Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38312e302f32342d3234203d3e20323635313030.roa
File: 3137302e3235342e38312e302f32342d3234203d3e20323635313030.roa (raw, json)
Hash identifier: 1pM0ClMhwNu3P8NmPFteA4dYk3rYlXkZw+4ciAQ3ffM=
Subject key identifier: 0B:13:AF:06:74:AE:4C:59:87:44:56:52:D7:A4:E7:1D:A9:AC:71:18
Certificate issuer: /CN=BECF4D77E2B91192575E2DE0DC91F109BDB0DA93
Certificate serial: 17430FDF6480E7D0A8F6AD566DA9F9973F2E6260
Authority key identifier: BE:CF:4D:77:E2:B9:11:92:57:5E:2D:E0:DC:91:F1:09:BD:B0:DA:93
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38312e302f32342d3234203d3e20323635313030.roa
Signing time: Tue 21 Mar 2023 15:00:00 +0000
ROA not before: Tue 21 Mar 2023 14:55:00 +0000
ROA not after: Tue 19 Mar 2024 15:00:00 +0000
asID: 265100
IP address blocks: 170.254.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:43:0f:df:64:80:e7:d0:a8:f6:ad:56:6d:a9:f9:97:3f:2e:62:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BECF4D77E2B91192575E2DE0DC91F109BDB0DA93
Validity
Not Before: Mar 21 14:55:00 2023 GMT
Not After : Mar 19 15:00:00 2024 GMT
Subject: CN=0B13AF0674AE4C5987445652D7A4E71DA9AC7118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:70:25:ba:d3:b7:b0:5f:97:e3:66:a8:96:
24:94:28:64:04:47:ee:6b:f9:bf:d5:ec:92:c8:64:
98:a3:b7:91:17:fc:ac:56:42:e1:4c:a9:2d:c7:3a:
b3:8e:65:07:e7:73:bb:2b:83:99:20:0d:ac:af:5a:
1d:9c:76:43:35:d1:47:b8:43:fc:71:de:76:3b:58:
88:b9:87:b5:16:4d:64:17:f9:47:1a:72:26:2f:9f:
bc:01:9f:05:18:cc:d8:a2:90:71:e0:48:e6:61:24:
71:e7:d0:58:c8:07:ca:15:8c:58:14:9f:aa:26:6b:
93:16:1f:52:88:da:47:97:00:05:b0:b6:93:78:cd:
23:13:d6:58:92:2f:a4:d9:4e:b2:36:dc:3e:24:63:
e8:26:74:6c:28:3b:7a:6d:99:dc:14:71:de:03:e4:
7f:a4:d0:95:32:c9:30:b9:3f:68:8a:9c:af:fe:e2:
04:84:82:fe:f5:06:1f:d8:e5:0a:90:04:99:83:ef:
7e:d9:6e:8f:2a:ad:ba:67:c2:b7:95:6b:c8:13:00:
f9:27:10:92:11:c8:f4:8f:08:2f:21:55:2f:f2:6c:
da:ba:04:f0:cc:0e:85:27:d5:1b:2b:4f:a7:cc:d8:
20:8c:be:bc:53:6d:19:44:12:f9:ed:1b:a4:71:a5:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:13:AF:06:74:AE:4C:59:87:44:56:52:D7:A4:E7:1D:A9:AC:71:18
X509v3 Authority Key Identifier:
keyid:BE:CF:4D:77:E2:B9:11:92:57:5E:2D:E0:DC:91:F1:09:BD:B0:DA:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38312e302f32342d3234203d3e20323635313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.81.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:a8:f9:3a:91:e2:2b:80:dd:89:66:6b:4c:2b:67:de:92:1e:
ac:f2:a7:26:67:40:a7:55:e4:b7:74:97:96:e2:98:f5:aa:97:
99:15:5c:de:00:60:39:0b:19:0f:0a:f5:29:08:65:cf:77:98:
7a:54:91:a5:a9:e2:b8:39:31:4c:77:cf:2b:5c:0e:bf:8a:76:
fb:f3:0b:55:e1:de:60:a5:6f:f2:31:a3:ac:7f:2d:f0:01:24:
2a:2c:0d:17:92:df:d8:9c:07:7d:43:e8:a6:71:be:9f:8d:8f:
01:c8:99:e8:31:66:a0:bc:77:13:01:be:50:f3:4f:bf:6c:18:
08:be:4c:aa:cc:e3:11:c4:bd:e2:8d:0a:2d:b5:da:b0:bc:84:
a8:3d:72:ff:32:11:58:00:1c:ea:6a:86:73:86:04:fd:68:03:
89:cb:eb:3c:80:e1:20:95:38:f9:4f:cf:2f:5a:e1:ec:d7:8b:
89:4d:67:3b:34:81:c2:0b:3c:9b:e3:a1:2e:eb:b1:4d:f8:02:
b4:23:4d:d7:e1:2b:d9:21:05:68:e0:e2:7a:99:87:d7:f3:3d:
fa:fe:e6:93:f4:a0:4f:5b:34:fb:b3:51:57:ff:bd:84:93:13:
da:c4:da:ca:55:67:52:cc:b4:04:da:a4:47:2e:e3:2f:a1:ab:
72:c5:3c:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF0MP32SA59Co9q1Wban5lz8uYmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVDRjRENzdFMkI5MTE5MjU3NUUyREUwREM5MUYxMDlC
REIwREE5MzAeFw0yMzAzMjExNDU1MDBaFw0yNDAzMTkxNTAwMDBaMDMxMTAvBgNV
BAMTKDBCMTNBRjA2NzRBRTRDNTk4NzQ0NTY1MkQ3QTRFNzFEQTlBQzcxMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QHAlutO3sF+X42aoliSUKGQE
R+5r+b/V7JLIZJijt5EX/KxWQuFMqS3HOrOOZQfnc7srg5kgDayvWh2cdkM10Ue4
Q/xx3nY7WIi5h7UWTWQX+UcaciYvn7wBnwUYzNiikHHgSOZhJHHn0FjIB8oVjFgU
n6oma5MWH1KI2keXAAWwtpN4zSMT1liSL6TZTrI23D4kY+gmdGwoO3ptmdwUcd4D
5H+k0JUyyTC5P2iKnK/+4gSEgv71Bh/Y5QqQBJmD737Zbo8qrbpnwreVa8gTAPkn
EJIRyPSPCC8hVS/ybNq6BPDMDoUn1RsrT6fM2CCMvrxTbRlEEvntG6RxpdMrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCxOvBnSuTFmHRFZS16TnHamscRgwHwYDVR0j
BBgwFoAUvs9Nd+K5EZJXXi3g3JHxCb2w2pMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFkWlNFZGdmc3J6c1dTYld1VFBKYnBFWHZUU0FWYXQ0bWdXdDl0Q0hM
ZEQvMC9CRUNGNEQ3N0UyQjkxMTkyNTc1RTJERTBEQzkxRjEwOUJEQjBEQTkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFQ0Y0RDc3RTJCOTExOTI1
NzVFMkRFMERDOTFGMTA5QkRCMERBOTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhZFpTRWRnZnNyenNXU2JXdVRQSmJwRVh2VFNBVmF0NG1nV3Q5dENITGRELzAv
MzEzNzMwMmUzMjM1MzQyZTM4MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq/lEwDQYJKoZIhvcNAQELBQADggEBALqo+TqR
4iuA3Ylma0wrZ96SHqzypyZnQKdV5Ld0l5bimPWql5kVXN4AYDkLGQ8K9SkIZc93
mHpUkaWp4rg5MUx3zytcDr+KdvvzC1Xh3mClb/Ixo6x/LfABJCosDReS39icB31D
6KZxvp+NjwHImegxZqC8dxMBvlDzT79sGAi+TKrM4xHEveKNCi212rC8hKg9cv8y
EVgAHOpqhnOGBP1oA4nL6zyA4SCVOPlPzy9a4ezXi4lNZzs0gcILPJvjoS7rsU34
ArQjTdfhK9khBWjg4nqZh9fzPfr+5pP0oE9bNPuzUVf/vYSTE9rE2spVZ1LMtATa
pEcu4y+hq3LFPBs=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:37 2023 by rpki-client on console.sobornost.net