Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137302e37392e32342e302f32322d3232203d3e203532383037.roa
File: 3137302e37392e32342e302f32322d3232203d3e203532383037.roa (raw, json)
Hash identifier: q7yqcAofn9Sh1GJOux//auPkcJLuop5iRVZk1Ehf2gI=
Subject key identifier: 09:E2:E9:44:68:0A:F7:DE:7D:DB:B8:81:E5:98:65:43:EA:3F:6C:C0
Certificate issuer: /CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
Certificate serial: 40A453723D3FF093EC76ACC57707A636FE48FF03
Authority key identifier: AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137302e37392e32342e302f32322d3232203d3e203532383037.roa
Signing time: Thu 15 Feb 2024 13:43:50 +0000
ROA not before: Thu 15 Feb 2024 13:38:50 +0000
ROA not after: Thu 13 Feb 2025 13:43:50 +0000
asID: 52807
IP address blocks: 170.79.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 10 Apr 2024 13:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a4:53:72:3d:3f:f0:93:ec:76:ac:c5:77:07:a6:36:fe:48:ff:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
Validity
Not Before: Feb 15 13:38:50 2024 GMT
Not After : Feb 13 13:43:50 2025 GMT
Subject: CN=09E2E944680AF7DE7DDBB881E5986543EA3F6CC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:1e:82:8f:5d:9a:8f:86:ad:62:91:6b:5e:
64:1c:d4:dd:73:8b:88:c9:a7:e2:60:84:cc:ea:08:
2f:04:ae:f0:30:ce:aa:a7:e7:fd:13:92:dd:8c:3b:
e8:69:a7:55:76:50:cd:cd:8b:3a:12:78:ea:20:c0:
fe:e3:37:49:c3:83:9b:59:e3:9b:44:13:d8:15:db:
d2:5b:8b:a6:73:76:ed:2e:28:45:8e:06:99:5f:95:
6f:73:b4:6a:ad:27:f3:6e:fd:eb:80:c5:05:15:b4:
51:18:e0:e9:b6:1a:f5:a9:d9:16:6c:30:a6:cc:05:
84:9a:82:1f:c7:aa:f0:5f:c8:7f:7d:3c:2b:b9:a2:
8c:39:d1:43:65:9a:b2:34:b8:cd:81:23:bd:52:46:
83:83:33:ec:e0:0a:da:af:1a:c6:ee:fe:6f:ce:2b:
9e:21:67:f0:b9:6a:bc:ce:cf:b8:62:20:b5:e3:82:
06:39:6b:48:ee:37:64:6d:02:b5:4d:f9:0c:8b:00:
55:ba:e1:82:0d:34:11:0b:da:eb:9d:c9:56:70:1b:
50:36:10:7d:8d:5e:ab:05:68:fc:86:0e:80:89:8a:
90:cb:71:07:4e:32:ec:a3:46:43:e1:70:95:7c:6b:
88:7a:50:86:e5:94:d1:53:bc:18:c3:78:21:39:08:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E2:E9:44:68:0A:F7:DE:7D:DB:B8:81:E5:98:65:43:EA:3F:6C:C0
X509v3 Authority Key Identifier:
keyid:AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137302e37392e32342e302f32322d3232203d3e203532383037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.24.0/22
Signature Algorithm: sha256WithRSAEncryption
96:61:bc:2d:95:fd:51:9a:76:94:8d:8a:e8:cc:ea:b4:5b:70:
c7:49:e0:44:b1:3f:9f:df:56:06:a9:ee:87:d7:0c:e9:e1:39:
4c:aa:a8:c4:36:e8:85:98:44:db:17:31:40:14:f2:b4:79:43:
c7:60:87:b6:4c:5a:05:43:c9:79:19:08:a7:73:8b:74:3c:cf:
3c:10:54:ad:65:2e:a2:ab:9f:0d:24:1a:d1:6b:9b:ed:a0:96:
10:e5:7c:87:7b:e0:88:47:cc:28:86:24:83:b3:09:a5:f3:a7:
2b:0d:78:f1:78:33:ca:3e:d4:9a:db:f2:07:f6:81:72:95:ad:
b9:f0:06:30:7a:56:0a:28:70:b9:96:5b:5b:c3:e7:d2:32:22:
05:17:c7:b9:1e:fb:ba:5d:f8:0d:19:8c:b5:8e:35:08:d2:46:
5c:00:fe:a6:57:2e:89:a4:84:46:99:d4:e2:e4:98:cf:18:ff:
5d:20:b4:3e:d5:08:df:aa:f6:e3:74:f9:19:9f:68:6e:ab:91:
16:17:d2:f7:38:5e:29:86:bc:ce:5d:7f:a9:b4:76:d2:09:07:
18:57:5a:7b:65:2f:b9:01:e8:41:39:c5:b2:c8:70:d9:6f:b5:
9f:a6:5a:b8:ab:05:7e:b6:a3:84:74:e0:f3:62:d2:99:2d:ed:
fa:7e:b5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:40:10 2024 by rpki-client on console-ams.rpki-client.org