Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3230302e392e3232302e302f32322d3232203d3e20323632343538.roa
File: 3230302e392e3232302e302f32322d3232203d3e20323632343538.roa (raw, json)
Hash identifier: 4+lv1o9sQFIJSt0fEMtSScgqeoxUiucZNrzIuLgsso0=
Subject key identifier: FF:17:A6:68:57:EE:C1:08:D8:5B:C0:93:55:89:47:95:8E:B6:30:A3
Certificate issuer: /CN=FDB293D8646ACB35E10785D8B748695F452A1DC2
Certificate serial: 3F9BA957CA4C9364735DFB871155AFE996ADFCE5
Authority key identifier: FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3230302e392e3232302e302f32322d3232203d3e20323632343538.roa
Signing time: Tue 22 Oct 2024 16:56:34 +0000
ROA not before: Tue 22 Oct 2024 16:51:34 +0000
ROA not after: Tue 21 Oct 2025 16:56:34 +0000
asID: 262458
IP address blocks: 200.9.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 20 Jan 2025 17:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:9b:a9:57:ca:4c:93:64:73:5d:fb:87:11:55:af:e9:96:ad:fc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDB293D8646ACB35E10785D8B748695F452A1DC2
Validity
Not Before: Oct 22 16:51:34 2024 GMT
Not After : Oct 21 16:56:34 2025 GMT
Subject: CN=FF17A66857EEC108D85BC093558947958EB630A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:5f:ed:83:f7:a7:ff:52:84:d5:64:1e:c1:
e7:9e:ec:d6:33:6e:2f:d1:2c:dc:8e:c7:9d:1b:bf:
e6:4e:70:87:ab:75:25:0d:de:29:fb:96:49:26:da:
2f:5d:46:6f:a7:d2:c1:a6:27:ef:00:61:35:fa:f2:
34:b9:cc:7d:d8:63:8a:09:a2:8d:27:32:37:c3:d6:
e3:97:30:98:4c:45:af:a0:89:21:a9:9a:43:47:00:
19:6e:6b:b6:14:3d:17:0a:e4:2f:a4:b1:36:90:b0:
c2:fa:45:29:bd:bf:b3:58:16:2f:24:6c:d7:a2:11:
57:b8:e8:79:d5:52:9e:21:d8:e9:55:f6:a6:be:e9:
19:13:e6:9c:1c:6f:7b:9f:19:1a:10:d2:35:d1:e6:
13:8a:e3:55:d5:61:45:8d:d7:45:28:92:a5:37:41:
6a:7d:14:3e:e8:70:0e:74:4d:da:f2:8a:04:f8:a7:
ea:75:d3:cd:a1:ff:8a:77:a8:f0:4f:93:3e:57:c5:
cf:9f:d7:7d:e0:ff:9b:c1:43:0e:ad:3d:7f:17:60:
47:9d:db:17:2d:56:e2:55:43:92:7d:52:39:bb:dc:
e7:2a:11:4e:f3:4d:7a:25:2a:60:a2:db:6c:bf:16:
e4:aa:5f:90:2d:1a:8a:11:79:d8:4b:38:a9:7e:5b:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:17:A6:68:57:EE:C1:08:D8:5B:C0:93:55:89:47:95:8E:B6:30:A3
X509v3 Authority Key Identifier:
keyid:FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3230302e392e3232302e302f32322d3232203d3e20323632343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:f4:77:d0:97:8a:0c:39:2a:ee:d7:75:a5:0b:ef:34:1b:51:
5f:10:7e:45:0a:a8:d2:e9:22:27:1d:e9:12:2e:5f:92:76:9c:
3a:ae:d4:fe:b5:3b:b4:f7:95:89:cd:08:dd:5c:12:45:9b:23:
c3:46:57:38:7c:d1:81:c8:89:24:47:f8:bc:e2:64:40:5e:79:
0a:9d:53:f1:2d:dc:ce:1f:f5:0a:34:ba:e3:6d:f1:c4:d7:4d:
98:93:98:2a:0a:ac:28:f2:a4:07:26:23:5c:e7:b9:70:09:91:
75:3a:8a:90:67:b5:bd:d0:81:27:3f:83:62:3b:75:6a:7b:0a:
6e:7f:85:ca:87:3d:b2:5f:fa:91:69:a7:33:33:cb:5c:02:99:
65:ce:45:4f:95:55:59:1e:8e:d0:c1:e3:17:8f:f1:50:fe:6a:
2e:1a:54:64:8a:ba:20:42:2d:43:8d:04:84:8c:ff:1e:58:d0:
2e:3b:cf:87:d5:00:23:aa:2f:37:f4:26:91:14:11:2d:5c:92:
89:5d:9d:c5:ff:74:cf:4c:e3:84:25:a1:16:ba:13:2b:27:42:
1d:1b:e4:1f:a7:75:5a:6d:dd:06:42:6c:48:40:1f:c7:7a:bc:
04:fe:66:70:86:a7:8b:c0:dc:e2:cf:60:fe:29:9c:f6:49:c0:
67:7e:01:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 20 22:03:22 2025 by rpki-client on console.sobornost.net