Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32332d3233203d3e20323635343336.roa
File: 3136382e3139352e3136382e302f32332d3233203d3e20323635343336.roa (raw, json)
Hash identifier: FQAe5cEqdztSioIZcailMtFQQRMclN2eb8Uz9S3LEfY=
Subject key identifier: 9B:67:88:61:F4:D4:C6:0F:F0:DA:9D:F7:4E:43:CC:D2:74:73:93:C7
Certificate issuer: /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial: 41107E479E3A3A3CFC9BC3BA7BCB9FB3F075EA79
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32332d3233203d3e20323635343336.roa
Signing time: Wed 24 Apr 2024 17:06:34 +0000
ROA not before: Wed 24 Apr 2024 17:01:34 +0000
ROA not after: Wed 23 Apr 2025 17:06:34 +0000
asID: 265436
IP address blocks: 168.195.168.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:10:7e:47:9e:3a:3a:3c:fc:9b:c3:ba:7b:cb:9f:b3:f0:75:ea:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Validity
Not Before: Apr 24 17:01:34 2024 GMT
Not After : Apr 23 17:06:34 2025 GMT
Subject: CN=9B678861F4D4C60FF0DA9DF74E43CCD2747393C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:74:95:5d:8b:60:67:b6:ff:f9:ea:3f:6c:
d9:04:8e:3a:14:3b:a2:d0:53:96:fc:84:a6:56:e0:
4d:f6:67:70:6e:23:04:58:30:80:e7:fe:89:c6:5d:
b8:c1:32:8f:a5:9a:94:22:04:00:7e:50:0e:3c:5c:
4b:f0:0a:5a:70:dd:2b:7b:84:e1:c1:12:10:84:a4:
3e:aa:58:ae:73:22:35:f3:46:68:f6:73:95:80:10:
9b:84:48:58:67:9a:d4:d7:93:76:d1:15:3b:0d:17:
33:23:cd:c8:ba:c6:9f:89:bf:c1:a1:56:88:fe:30:
f8:9c:5c:24:a8:e2:0a:f0:bd:d9:4f:72:65:5a:47:
e6:71:04:56:cf:bf:2d:a8:20:0c:28:f8:c8:7e:58:
de:c4:c1:8d:a1:fd:34:8a:23:bd:9b:4b:56:9c:d7:
44:52:eb:f1:af:fb:6e:0a:e3:f7:03:28:79:69:9a:
ea:46:ec:0a:48:6b:cc:b9:e8:9e:b7:e9:58:51:43:
41:7d:13:dd:b9:e7:f8:8c:7a:80:b2:a6:97:f6:50:
49:25:9f:28:84:12:fb:6e:d3:dc:00:b7:00:1e:7f:
f5:ed:ac:76:21:5f:29:7b:58:f1:26:60:ea:64:bc:
02:b9:43:16:60:3b:bc:60:d9:40:64:0e:ef:01:35:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:67:88:61:F4:D4:C6:0F:F0:DA:9D:F7:4E:43:CC:D2:74:73:93:C7
X509v3 Authority Key Identifier:
keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32332d3233203d3e20323635343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.168.0/23
Signature Algorithm: sha256WithRSAEncryption
96:a1:b9:fd:0c:24:4f:5b:94:52:12:6b:46:47:8e:3f:12:48:
1d:e9:a7:e5:12:75:1e:f2:5a:ac:60:a0:7e:cd:2e:85:e9:d8:
96:41:9b:f9:c2:d8:0e:48:b5:38:27:29:b7:2d:6f:88:84:6a:
18:b0:9b:3b:b9:f8:30:9d:52:14:47:6a:9f:4b:cb:36:f4:98:
ee:91:b5:6b:28:23:ab:f1:6f:a3:a6:49:74:64:9b:22:2f:5d:
12:15:ee:9d:e8:78:91:3c:96:4a:31:45:1f:35:27:20:67:10:
49:5e:6c:6f:48:4c:eb:e1:37:08:d2:9e:3c:6f:7d:9b:69:30:
bf:38:7c:aa:72:d3:57:71:34:e2:a8:3a:4b:6b:fa:83:c3:17:
24:87:8b:06:f7:ad:7a:2a:f2:e2:dc:7e:c0:98:a1:3b:b2:78:
0a:7d:18:46:d6:c5:e9:ee:39:4d:51:eb:82:1a:11:0e:c0:8c:
d1:ac:f5:6d:c7:be:db:fa:48:25:71:01:bc:4e:d9:60:4b:88:
45:26:0e:35:4e:37:73:cd:2c:9d:d9:dc:05:b0:3c:9b:5d:05:
0d:4e:ba:43:cc:bb:59:cc:82:28:6e:91:46:33:90:e9:ab:fb:
73:4d:3c:54:b9:95:10:6c:4e:ac:44:5d:2c:22:4b:dd:d2:1b:
a7:58:35:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org