Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3230392e3131322e302f32342d3234203d3e203533313037.roa
File: 3138362e3230392e3131322e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier: mVCPyDnoJ5jHPYMbnWHfbnnKPeQgWvCJNAPEw5aaxmI=
Subject key identifier: FD:8B:0C:C8:48:17:03:10:A4:AF:E2:80:8B:03:35:00:F4:F1:50:2C
Certificate issuer: /CN=419A2E42DF188ACEF915C715DAE3757B6ACA80C1
Certificate serial: 72D2A2ED14E8E6347DC255D35488E4D5DB7C1F9F
Authority key identifier: 41:9A:2E:42:DF:18:8A:CE:F9:15:C7:15:DA:E3:75:7B:6A:CA:80:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/419A2E42DF188ACEF915C715DAE3757B6ACA80C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3230392e3131322e302f32342d3234203d3e203533313037.roa
Signing time: Thu 26 Jan 2023 13:09:38 +0000
ROA not before: Thu 26 Jan 2023 13:04:38 +0000
ROA not after: Thu 25 Jan 2024 13:09:38 +0000
asID: 53107
IP address blocks: 186.209.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d2:a2:ed:14:e8:e6:34:7d:c2:55:d3:54:88:e4:d5:db:7c:1f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419A2E42DF188ACEF915C715DAE3757B6ACA80C1
Validity
Not Before: Jan 26 13:04:38 2023 GMT
Not After : Jan 25 13:09:38 2024 GMT
Subject: CN=FD8B0CC848170310A4AFE2808B033500F4F1502C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:23:8a:e6:4e:73:c9:ed:0e:35:39:66:1a:
b3:b8:cf:2d:3c:6d:7a:d1:30:04:28:7c:66:a4:fc:
e6:ed:ae:1d:87:15:0f:8d:a6:82:fa:ce:88:b3:3f:
94:50:af:0e:d3:63:ac:4a:fd:88:1c:b6:04:46:0a:
2b:bb:eb:33:a9:ae:17:15:bd:9e:29:e0:0b:07:0d:
8e:e2:49:c9:01:7b:d0:0e:cc:fc:15:8a:c2:a2:23:
06:8b:f3:ff:cf:4f:88:c4:83:79:22:ae:b8:24:95:
90:9c:47:13:b1:11:eb:43:dd:25:44:67:f8:0a:14:
bd:b1:40:1c:8b:01:44:d0:3e:36:75:d1:c7:57:a1:
02:42:6b:ab:5d:7a:ca:47:12:5a:4a:33:b4:c8:38:
5b:81:31:6c:3c:ca:68:6c:bb:e5:d3:0e:98:e5:d6:
ef:f8:16:54:64:fd:69:a7:ac:c6:9f:64:59:03:4a:
af:14:f5:fe:c7:c5:40:d4:53:3a:de:43:ca:be:51:
06:d5:8b:ef:a7:1b:4a:10:fd:cf:4e:e9:8d:2f:55:
e9:71:e0:84:08:08:22:54:1c:a6:6f:66:0e:8c:6c:
c9:3e:b4:52:d9:e9:fd:72:68:c8:97:86:9c:5e:a8:
fe:1d:15:ba:2c:87:b3:c8:c9:ed:a9:c3:61:2d:f7:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8B:0C:C8:48:17:03:10:A4:AF:E2:80:8B:03:35:00:F4:F1:50:2C
X509v3 Authority Key Identifier:
keyid:41:9A:2E:42:DF:18:8A:CE:F9:15:C7:15:DA:E3:75:7B:6A:CA:80:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/419A2E42DF188ACEF915C715DAE3757B6ACA80C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/419A2E42DF188ACEF915C715DAE3757B6ACA80C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3230392e3131322e302f32342d3234203d3e203533313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.112.0/24
Signature Algorithm: sha256WithRSAEncryption
75:18:69:cf:e5:d3:c4:47:b1:6d:7c:1d:c3:9f:5e:d8:4d:5a:
3a:d9:ee:40:76:1b:de:6a:0c:1c:dd:4e:9e:43:8b:3a:0e:0f:
41:e9:9b:fc:2a:26:6f:96:8b:6c:2e:47:7c:24:15:17:59:a6:
26:21:4d:e9:73:ab:01:8a:c0:2d:0a:f2:90:ff:6a:7e:46:56:
44:79:f7:da:03:4f:12:5b:b3:fe:7a:85:48:e9:dc:c7:c0:e9:
94:c1:16:16:91:49:c0:fa:95:55:b1:8d:36:a7:be:1b:13:62:
2f:cc:da:f8:0e:e9:a0:6c:96:0d:77:46:57:ef:f9:27:15:6f:
f6:48:79:d0:eb:b3:9d:1d:11:2e:d4:3c:f5:60:d0:f2:f2:59:
05:ec:88:d9:03:36:c3:a1:a0:5c:08:57:ee:20:33:ee:85:86:
f5:40:31:f4:68:71:e7:ff:ac:96:21:c1:4b:3f:be:09:e0:93:
be:d1:55:6e:e1:af:5f:97:e7:a1:b4:65:f5:19:68:7d:b7:06:
40:a9:f1:4d:30:0e:fb:68:27:e5:6b:68:b7:3f:05:7b:fa:fe:
c0:d4:7b:e9:b5:d3:99:0b:ae:e9:58:d1:27:a6:d3:e4:52:9e:
44:ae:b5:78:f5:f6:ff:6d:09:f2:4f:35:63:01:3b:3c:38:9f:
f2:bb:8e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:46 2023 by rpki-client on console.sobornost.net