Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233392e302f32342d3234203d3e20323634383836.roa
File: 3230312e34392e3233392e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier: w8/baVuwTvXfsN4Z+hViWAtWXsqNP8PZDXAcyHZfndU=
Subject key identifier: B4:F3:BD:79:25:0F:0E:C0:4F:E4:A4:68:9F:C8:1E:07:FE:BF:36:79
Certificate issuer: /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial: 66D284245F74D3CE536991617E0B19872829154D
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233392e302f32342d3234203d3e20323634383836.roa
Signing time: Thu 12 Dec 2024 13:54:18 +0000
ROA not before: Thu 12 Dec 2024 13:49:18 +0000
ROA not after: Thu 11 Dec 2025 13:54:18 +0000
asID: 264886
IP address blocks: 201.49.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 14:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d2:84:24:5f:74:d3:ce:53:69:91:61:7e:0b:19:87:28:29:15:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Validity
Not Before: Dec 12 13:49:18 2024 GMT
Not After : Dec 11 13:54:18 2025 GMT
Subject: CN=B4F3BD79250F0EC04FE4A4689FC81E07FEBF3679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:1d:82:79:a9:7d:ac:4e:dc:13:8a:cd:90:
c0:ee:3e:e4:21:cb:91:19:53:5f:fa:48:92:21:6b:
86:2e:04:7c:4c:4b:67:29:e3:7b:56:77:41:d6:00:
8c:80:49:e2:dc:8f:50:42:be:fa:5b:de:64:32:2b:
53:30:90:fa:bd:40:67:20:b5:62:fc:1c:7e:25:fa:
aa:be:74:83:a9:0f:39:75:67:d8:8a:65:3f:71:c2:
f0:20:4c:bd:9d:02:87:72:fb:05:91:7a:fa:56:a0:
0d:69:b6:ff:87:75:ef:97:95:bc:14:c3:85:59:08:
4a:28:1a:9b:25:10:1c:5a:9d:92:01:e9:0b:29:05:
01:32:ca:7b:1e:6b:17:14:2c:bc:eb:07:bf:0f:d7:
f0:f8:90:06:98:d0:23:67:ac:d6:39:56:57:48:9e:
fb:e5:fe:57:95:1f:46:e1:47:b0:78:f4:a1:4c:08:
d8:a8:88:cb:06:99:7a:04:21:21:79:68:a0:6c:62:
86:64:b1:2c:19:61:53:1f:d9:98:51:36:94:77:b7:
69:63:b9:9f:5f:04:e1:06:67:06:4c:21:66:02:f2:
90:59:2c:f9:42:1c:66:cd:a0:e9:38:b0:5e:0b:b4:
3c:20:f1:23:51:e8:97:7d:ac:5d:9c:84:84:78:64:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:BD:79:25:0F:0E:C0:4F:E4:A4:68:9F:C8:1E:07:FE:BF:36:79
X509v3 Authority Key Identifier:
keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233392e302f32342d3234203d3e20323634383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.239.0/24
Signature Algorithm: sha256WithRSAEncryption
31:6a:56:2f:54:d8:de:f5:e5:fc:1d:e7:a3:7c:84:ac:fe:a9:
92:e2:fd:8c:ba:1a:58:a3:40:f6:41:7c:14:68:74:95:2c:6b:
c0:c1:65:73:75:35:05:2e:c1:60:26:e3:b0:75:6c:64:33:d0:
89:c8:51:64:b0:57:b0:85:0b:9e:27:e0:e2:55:5d:9a:39:5f:
e7:4a:8b:57:c8:02:90:5f:2c:66:51:2c:80:06:e9:c1:81:37:
bc:f3:b7:26:16:50:ac:44:3c:e2:4d:6d:1f:47:1b:fc:a8:5f:
fc:fd:7e:2f:8e:04:b4:8d:fb:fd:d6:f7:77:cd:c5:96:25:44:
f4:26:32:90:83:c9:a5:3b:2a:67:6e:98:63:a4:ab:ca:af:20:
c7:4c:89:e9:8d:8a:ec:ec:e0:90:6d:ef:67:3b:ea:33:d9:df:
2f:eb:a4:55:28:22:ec:a4:ca:ce:11:ca:77:17:5d:6d:5e:38:
c1:6c:1b:f8:26:c8:10:7f:ce:e0:fb:78:d4:83:e0:63:0b:6f:
a6:be:17:b1:ae:27:bf:2e:ee:26:57:4e:c6:40:09:75:1a:b4:
70:d2:a6:3d:68:d8:2e:c7:9d:be:d5:f9:85:b3:b5:e8:e8:86:
e6:54:41:e7:d3:11:9b:13:14:c8:c6:52:22:e8:a4:57:4e:83:
f5:ac:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 13 16:39:17 2025 by rpki-client on console.sobornost.net