Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38332e302f32342d3234203d3e20323635313030.roa
File: 3137302e3235342e38332e302f32342d3234203d3e20323635313030.roa (raw, json)
Hash identifier: g10PJh+tHXC7VvSTCO4ImtCSsn0cm5DI+hOeFMPBp8c=
Subject key identifier: 3B:23:32:4D:BE:AD:1D:52:EC:E0:F2:18:D0:A4:47:0F:1E:BF:67:02
Certificate issuer: /CN=BECF4D77E2B91192575E2DE0DC91F109BDB0DA93
Certificate serial: 35736124C8A130545074B5DF82149B50E51790F8
Authority key identifier: BE:CF:4D:77:E2:B9:11:92:57:5E:2D:E0:DC:91:F1:09:BD:B0:DA:93
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38332e302f32342d3234203d3e20323635313030.roa
Signing time: Tue 21 Mar 2023 15:00:00 +0000
ROA not before: Tue 21 Mar 2023 14:55:00 +0000
ROA not after: Tue 19 Mar 2024 15:00:00 +0000
asID: 265100
IP address blocks: 170.254.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:73:61:24:c8:a1:30:54:50:74:b5:df:82:14:9b:50:e5:17:90:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BECF4D77E2B91192575E2DE0DC91F109BDB0DA93
Validity
Not Before: Mar 21 14:55:00 2023 GMT
Not After : Mar 19 15:00:00 2024 GMT
Subject: CN=3B23324DBEAD1D52ECE0F218D0A4470F1EBF6702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:5a:25:f7:66:91:c8:f4:27:58:99:cd:b7:
aa:32:b5:93:60:41:79:8b:67:0f:3c:41:d8:4e:26:
00:9b:6e:49:68:fa:50:e2:2f:18:9f:7a:f4:18:5e:
ff:7b:70:71:9b:c9:48:d8:6e:ff:33:8a:08:a5:c2:
c1:d2:20:3c:8f:1d:a2:b9:85:c4:b0:17:94:82:43:
4c:29:f2:6a:ca:66:ad:71:24:92:2b:f6:68:36:4f:
02:cc:a2:cc:2c:68:a7:55:e9:d3:d2:d1:e7:09:b0:
42:2c:06:63:22:6d:e0:00:32:3a:21:20:2a:83:ab:
37:5f:72:5b:d0:e2:6d:05:53:1c:84:08:93:e2:a9:
fd:55:51:bd:4a:6a:20:f7:ff:66:6e:fe:5c:7d:e2:
56:ee:c9:41:bb:37:51:66:2b:bb:d1:94:64:3f:7f:
48:ce:26:fe:d4:1e:f5:15:c7:4d:9c:73:51:e5:2a:
52:d8:d8:1f:8a:fd:2f:96:38:9a:59:58:68:b3:4b:
7e:e8:1f:97:50:bc:9d:d9:51:df:7b:2d:4e:a4:7f:
22:36:b9:6d:01:b7:ec:b1:d0:a6:c6:7a:bf:e3:80:
a4:38:c8:13:a4:f5:11:96:e8:d0:6a:c2:5b:5e:01:
ce:0b:ef:68:0c:50:a4:5c:44:81:99:d1:67:37:c7:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:23:32:4D:BE:AD:1D:52:EC:E0:F2:18:D0:A4:47:0F:1E:BF:67:02
X509v3 Authority Key Identifier:
keyid:BE:CF:4D:77:E2:B9:11:92:57:5E:2D:E0:DC:91:F1:09:BD:B0:DA:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38332e302f32342d3234203d3e20323635313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.83.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:77:02:b5:55:80:d3:67:eb:69:0d:69:b5:49:f3:3e:82:34:
38:ca:fd:79:cb:56:41:9b:9c:dd:6b:cc:86:29:2e:12:7d:66:
8c:d8:32:43:34:a4:76:80:1c:4a:19:c1:6b:f3:40:d5:60:97:
b8:1c:4d:4e:f3:e7:d5:74:2b:19:2e:e4:dd:a6:59:8f:7f:29:
de:b0:96:91:d6:1e:d6:65:3d:a8:a4:70:03:fd:46:d5:94:bb:
7d:4c:29:aa:9a:c3:9b:a4:ef:32:2d:29:57:2c:f2:6d:b7:17:
3c:37:8a:3f:a2:1a:6f:27:16:22:da:2e:e6:60:7f:d1:6d:33:
a4:a7:8f:c5:45:33:33:9b:97:61:ec:b6:5a:c4:ab:3f:34:af:
48:93:5a:6b:97:ca:22:ae:63:6c:0a:37:7a:f5:94:c6:b7:96:
b8:4d:bb:15:0a:70:90:e1:c1:5b:35:f8:dc:52:56:a5:ae:45:
56:28:35:61:ad:47:eb:85:24:9e:46:e5:6d:20:48:9f:23:62:
57:8d:3a:0d:ce:33:46:6b:51:7b:2f:c9:03:63:51:ba:6a:33:
03:33:7b:32:e2:7a:df:06:11:15:df:3e:80:3e:5e:37:0d:90:
21:47:6b:16:b8:b9:f7:7a:76:5a:b8:79:e5:bc:c5:a5:6a:5d:
2d:44:fc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:37 2023 by rpki-client on console.sobornost.net