Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e392e302f32342d3234203d3e203131393231.roa
File: 3230312e34392e392e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier: nSOJ3Bw6D97OcaiSCtOgGt2TOoTLDG9UnjtQRaDQ6/g=
Subject key identifier: 8B:08:EB:7E:7F:46:53:A8:B6:AC:E0:FE:0B:AC:1E:5C:59:86:9E:EE
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 53ED40362BA1923D3385BAA057ED2B45B3150820
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e392e302f32342d3234203d3e203131393231.roa
Signing time: Wed 31 Jul 2024 13:42:51 +0000
ROA not before: Wed 31 Jul 2024 13:37:51 +0000
ROA not after: Wed 30 Jul 2025 13:42:51 +0000
asID: 11921
IP address blocks: 201.49.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ed:40:36:2b:a1:92:3d:33:85:ba:a0:57:ed:2b:45:b3:15:08:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Jul 31 13:37:51 2024 GMT
Not After : Jul 30 13:42:51 2025 GMT
Subject: CN=8B08EB7E7F4653A8B6ACE0FE0BAC1E5C59869EEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:4d:0a:96:3f:cd:0b:c5:8a:fd:dc:fd:f3:
c5:32:88:63:16:07:6e:79:cb:60:49:d7:28:41:23:
ab:79:b8:49:ee:5d:d3:01:13:8c:dd:5a:cc:cb:8e:
5d:67:ce:6a:ea:76:93:3b:48:a3:e5:39:64:38:cf:
69:ce:47:be:cb:59:89:75:bb:ed:76:e5:fb:81:12:
07:ee:8d:41:62:59:c7:d6:d7:8e:dc:b2:c3:bb:f6:
f6:01:72:e1:08:a3:29:11:9c:f6:ee:e5:4b:55:cc:
22:e6:e6:3e:de:e8:7e:cf:39:91:6c:e0:c3:5f:44:
d1:ec:5e:02:89:72:58:24:5d:4a:0a:53:a6:10:2c:
ac:f4:74:5b:89:4a:64:47:bc:9e:b7:49:24:b7:bf:
24:bb:c4:16:9d:32:ee:7e:d1:7b:9e:12:45:b0:fa:
85:02:83:69:9b:f6:8d:23:a2:e9:d7:62:32:d6:fc:
46:d9:e0:9b:a0:9c:a4:ea:f5:b9:52:53:04:90:9e:
35:16:62:91:fc:43:40:1d:ce:b5:87:ed:13:9a:32:
94:4d:f6:2d:19:91:5e:7a:10:05:a4:89:c0:d5:f6:
a2:87:1c:89:6c:a1:d7:80:08:fa:1a:95:22:7f:74:
63:75:86:f9:ad:15:e1:6b:92:11:f2:03:5b:7b:d6:
5f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:08:EB:7E:7F:46:53:A8:B6:AC:E0:FE:0B:AC:1E:5C:59:86:9E:EE
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e392e302f32342d3234203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b2:dc:88:2d:1a:3c:46:98:ff:e7:0b:c0:ed:95:64:86:21:
c0:57:3b:cf:39:16:93:ed:55:28:2b:d4:d1:d1:a8:c1:7b:ef:
f5:46:bb:06:71:fe:6b:d7:53:4b:a0:f7:15:1c:97:2b:99:bb:
a9:27:25:03:8c:cb:0a:d0:71:57:62:3f:6c:29:60:50:c6:46:
41:a1:26:18:01:55:5d:c1:6f:f4:4e:f0:0f:5c:49:7a:be:2a:
98:90:ea:74:7d:34:b1:91:6d:94:a0:12:17:3a:b2:70:6f:4f:
e9:13:42:5f:d2:b4:f1:4f:e4:78:36:df:d8:a2:86:1a:c1:cd:
d2:27:cd:c2:dc:ef:2b:32:67:91:ce:33:46:99:a5:de:4a:6c:
e6:6f:23:ca:dc:25:d3:e7:3d:95:cd:6c:0f:3b:8d:bc:82:e1:
1c:29:33:ab:25:a5:2a:d2:6f:9a:f2:ce:ba:28:70:d2:d6:d2:
f8:d1:9b:03:5c:d4:32:35:44:c4:6c:e1:a9:e9:0f:22:dc:da:
8a:14:84:de:4f:c6:ac:f4:1b:4e:5a:41:af:e3:dc:6b:c8:8d:
a3:7d:3e:5f:a7:89:a1:b3:bd:b8:9e:35:4c:ed:a6:5d:40:b3:
b2:d0:89:f1:9a:5e:c1:09:9f:8a:7b:52:f2:fc:e1:f5:fd:50:
74:59:0d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net