Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3137392e3130382e34342e302f32322d3232203d3e2035.roa
File: 3137392e3130382e34342e302f32322d3232203d3e2035.roa (raw, json)
Hash identifier: rnDbcjoLBG6qfDS2DNlVU/MBZwqcXRNKkVKd9uETvJ8=
Subject key identifier: F0:FD:3C:DB:C2:35:28:81:3A:95:B7:B3:5E:65:A9:9C:DF:36:2A:E5
Certificate issuer: /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial: 58A8854F269B729D717C2E345D2E86F165C525D1
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3137392e3130382e34342e302f32322d3232203d3e2035.roa
Signing time: Mon 13 Jan 2025 14:16:26 +0000
ROA not before: Mon 13 Jan 2025 14:11:26 +0000
ROA not after: Mon 12 Jan 2026 14:16:26 +0000
asID: 5
IP address blocks: 179.108.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 12 Feb 2025 12:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a8:85:4f:26:9b:72:9d:71:7c:2e:34:5d:2e:86:f1:65:c5:25:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Validity
Not Before: Jan 13 14:11:26 2025 GMT
Not After : Jan 12 14:16:26 2026 GMT
Subject: CN=F0FD3CDBC23528813A95B7B35E65A99CDF362AE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:64:d4:3b:2c:9f:08:73:ef:64:33:93:96:
ab:25:43:3c:5b:c9:2d:27:86:c7:f9:1e:f6:53:99:
89:33:47:93:03:22:fc:40:91:c1:f4:a5:d0:61:7d:
15:c8:90:99:03:cb:84:33:db:aa:fa:81:50:fd:81:
d6:f0:53:e0:f1:0a:cd:42:8c:97:1a:9d:fd:a1:31:
73:dc:20:75:32:06:12:d0:30:59:be:32:20:90:32:
14:e1:3d:c0:46:56:3d:b6:db:99:dc:6c:15:15:05:
f8:63:c6:cf:c7:aa:8b:89:20:13:11:50:13:0f:86:
0e:2d:30:9b:4e:55:66:fb:d3:4f:04:4d:81:af:48:
06:06:da:83:58:94:36:e9:bd:77:6b:8d:83:3a:4f:
28:17:5f:a6:d2:c5:75:fe:52:cb:ba:74:74:c0:b8:
d8:e7:7b:d7:d2:db:c4:14:ea:e6:07:19:81:da:c5:
ab:51:77:53:6e:13:ec:d4:20:b8:12:9f:66:38:a2:
51:a6:bb:1e:57:1f:e4:e6:57:e4:bc:60:e8:f0:61:
0b:38:da:d5:20:3f:1e:75:da:96:2c:bc:b9:3a:53:
56:7d:27:be:65:2b:02:47:a0:97:27:42:1c:75:55:
36:4f:19:6b:cb:d2:0e:b8:3d:24:f7:22:a2:05:0d:
eb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FD:3C:DB:C2:35:28:81:3A:95:B7:B3:5E:65:A9:9C:DF:36:2A:E5
X509v3 Authority Key Identifier:
keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3137392e3130382e34342e302f32322d3232203d3e2035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.108.44.0/22
Signature Algorithm: sha256WithRSAEncryption
60:05:19:37:e3:22:68:97:7f:99:8e:9c:15:bf:d3:ea:21:a9:
7f:30:a6:89:ff:2d:cc:95:58:21:21:0a:0e:20:cf:47:17:f7:
18:cb:fa:93:97:dc:b4:3c:f9:a7:ed:bd:7d:fe:2e:7b:9e:5a:
9b:c0:ed:d8:39:ba:9b:49:73:2f:e3:ac:29:89:2a:08:6b:de:
fe:d2:e0:9a:a2:d6:f2:de:0c:87:46:cf:26:a1:d4:6c:1d:f9:
bc:6c:9d:88:aa:43:a7:b3:a6:85:6e:47:b9:3b:ba:05:66:d3:
a8:82:ea:68:12:2d:f7:eb:b8:06:ad:31:49:14:75:0d:62:ca:
8f:8b:71:ef:c4:76:1c:dd:ab:df:21:82:3c:20:aa:4b:2e:aa:
00:97:b8:19:ab:52:35:41:d9:6b:1d:79:d3:ab:ba:59:1a:ae:
f7:e2:25:8b:5b:fa:a1:2a:65:84:17:ee:f9:d1:ce:59:4d:48:
52:e1:b1:c4:86:fe:e9:7d:c3:dc:42:50:18:5f:35:a5:33:17:
8b:3d:d7:6a:56:a0:b8:cf:bd:c7:f4:92:29:99:3e:72:22:21:
87:c8:46:26:1e:9b:8f:84:cd:da:14:7e:f2:04:9d:3d:f8:18:
01:ac:a6:5f:95:3e:0e:1d:51:a0:da:27:c5:d9:fb:ac:77:9e:
55:2b:3a:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 03:49:24 2025 by rpki-client on console.sobornost.net