Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3232203d3e20323639303936.roa
File: 34352e3137352e3234382e302f32322d3232203d3e20323639303936.roa (raw, json)
Hash identifier: W3nYMlI1hYBp9QePYbbOOkNRpsYDsCnt2itHCUjxDrE=
Subject key identifier: 88:91:6E:57:99:2E:20:12:CB:B4:08:CF:A8:77:AE:F5:0C:01:42:E1
Certificate issuer: /CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
Certificate serial: 61D94B6D01DFD13E8760EA31E2202A005BCA394E
Authority key identifier: 0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3232203d3e20323639303936.roa
Signing time: Thu 16 Nov 2023 15:25:39 +0000
ROA not before: Thu 16 Nov 2023 15:20:39 +0000
ROA not after: Thu 14 Nov 2024 15:25:39 +0000
asID: 269096
IP address blocks: 45.175.248.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d9:4b:6d:01:df:d1:3e:87:60:ea:31:e2:20:2a:00:5b:ca:39:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
Validity
Not Before: Nov 16 15:20:39 2023 GMT
Not After : Nov 14 15:25:39 2024 GMT
Subject: CN=88916E57992E2012CBB408CFA877AEF50C0142E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:b9:99:9d:27:2d:c8:c2:bf:cb:4f:c3:79:
31:68:89:df:4d:6f:5b:7a:51:e3:29:0c:0d:a9:ee:
89:f4:78:6c:59:0a:26:48:13:1d:7b:17:08:0a:e7:
a9:e7:6b:ca:60:d8:8a:80:0b:56:14:0e:f2:81:e4:
fb:88:b9:e5:1c:fe:d9:bd:5d:ed:0d:bb:d1:29:ed:
5d:17:72:6b:2c:1a:e8:66:6c:a3:49:80:7d:66:81:
3d:f0:61:91:a9:72:af:50:64:89:0a:32:ad:2f:5b:
ef:7e:ab:e2:ad:77:7b:18:18:7a:29:6c:fc:c7:6c:
8c:ae:cc:2e:29:d3:b5:a8:fa:39:f7:4d:d6:5f:26:
49:70:dc:c9:96:dd:13:8f:82:f7:5b:16:61:52:2c:
b9:d8:98:15:da:4e:80:38:cb:b8:e8:32:d5:58:62:
17:93:43:ac:c6:4a:c9:31:71:be:1c:e3:b2:b1:cf:
51:2f:3a:d9:26:72:f7:f2:33:96:20:a0:f1:de:8a:
f2:36:17:52:9d:2f:8c:cf:f1:14:47:fb:6f:44:b1:
20:de:d9:0d:52:46:a6:3b:72:44:ab:ec:73:b2:6e:
42:f9:c6:b9:5e:13:19:95:91:6f:2b:0a:2b:0b:81:
62:a5:82:69:f3:f6:74:f3:8e:40:51:9f:b1:63:97:
40:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:91:6E:57:99:2E:20:12:CB:B4:08:CF:A8:77:AE:F5:0C:01:42:E1
X509v3 Authority Key Identifier:
keyid:0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3232203d3e20323639303936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.248.0/22
Signature Algorithm: sha256WithRSAEncryption
19:59:65:c4:76:32:36:68:00:eb:3a:bb:63:3c:3b:88:26:d7:
f0:40:bc:4d:f5:b2:eb:7b:b3:f1:92:f0:06:2b:ff:09:62:57:
6c:8b:f5:ad:ba:ce:01:ef:5c:fe:0b:26:1f:b4:8a:3b:6d:8e:
3f:4c:90:09:a7:38:17:9e:e2:8d:05:b0:30:11:a2:9e:c2:bb:
d3:ee:4f:fd:fa:50:a6:fb:a2:fb:64:03:32:77:d5:dd:e6:74:
26:3d:00:02:59:b9:33:b7:89:1c:49:dd:49:e6:20:9f:ee:08:
8f:ab:69:77:73:84:09:20:7b:c3:68:80:b1:04:92:09:1c:d0:
83:2a:9f:c8:4c:9a:81:42:80:11:ac:39:3d:c7:73:42:21:9b:
44:49:cb:6a:e2:d3:c6:bf:3a:28:83:6d:49:3a:f8:d9:97:a7:
4e:a3:90:5e:15:50:8f:19:43:2d:0d:70:d6:a1:07:2e:88:5d:
08:a7:31:94:b1:14:9a:a1:d0:8c:95:3d:f0:23:42:e6:ca:90:
4b:e9:b9:0b:25:90:72:b6:0f:95:47:45:aa:e2:e3:2a:40:77:
14:d7:9a:99:a7:27:2d:c7:7b:26:25:2d:c9:19:ae:0d:b0:8b:
45:0e:20:d6:04:c1:01:7e:03:bf:b3:73:d1:60:08:ec:1a:c9:
11:13:84:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 03:30:10 2023 by rpki-client on console-ams.rpki-client.org