Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/3137302e37382e35322e302f32322d3232203d3e20323635343935.roa
File: 3137302e37382e35322e302f32322d3232203d3e20323635343935.roa (raw, json)
Hash identifier: q4N805gCt4ZjULXoozmHlI/0iYVnJ1YDgFtILOUnCJw=
Subject key identifier: C8:99:7C:BF:DF:2D:BE:89:C7:34:D0:19:63:1E:D2:C0:5D:4C:9A:07
Certificate issuer: /CN=ACAB551AAA41D00C17FEB2D03995311064730A91
Certificate serial: 17FAAC3B5F32197BF9AFD6C534C3F730F8B79DBE
Authority key identifier: AC:AB:55:1A:AA:41:D0:0C:17:FE:B2:D0:39:95:31:10:64:73:0A:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACAB551AAA41D00C17FEB2D03995311064730A91.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/3137302e37382e35322e302f32322d3232203d3e20323635343935.roa
Signing time: Wed 14 Feb 2024 20:14:52 +0000
ROA not before: Wed 14 Feb 2024 20:09:52 +0000
ROA not after: Wed 12 Feb 2025 20:14:52 +0000
asID: 265495
IP address blocks: 170.78.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 15 Feb 2024 16:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:fa:ac:3b:5f:32:19:7b:f9:af:d6:c5:34:c3:f7:30:f8:b7:9d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACAB551AAA41D00C17FEB2D03995311064730A91
Validity
Not Before: Feb 14 20:09:52 2024 GMT
Not After : Feb 12 20:14:52 2025 GMT
Subject: CN=C8997CBFDF2DBE89C734D019631ED2C05D4C9A07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:72:14:39:7f:b7:cb:7e:12:7b:65:1a:c1:
f0:7e:27:ba:99:3e:b4:cd:78:49:64:41:c1:a7:fd:
8d:03:1d:6d:e4:a0:a2:a1:c6:8c:a8:57:51:a6:35:
40:cd:98:5a:f4:01:cc:b3:12:84:4d:00:b2:65:7e:
4c:95:de:5a:d1:1d:ae:f5:69:35:32:32:e1:b1:93:
46:16:64:30:ca:2d:96:55:04:f2:9c:86:ae:49:f0:
37:a2:c4:ae:8d:97:0b:41:67:8c:7e:c4:b2:17:93:
f8:1b:f9:8f:2a:9e:1a:60:f1:c4:72:6c:9e:fa:cd:
66:62:e5:a0:ca:e4:c6:bd:20:61:0b:6e:29:96:7b:
57:f4:36:1d:14:ce:a6:45:f8:0a:d5:bb:94:6b:e4:
e7:5c:23:cf:12:39:9d:4c:d3:63:0c:97:a4:76:87:
71:0a:58:4f:7a:43:d9:da:c7:5a:8f:1b:bd:82:5c:
c5:55:64:c1:53:3a:a8:8d:56:76:34:ba:b6:3d:b8:
83:5c:06:56:e1:6d:bd:b1:44:fd:b2:1d:22:1a:be:
43:45:61:60:a8:e5:11:63:80:de:bc:ed:d9:86:87:
79:6a:5a:f6:f9:67:3c:1d:4c:33:a3:09:ec:0d:d0:
51:08:99:a6:d3:b1:bb:70:9f:27:e6:18:c0:be:fe:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:99:7C:BF:DF:2D:BE:89:C7:34:D0:19:63:1E:D2:C0:5D:4C:9A:07
X509v3 Authority Key Identifier:
keyid:AC:AB:55:1A:AA:41:D0:0C:17:FE:B2:D0:39:95:31:10:64:73:0A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/ACAB551AAA41D00C17FEB2D03995311064730A91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACAB551AAA41D00C17FEB2D03995311064730A91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/3137302e37382e35322e302f32322d3232203d3e20323635343935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.52.0/22
Signature Algorithm: sha256WithRSAEncryption
96:2a:87:20:21:46:4c:7f:58:01:a3:2a:c2:8b:90:e3:c5:23:
ef:b5:cf:d7:a0:65:06:3f:56:be:14:0a:bf:19:6d:7e:ed:40:
a9:17:4c:d8:15:c9:44:9c:f6:3c:cc:9b:c5:47:2f:4b:de:07:
2d:d3:2d:f5:c5:07:a4:5b:ef:33:fa:ce:73:21:00:11:11:fe:
a5:ee:ba:06:b6:02:22:8a:c1:f5:89:cc:9b:32:8f:d9:36:c9:
0a:64:25:93:03:44:2f:e0:2c:79:7f:c7:05:e1:84:77:13:79:
92:20:2c:44:0a:2a:e1:c0:88:b0:8f:e5:24:3f:c2:66:9e:ca:
66:9c:4a:13:f0:a1:f0:07:b2:bc:6c:61:b1:87:5e:b3:1b:28:
4d:4b:47:7b:35:96:6b:2e:40:e7:41:d9:83:e4:87:8d:55:17:
7e:dd:e7:ef:ac:f1:08:0a:47:51:a1:0a:eb:96:a7:83:8e:7f:
30:13:2e:92:37:f4:1a:1d:e8:63:9d:c4:84:bd:df:9c:eb:31:
f0:2a:2e:3a:bf:4c:ec:b3:1c:6c:db:4e:91:fd:5e:56:dd:1f:
46:67:77:5f:5e:15:23:6e:bb:f6:b2:9e:dd:77:8e:14:80:ac:
50:e7:6d:9f:f0:e4:a7:61:3b:19:28:ec:95:b8:31:78:59:ba:
39:ff:50:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 20:22:34 2024 by rpki-client on console-fra.rpki-client.org