Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233362e302f32322d3232203d3e20323731303037.roa
File: 3137302e3235342e3233362e302f32322d3232203d3e20323731303037.roa (raw, json)
Hash identifier: 255E9xN+RoJE48++vR+WdgLTLyQXs4OO5Xzt7m+GeAs=
Subject key identifier: 35:39:36:B2:F4:9F:F4:D7:E6:6F:5A:5B:C2:14:54:4C:83:78:32:31
Certificate issuer: /CN=67EA103DA5543711281365C64EA7698F5F23FAEE
Certificate serial: 0546ED85FFD618E0D4DE9EBDEFA4538D270B547D
Authority key identifier: 67:EA:10:3D:A5:54:37:11:28:13:65:C6:4E:A7:69:8F:5F:23:FA:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67EA103DA5543711281365C64EA7698F5F23FAEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233362e302f32322d3232203d3e20323731303037.roa
Signing time: Fri 07 Feb 2025 18:46:13 +0000
ROA not before: Fri 07 Feb 2025 18:41:13 +0000
ROA not after: Fri 06 Feb 2026 18:46:13 +0000
asID: 271007
IP address blocks: 170.254.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 08 Feb 2025 12:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:46:ed:85:ff:d6:18:e0:d4:de:9e:bd:ef:a4:53:8d:27:0b:54:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67EA103DA5543711281365C64EA7698F5F23FAEE
Validity
Not Before: Feb 7 18:41:13 2025 GMT
Not After : Feb 6 18:46:13 2026 GMT
Subject: CN=353936B2F49FF4D7E66F5A5BC214544C83783231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:4d:b9:0b:bf:e2:32:4e:d0:4d:56:b8:26:
99:de:19:21:5e:d1:5b:a4:da:a3:9e:74:a1:0f:f2:
c0:8e:c9:39:76:f3:3a:b6:6d:f2:55:02:f8:ef:38:
ea:8d:77:89:12:d0:52:d5:7c:52:0f:2d:06:43:33:
c6:38:5b:43:ae:29:27:ee:3e:f3:ac:3f:ff:e8:bd:
a9:2a:0e:43:59:24:a6:93:a5:06:73:54:79:b8:11:
3f:63:21:e1:f0:f2:02:cf:57:bc:f2:b0:cc:e3:96:
d1:3a:27:2e:3a:dd:f9:b6:a5:5f:f5:b4:10:2e:41:
ac:4c:f7:1d:e5:04:ed:2f:12:a2:1a:b9:c0:4b:57:
d4:60:83:bc:49:f8:42:82:2b:ed:a1:94:bb:0d:a5:
6f:9f:ff:62:07:d2:2f:f3:9e:4e:03:5a:d5:15:a4:
6b:45:44:d2:d8:b7:3b:be:8c:71:cf:20:2d:dd:2b:
ee:16:d9:a3:b9:42:5c:bc:52:72:3c:4c:36:9e:df:
89:9c:c4:c8:07:25:fb:8b:0f:3c:44:b1:a1:7a:b6:
24:c6:07:af:b2:94:d8:2e:82:93:0a:92:c7:6b:d8:
5e:d5:46:2a:c9:ba:80:ef:e3:1d:7c:8f:8f:3c:04:
19:a1:58:91:24:6c:5d:ac:60:17:67:85:22:7a:bb:
61:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:39:36:B2:F4:9F:F4:D7:E6:6F:5A:5B:C2:14:54:4C:83:78:32:31
X509v3 Authority Key Identifier:
keyid:67:EA:10:3D:A5:54:37:11:28:13:65:C6:4E:A7:69:8F:5F:23:FA:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/67EA103DA5543711281365C64EA7698F5F23FAEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67EA103DA5543711281365C64EA7698F5F23FAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233362e302f32322d3232203d3e20323731303037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.236.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:28:8a:6f:f8:52:a2:9a:e3:46:5a:b9:e0:5b:63:60:14:87:
c2:25:de:d5:4a:f7:ef:90:be:d3:79:21:50:fb:8c:0d:d7:30:
5f:14:43:30:97:42:30:c4:3c:74:0a:42:58:4e:70:3b:d0:5e:
c9:5b:ac:d5:eb:ef:3b:f7:54:7e:bb:22:c6:5f:77:64:8f:e1:
3e:22:40:37:f2:d5:a2:99:92:c1:3e:fb:50:23:d6:fd:34:c1:
b2:02:6b:18:f4:fc:f7:66:80:89:eb:c7:4e:95:6a:fc:46:94:
c1:19:11:ab:3b:ab:c7:35:5b:67:65:df:6e:94:b7:bc:1a:cf:
6b:67:25:66:6e:0a:e4:23:ef:ce:54:02:75:01:e6:72:8c:48:
df:95:e2:f3:cb:93:8b:a2:99:03:65:b7:b3:44:a3:f2:89:66:
ee:a1:57:90:e7:4c:cf:e3:bb:1a:38:c4:58:f1:f9:a7:ae:0a:
bc:a7:58:bb:0a:5d:ab:38:17:73:5a:d6:20:ee:2d:03:48:6f:
4e:03:be:99:6d:e6:96:c4:60:48:78:e2:75:00:2e:a0:9c:aa:
eb:1b:b2:34:f3:c5:c8:e9:af:65:9a:a1:f7:d3:1c:84:8e:67:
0f:43:3e:0d:09:15:6b:c5:90:fc:d6:f7:30:af:39:6f:c3:d5:
8c:97:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 03:42:25 2025 by rpki-client on console.sobornost.net