Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/323830343a326236383a3a2f33322d3334203d3e20323635313532.roa
File: 323830343a326236383a3a2f33322d3334203d3e20323635313532.roa (raw, json)
Hash identifier: QeIdhs6kbTCvstgrkxQK1z7YKNndq5Uyb5cqjXePiq4=
Subject key identifier: 30:42:51:DB:09:62:68:3F:94:02:B9:51:74:C2:1B:4C:A6:4B:38:82
Certificate issuer: /CN=D47E48647B940216D8BE8BE824CDD566DE29F188
Certificate serial: 53A50A085776EA893F05A03013FF9A8F0C4B0B77
Authority key identifier: D4:7E:48:64:7B:94:02:16:D8:BE:8B:E8:24:CD:D5:66:DE:29:F1:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D47E48647B940216D8BE8BE824CDD566DE29F188.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/323830343a326236383a3a2f33322d3334203d3e20323635313532.roa
Signing time: Tue 21 Jan 2025 13:52:55 +0000
ROA not before: Tue 21 Jan 2025 13:47:55 +0000
ROA not after: Tue 20 Jan 2026 13:52:55 +0000
asID: 265152
IP address blocks: 2804:2b68::/32 maxlen: 34
Validation: Failed, certificate revoked on Tue 21 Jan 2025 18:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a5:0a:08:57:76:ea:89:3f:05:a0:30:13:ff:9a:8f:0c:4b:0b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D47E48647B940216D8BE8BE824CDD566DE29F188
Validity
Not Before: Jan 21 13:47:55 2025 GMT
Not After : Jan 20 13:52:55 2026 GMT
Subject: CN=304251DB0962683F9402B95174C21B4CA64B3882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:22:ca:4e:97:5f:4f:bc:19:a2:25:a7:45:
0d:67:80:53:b2:fb:2d:aa:5f:ef:e9:f2:20:a6:b2:
c1:f1:cb:0f:ec:17:ed:07:21:46:47:e9:0e:3f:8c:
ce:e0:43:43:37:45:af:44:4b:43:88:8d:1c:ff:e0:
3d:63:d1:8a:04:f7:c5:8e:ab:eb:c2:22:a6:fc:03:
5e:62:8a:06:44:66:b2:93:22:e9:74:d8:37:1d:5a:
b7:8c:18:6b:d2:65:1b:30:9c:31:e1:b4:e1:29:86:
af:f6:01:06:b9:76:a2:84:23:bb:e3:b7:cc:61:4c:
8c:c0:00:89:02:6e:10:5a:ca:af:37:15:43:62:2a:
70:2b:ec:3a:37:90:e2:54:3e:bb:08:b3:c7:02:2c:
2e:98:06:f8:e1:80:13:90:2a:c1:19:af:e4:c1:8f:
be:1a:27:72:e3:4d:12:f3:2e:7f:e7:b4:82:c3:62:
27:d0:d2:05:8a:44:46:60:c4:76:d4:91:35:48:77:
c6:e7:f5:3f:9d:45:dc:8e:d2:87:e7:c0:f7:77:e7:
23:ea:94:33:a6:8a:d2:99:ff:93:bb:56:d7:4d:c2:
aa:b6:6e:a4:3f:6d:14:4c:f1:24:06:39:40:5b:87:
08:b3:f8:50:80:23:fb:b0:fb:b2:af:56:62:01:65:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:42:51:DB:09:62:68:3F:94:02:B9:51:74:C2:1B:4C:A6:4B:38:82
X509v3 Authority Key Identifier:
keyid:D4:7E:48:64:7B:94:02:16:D8:BE:8B:E8:24:CD:D5:66:DE:29:F1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/D47E48647B940216D8BE8BE824CDD566DE29F188.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D47E48647B940216D8BE8BE824CDD566DE29F188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/323830343a326236383a3a2f33322d3334203d3e20323635313532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2b68::/32
Signature Algorithm: sha256WithRSAEncryption
ad:e3:b7:40:11:3c:42:a0:cd:af:57:4b:9c:fe:c6:0f:01:f0:
c0:42:45:71:49:18:72:6b:bb:8f:8d:50:42:ca:a2:d1:86:ad:
0e:58:58:cd:6c:64:7f:24:7f:92:ab:0e:11:bd:33:d7:c9:b5:
18:25:43:0e:f3:b8:00:0e:8f:c2:13:7a:ba:25:d5:ab:7d:c2:
de:04:14:37:8e:d9:8e:74:c8:35:85:bd:37:35:4f:8f:d5:87:
90:67:3a:b5:1a:e8:3a:28:bd:80:f2:97:ef:b4:1d:19:ef:89:
e5:6f:0f:a4:12:be:53:25:c3:79:07:aa:68:c6:ff:8b:70:d2:
d4:e6:26:4c:ac:a5:89:7a:c5:b6:7a:e0:15:d6:8d:d5:7c:3f:
84:2f:97:a0:33:ff:28:da:12:27:e3:a6:f9:e0:6d:ba:0e:91:
88:f9:e7:1c:2b:a6:a8:af:62:ab:64:87:10:14:20:dc:92:1c:
a4:33:cb:09:1f:9c:2f:2f:f8:da:cb:7a:50:00:7f:be:53:60:
4c:83:f2:72:4e:d2:2c:4b:6b:cb:20:52:31:e5:a5:c7:f8:7c:
95:37:40:b9:e6:51:c6:6e:64:1d:cd:64:7a:a7:89:5f:e2:be:
7f:3c:b2:d0:c7:e4:73:f0:51:f9:6d:ae:f9:17:ba:52:c1:df:
db:59:e1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 23:32:11 2025 by rpki-client on console.sobornost.net