Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32342d3234203d3e20323635343336.roa
File: 3136382e3139352e3136382e302f32342d3234203d3e20323635343336.roa (raw, json)
Hash identifier: 8Hw6wDa8KxqQs5lPnU6o/gb9Sn/BcrW5Docy4/Srtvg=
Subject key identifier: FF:93:D0:3E:E5:8F:27:2D:85:AB:E9:98:B0:64:A4:DE:5E:F6:C7:65
Certificate issuer: /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial: 3FDA62AB7D4816C46F80428510F7E27DEF0FCCED
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32342d3234203d3e20323635343336.roa
Signing time: Wed 24 Apr 2024 17:06:36 +0000
ROA not before: Wed 24 Apr 2024 17:01:36 +0000
ROA not after: Wed 23 Apr 2025 17:06:36 +0000
asID: 265436
IP address blocks: 168.195.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:da:62:ab:7d:48:16:c4:6f:80:42:85:10:f7:e2:7d:ef:0f:cc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Validity
Not Before: Apr 24 17:01:36 2024 GMT
Not After : Apr 23 17:06:36 2025 GMT
Subject: CN=FF93D03EE58F272D85ABE998B064A4DE5EF6C765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:c8:d2:85:50:bb:ea:0c:9e:62:86:b5:7a:
6d:36:fb:0c:ce:e0:e5:93:fb:bc:32:5e:27:50:41:
72:61:7b:1e:08:9d:87:e8:7e:e0:65:69:aa:89:7d:
aa:6d:fd:1f:68:1d:55:3e:3f:60:1a:08:13:e4:3b:
25:26:1c:64:fd:fb:eb:82:22:b7:a8:03:77:ba:a7:
f6:29:c6:b3:de:3b:d4:6b:e5:eb:e8:90:f2:88:e4:
51:3e:06:80:ba:0e:46:8d:55:cb:5e:d0:f0:20:03:
29:e3:07:a3:29:10:ea:13:d7:34:35:c5:4c:03:ed:
13:65:99:7a:83:c8:0e:a3:8d:a4:a5:45:6a:f8:63:
fa:f0:74:e0:5c:8f:26:36:27:e8:65:ae:fb:b3:a0:
33:92:2a:14:e9:f3:24:60:b2:3a:21:ab:e6:0b:00:
f5:20:94:eb:96:a5:e2:88:52:53:4e:ae:24:da:22:
db:e8:d6:2a:77:5c:4c:95:c6:c9:dd:95:d5:66:91:
69:83:fa:5f:ab:e9:b3:e7:3a:1d:e2:60:01:59:13:
f8:e6:a5:a0:fc:2b:42:4e:b8:93:5a:d6:7e:44:e4:
4b:60:87:10:bc:ff:cf:cd:7a:8a:07:0d:57:22:30:
4c:fc:ea:c2:ca:42:1c:93:d5:53:46:0d:2f:1b:5c:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:93:D0:3E:E5:8F:27:2D:85:AB:E9:98:B0:64:A4:DE:5E:F6:C7:65
X509v3 Authority Key Identifier:
keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32342d3234203d3e20323635343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.168.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f2:8f:7e:24:af:a5:bf:c2:78:17:0c:96:a2:02:ee:45:4a:
8a:7d:27:c6:90:76:32:4a:ec:ae:55:c4:ed:49:e3:87:c5:94:
bc:6f:02:00:f7:13:1e:a3:a8:68:e5:0d:f2:57:d8:f6:6b:93:
ff:01:26:df:b3:0a:9c:42:ac:d6:6c:db:3c:6d:3a:8b:1c:e8:
91:4b:d7:34:2b:3a:ef:c2:1d:45:62:ae:59:39:42:c4:45:a1:
02:cf:db:aa:7a:65:20:31:7e:bb:63:a6:0b:d8:14:47:23:8b:
44:df:23:a1:08:c9:ae:8f:fa:1b:3a:d7:05:1b:e1:87:11:67:
96:9c:fe:e9:46:ee:68:8b:8d:99:f0:0a:8a:23:e6:10:8e:5f:
c1:b4:14:0e:af:c4:b5:08:80:29:c5:d6:da:f3:7c:b7:33:b4:
7a:3f:cb:f3:5f:17:a9:cb:c0:12:1b:10:63:46:4c:27:bf:1b:
94:27:b4:0b:b2:f2:78:04:0a:96:bc:07:d5:2a:f5:2d:cd:68:
61:93:bd:43:ba:65:e2:66:c3:15:14:a3:4d:f4:92:bc:50:ed:
c7:36:c5:8e:56:41:6f:0c:6a:d7:87:31:91:aa:78:2a:56:a7:
1c:e2:12:5a:10:72:64:ea:68:77:f4:dc:67:b6:cc:71:5c:6d:
53:47:df:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org