Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33382e302f32342d3234203d3e203238313931.roa
File: 3138392e39302e33382e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier: V6jpWD+f1Sv6DCZPPQTO/xVfVpf9aULu3oo8EQZzFco=
Subject key identifier: 1B:63:D0:DE:CD:2C:B4:AC:26:A5:86:4E:E7:DE:85:45:7E:B7:64:7B
Certificate issuer: /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial: 7D66A735CFFC1FC4AC3A4E1C874FC06533FE6DFD
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33382e302f32342d3234203d3e203238313931.roa
Signing time: Wed 17 Apr 2024 11:42:28 +0000
ROA not before: Wed 17 Apr 2024 11:37:28 +0000
ROA not after: Wed 16 Apr 2025 11:42:28 +0000
asID: 28191
IP address blocks: 189.90.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:66:a7:35:cf:fc:1f:c4:ac:3a:4e:1c:87:4f:c0:65:33:fe:6d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Validity
Not Before: Apr 17 11:37:28 2024 GMT
Not After : Apr 16 11:42:28 2025 GMT
Subject: CN=1B63D0DECD2CB4AC26A5864EE7DE85457EB7647B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:df:a8:1b:e0:ad:ee:d9:4b:6f:13:c2:59:
70:c3:06:1f:e6:e5:44:07:63:ae:5a:27:9f:37:b0:
1f:76:8b:22:18:1c:a5:7a:80:eb:54:1f:30:85:0b:
6a:b6:62:8a:ee:f3:21:72:cb:5b:51:55:2c:4e:96:
18:c1:27:7e:38:b4:8b:80:c0:e7:df:da:79:2e:4c:
c8:35:0f:28:e3:d3:e5:d2:f6:21:b1:45:f8:4c:40:
eb:1a:c0:07:0f:28:3f:6a:a9:77:75:66:a4:fd:8c:
5b:b1:3e:5d:ce:df:83:30:13:c8:ac:76:7d:7f:b1:
07:c3:e4:39:df:e3:df:84:46:b8:88:42:5f:73:d9:
a0:ec:dd:41:8a:65:a5:98:b8:f6:80:ec:4f:c3:84:
8f:b0:a6:81:60:be:22:c2:4e:81:e8:6b:c7:6e:eb:
d5:5a:70:96:06:68:4d:d8:e8:ac:4f:35:a9:35:d6:
f4:d1:5e:8d:54:cb:d5:b1:0c:09:2e:09:3e:df:24:
75:eb:47:ba:2f:a9:ae:3b:81:42:20:85:5a:fc:d3:
e1:d4:7f:9a:bd:ff:a4:4b:8e:6e:a0:1f:37:7c:9e:
a2:e5:02:b5:67:c6:6a:b9:6b:5f:6f:85:29:3c:fb:
1f:74:bc:f3:da:33:69:5f:b0:e0:69:e7:2b:02:88:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:63:D0:DE:CD:2C:B4:AC:26:A5:86:4E:E7:DE:85:45:7E:B7:64:7B
X509v3 Authority Key Identifier:
keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33382e302f32342d3234203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.38.0/24
Signature Algorithm: sha256WithRSAEncryption
89:92:45:d3:47:54:f0:81:f4:8a:d6:da:1b:54:af:80:e5:d0:
6c:71:78:ca:cc:70:7c:e3:30:05:3e:24:a8:f5:65:d3:28:80:
31:73:d0:2f:eb:dd:59:fe:24:b6:a8:68:cb:b6:e4:1c:c7:87:
14:ec:c0:40:64:ef:b9:ac:4c:5f:0c:93:9c:62:d6:50:c3:93:
5a:32:d2:7c:1d:b4:07:f0:38:04:26:84:e5:b2:2a:82:1f:16:
36:81:19:61:0c:fe:40:a3:12:d1:a9:29:2e:2a:ec:f3:0c:c1:
d4:d4:84:74:95:44:f5:79:e5:9b:e8:89:80:13:e0:90:3e:7b:
a2:66:e3:2e:83:64:5f:1d:3e:ae:03:b3:37:5a:ee:98:8a:cb:
84:eb:40:b4:87:bf:4c:ab:65:c7:07:22:cc:7f:85:e8:f5:61:
98:83:86:60:55:3b:2b:a2:6f:37:79:96:33:d3:c7:87:0d:d9:
e1:35:c6:e6:85:33:15:ff:4a:20:2b:5b:4d:07:e3:82:60:4f:
75:06:00:30:1f:14:26:49:a5:26:26:0a:5d:64:da:d8:c7:8c:
d0:e3:a1:09:5d:cc:35:32:ef:e7:fe:03:ef:27:9e:71:0b:96:
19:9d:88:5d:7b:23:41:18:58:03:c6:80:c8:2c:b3:22:54:64:
23:3e:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:40:31 2024 by rpki-client on console-fra.rpki-client.org