28:33:87:6c:ad:
7b:45:44:0b:64:97:7e:d3:7b:fa:d6:e6:ed:80:5f:43:ec:c4:
db:90:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 15:29:17 2024 by rpki-client on console.sobornost.net