Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130362e302f32332d3233203d3e20323730363834.roa
File: 3230302e3138372e3130362e302f32332d3233203d3e20323730363834.roa (raw, json)
Hash identifier: OKAhUDJCqNa3HJdR/5BjpgzU7ezG4Hzi3A2X//xnrnA=
Subject key identifier: D4:2F:0C:E8:C4:4E:05:A4:B6:BA:EA:45:B3:D8:54:3A:F3:BF:BD:A2
Certificate issuer: /CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Certificate serial: 0F3C954BC66DCD2D7B037FF44292B7370D0685CD
Authority key identifier: 89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130362e302f32332d3233203d3e20323730363834.roa
Signing time: Tue 08 Oct 2024 11:00:34 +0000
ROA not before: Tue 08 Oct 2024 10:55:34 +0000
ROA not after: Tue 07 Oct 2025 11:00:34 +0000
asID: 270684
IP address blocks: 200.187.106.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 08 Oct 2024 13:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:3c:95:4b:c6:6d:cd:2d:7b:03:7f:f4:42:92:b7:37:0d:06:85:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Validity
Not Before: Oct 8 10:55:34 2024 GMT
Not After : Oct 7 11:00:34 2025 GMT
Subject: CN=D42F0CE8C44E05A4B6BAEA45B3D8543AF3BFBDA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a3:d9:58:bc:e4:d6:22:ea:81:39:c7:c5:60:
f2:85:eb:f6:bc:db:b9:83:3f:f2:e6:91:b1:b5:05:
b0:a0:0d:7c:a0:25:e5:3b:b5:ff:04:8c:cc:0f:42:
24:5b:16:cc:36:6e:98:12:71:bc:ea:29:36:0b:20:
62:a0:b5:ac:42:fc:62:35:91:4b:e3:b2:99:51:27:
34:60:8d:e8:b6:a6:b1:60:95:1f:e7:b1:c9:5e:ce:
c4:66:91:f2:fa:68:76:8a:be:47:28:df:2b:ad:45:
36:6f:88:a8:ef:a6:83:c6:be:ca:b1:b3:c5:db:9f:
bd:47:f3:ae:8a:85:e0:0a:e7:33:d5:b1:ff:e3:62:
f6:a2:f8:57:b1:8c:4c:52:23:e1:aa:52:00:ca:fa:
f6:28:1e:5f:5c:e6:20:55:58:1b:fa:97:6b:af:48:
55:49:0e:9d:e7:d0:94:85:88:18:07:65:09:60:6e:
75:ae:61:3e:58:ee:36:12:67:bf:88:ce:4c:b8:18:
a4:1a:c8:4f:0a:c5:91:74:0f:76:fa:74:55:f9:ed:
8e:f3:19:3c:5d:ad:ba:9c:20:19:a9:0e:11:3c:8b:
a5:88:12:df:dd:7a:87:53:03:46:9f:71:23:c4:2b:
4f:43:0f:aa:b7:91:1a:aa:70:1d:66:97:68:25:35:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2F:0C:E8:C4:4E:05:A4:B6:BA:EA:45:B3:D8:54:3A:F3:BF:BD:A2
X509v3 Authority Key Identifier:
keyid:89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130362e302f32332d3233203d3e20323730363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.187.106.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:a5:78:4a:7c:c1:20:cc:07:fb:bb:b4:b9:17:a0:9a:41:36:
98:0e:4f:a1:f0:10:c6:19:94:7f:7c:4f:17:be:e1:60:b0:75:
1c:01:2e:21:b2:d0:70:3c:3d:78:a0:fd:b2:44:61:07:64:c8:
3e:9e:8b:6b:94:c1:c2:30:7a:d4:10:c8:48:cd:bc:f1:68:98:
e1:46:9b:db:14:3e:4b:3a:4a:76:fd:55:c4:a0:06:df:08:ea:
ce:8d:a3:d8:b9:a3:bd:52:51:9d:dc:0b:4b:e9:6f:a4:88:3f:
b8:f1:88:c1:b6:8e:0d:35:3f:79:7a:bb:3e:5d:0e:30:d6:b4:
c6:da:6c:4a:3f:6d:5c:83:01:d7:c0:21:d4:ec:86:98:ad:b7:
7b:cb:56:d8:29:29:a4:ae:e7:c7:39:10:2e:27:1f:ca:13:28:
e8:c1:1a:89:b4:6e:78:02:b4:a8:de:a1:ab:da:4f:e0:d7:09:
f3:8c:ea:e3:34:97:c1:6f:39:6e:d5:31:52:ad:72:a5:25:1c:
67:06:08:7d:c8:5e:13:49:15:94:78:06:f5:94:3d:c2:76:48:
56:e0:6f:50:97:54:8d:36:e9:79:d2:57:e0:81:6c:6e:65:6f:
29:29:e0:17:5c:f8:04:a0:f6:e3:f0:60:2b:3f:49:cb:2d:32:
c4:7f:8c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 15:29:17 2024 by rpki-client on console.sobornost.net