Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130362e302f32342d3234203d3e20323730363834.roa
File: 3230302e3138372e3130362e302f32342d3234203d3e20323730363834.roa (raw, json)
Hash identifier: UKMrmDNfJmNmq2bxNqxIvfRgEPOK0Mn5wmRqN2STGnU=
Subject key identifier: 9D:3C:33:66:94:37:60:60:07:FA:C9:CB:5E:87:58:5A:64:1A:42:B5
Certificate issuer: /CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Certificate serial: 41FBE91F46CE52A25737C8107BF3354E33A3FBFE
Authority key identifier: 89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130362e302f32342d3234203d3e20323730363834.roa
Signing time: Tue 08 Oct 2024 11:00:32 +0000
ROA not before: Tue 08 Oct 2024 10:55:32 +0000
ROA not after: Tue 07 Oct 2025 11:00:32 +0000
asID: 270684
IP address blocks: 200.187.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 13:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:fb:e9:1f:46:ce:52:a2:57:37:c8:10:7b:f3:35:4e:33:a3:fb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Validity
Not Before: Oct 8 10:55:32 2024 GMT
Not After : Oct 7 11:00:32 2025 GMT
Subject: CN=9D3C33669437606007FAC9CB5E87585A641A42B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:c6:ef:f4:69:69:5f:8d:a2:95:29:72:07:
77:2a:cb:07:ec:01:ab:40:20:61:11:d3:8e:48:4e:
e2:25:0f:1e:e6:43:a5:aa:10:57:72:c4:7a:2b:b2:
fa:90:e1:dd:f3:79:8e:79:26:0e:aa:24:fe:38:5c:
54:dc:5f:99:22:87:86:22:9a:cd:fc:11:a4:bd:04:
d8:97:c6:9d:81:09:ad:94:44:58:f1:80:c9:88:ed:
c8:d3:01:1c:da:d2:82:12:64:c7:1b:ee:ae:20:0c:
fa:58:8a:03:13:0c:2c:ea:73:53:3a:b2:aa:1d:7b:
15:6e:8a:73:6f:60:e0:5c:33:fe:be:ac:e7:aa:64:
50:46:9e:d0:06:6a:31:c0:ff:5d:b7:33:dc:76:40:
33:54:ab:2d:c2:45:b2:38:b2:a9:3c:96:9c:37:10:
15:a6:66:c6:8b:c6:09:f5:df:a3:20:c6:23:b6:23:
ba:c0:e6:7a:bb:6a:a9:77:43:d3:de:ec:5a:1a:8c:
e9:f6:de:c7:b6:92:e9:40:54:e9:71:90:a8:ac:11:
ad:98:71:31:61:b7:6e:f3:e9:6d:10:fc:d0:c5:08:
ff:e0:ba:85:04:a8:2f:85:93:3e:ce:7a:37:5e:62:
1b:58:4e:3a:05:66:0c:62:90:3f:6e:64:76:3d:cf:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3C:33:66:94:37:60:60:07:FA:C9:CB:5E:87:58:5A:64:1A:42:B5
X509v3 Authority Key Identifier:
keyid:89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130362e302f32342d3234203d3e20323730363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.187.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:08:4b:43:c9:0d:1a:0a:3d:3f:91:90:6d:64:72:3d:ad:7c:
03:07:3a:00:72:47:70:8c:49:71:fa:67:e4:3d:36:31:67:75:
c7:f4:ff:bb:a7:d5:52:94:96:60:b4:ed:f4:4b:63:58:7b:18:
02:37:1d:02:50:63:0a:01:ab:49:f7:f3:c5:fa:39:b1:83:ac:
91:17:47:e9:43:aa:bb:78:7c:3f:75:61:5d:30:79:b3:aa:68:
6b:f7:65:73:14:d0:d2:c3:fb:49:f0:61:86:bc:84:79:b5:7f:
5b:79:ea:39:20:69:07:98:e2:32:26:62:d6:b4:1a:81:d3:1f:
8d:dd:45:cb:c3:ca:6e:41:99:e8:37:62:1f:11:d6:b7:0c:83:
44:a8:64:e3:63:8b:65:54:c6:89:a5:d1:a9:b5:bf:d2:58:01:
95:b9:de:fd:93:94:9e:a4:a9:6e:f1:26:40:d7:04:ad:f8:08:
81:46:09:38:6c:80:42:ce:86:f4:ff:fd:1a:32:a1:a0:7a:90:
76:c5:38:72:24:a2:c0:b1:fb:0d:a0:32:53:32:9f:bb:33:c8:
af:f9:e1:89:9c:ec:ce:16:a9:18:df:d6:be:34:b3:25:bf:94:
2d:f8:25:91:83:87:00:4d:9b:ec:6a:bb:65:95:75:40:9e:78:
83:f8:b1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 15:29:17 2024 by rpki-client on console.sobornost.net