Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3137302e3234342e3131342e302f32342d3234203d3e20323634333030.roa
File: 3137302e3234342e3131342e302f32342d3234203d3e20323634333030.roa (raw, json)
Hash identifier: LbSOmvWq6oBmC1ZMdLB5Q0tu56J6aVtz1RYl2agRWsE=
Subject key identifier: 3E:A2:77:3E:C0:C6:A2:CF:4B:A9:46:17:DD:AF:1C:98:7C:62:34:8C
Certificate issuer: /CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
Certificate serial: 0EBA99BE696A56AB729246443BDE3316EACD96BD
Authority key identifier: 4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3137302e3234342e3131342e302f32342d3234203d3e20323634333030.roa
Signing time: Thu 26 Oct 2023 02:52:09 +0000
ROA not before: Thu 26 Oct 2023 02:47:09 +0000
ROA not after: Thu 24 Oct 2024 02:52:09 +0000
asID: 264300
IP address blocks: 170.244.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ba:99:be:69:6a:56:ab:72:92:46:44:3b:de:33:16:ea:cd:96:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
Validity
Not Before: Oct 26 02:47:09 2023 GMT
Not After : Oct 24 02:52:09 2024 GMT
Subject: CN=3EA2773EC0C6A2CF4BA94617DDAF1C987C62348C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:07:22:64:41:5e:1e:06:cc:5c:80:3b:59:
80:71:3d:fc:74:7d:81:ad:04:e7:76:4e:23:5c:2e:
56:c2:f4:7b:95:f6:32:9f:92:66:44:7e:23:65:1c:
39:84:92:5e:9a:55:53:bd:0e:70:ba:78:59:3e:37:
ef:9d:d2:a0:13:a8:6c:56:b8:82:10:67:b9:7e:a4:
f2:69:43:51:4f:c7:0e:06:df:65:ce:fd:7b:50:a0:
2a:a1:43:d4:86:a5:9e:f0:8b:bf:df:58:a7:35:06:
2c:d6:fe:29:77:24:a6:fb:76:b9:46:2d:6c:32:de:
88:7b:4f:5c:b0:8e:c8:a4:d3:59:3a:aa:86:01:49:
a9:64:af:00:8f:2a:86:53:57:e4:44:c1:50:d0:50:
0d:91:76:7a:e0:34:21:d4:0c:7e:3e:43:be:ae:59:
bf:01:0a:4c:d8:a5:92:35:51:ae:a1:75:e6:28:f9:
1e:ae:51:8b:02:e4:47:35:4a:97:85:2d:b2:d1:85:
25:23:53:47:9f:72:63:c4:ad:ea:30:66:6c:59:71:
86:46:42:7a:e3:ba:b8:63:f4:2c:2b:66:a5:fd:1a:
11:12:17:55:c9:ec:e1:4e:9a:5b:c5:b6:5c:fe:3a:
33:4d:a4:1d:87:3c:29:fd:22:fd:9c:a1:00:4d:fd:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A2:77:3E:C0:C6:A2:CF:4B:A9:46:17:DD:AF:1C:98:7C:62:34:8C
X509v3 Authority Key Identifier:
keyid:4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3137302e3234342e3131342e302f32342d3234203d3e20323634333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.114.0/24
Signature Algorithm: sha256WithRSAEncryption
28:72:65:c5:bb:e1:83:a2:8f:ad:72:49:3b:95:b1:09:65:3b:
b0:3c:de:2f:98:18:f2:db:ba:f2:6f:89:9f:1e:8f:58:8f:66:
60:18:50:0c:0e:40:05:07:3d:72:ed:ec:93:ec:89:a8:c8:28:
54:8c:72:26:c1:6a:89:7e:49:5f:dd:98:0d:4f:98:98:b1:6d:
05:ae:e6:b7:1b:55:fe:bb:f4:46:ab:bd:64:3b:12:4b:7f:d2:
e6:bf:4f:28:b4:5a:b2:c3:25:29:15:a1:8c:50:d4:a5:50:bb:
53:45:c0:ae:20:a4:99:f0:29:9e:20:32:17:ab:25:42:3c:b5:
b2:ba:87:a5:bc:a9:37:73:06:66:49:34:0a:4f:f3:07:8d:5e:
9e:1e:d7:25:ef:2c:46:07:6d:27:09:88:b2:84:4a:af:e9:e6:
5e:8a:d7:28:ab:3f:66:6a:64:cb:48:e6:bb:1e:35:ed:a4:da:
30:10:2d:73:53:c7:b3:1f:9d:6d:b5:d8:ee:71:a0:cf:45:94:
44:8d:e4:c2:1e:f1:38:1c:16:c4:08:42:ff:91:ab:e1:f2:73:
c9:93:4c:54:13:bc:6d:0c:8a:2d:d6:fa:89:fd:36:58:d6:f9:
77:18:d8:76:e4:a7:0f:8f:3c:0a:ac:ae:e9:f6:2f:f4:24:bd:
51:33:00:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:29 2023 by rpki-client on console.sobornost.net