Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/3138392e382e3132302e302f32322d3232203d3e20323730373332.roa
File: 3138392e382e3132302e302f32322d3232203d3e20323730373332.roa (raw, json)
Hash identifier: 9uZDZhmZAILii5wAfU/aiSnXXk6BEsA6NmSreR4c1HU=
Subject key identifier: 3D:36:39:AF:8F:64:90:C7:1B:27:36:BA:4F:23:5A:21:F9:5C:BE:EC
Certificate issuer: /CN=B8C512507A29EDA5D36B9B84C04F6AEC61017290
Certificate serial: 53350ABC071E279EBE89CCE0422AFD4302D56F36
Authority key identifier: B8:C5:12:50:7A:29:ED:A5:D3:6B:9B:84:C0:4F:6A:EC:61:01:72:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8C512507A29EDA5D36B9B84C04F6AEC61017290.cer
Subject info access: rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/3138392e382e3132302e302f32322d3232203d3e20323730373332.roa
Signing time: Thu 15 Feb 2024 15:01:47 +0000
ROA not before: Thu 15 Feb 2024 14:56:47 +0000
ROA not after: Thu 13 Feb 2025 15:01:47 +0000
asID: 270732
IP address blocks: 189.8.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 10 Apr 2024 13:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:35:0a:bc:07:1e:27:9e:be:89:cc:e0:42:2a:fd:43:02:d5:6f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8C512507A29EDA5D36B9B84C04F6AEC61017290
Validity
Not Before: Feb 15 14:56:47 2024 GMT
Not After : Feb 13 15:01:47 2025 GMT
Subject: CN=3D3639AF8F6490C71B2736BA4F235A21F95CBEEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:63:15:0d:c8:1a:36:2c:8c:7f:50:fc:0e:
23:0f:f4:4f:2c:cb:e7:8c:3a:2c:93:63:eb:76:b9:
14:54:5d:d5:ce:7a:c9:00:f7:67:f0:ba:93:38:12:
4a:48:4a:38:03:b0:63:2e:19:2b:fc:12:a1:30:46:
e2:eb:0c:c5:a6:ff:4e:23:67:73:93:d9:82:02:80:
7e:b4:a5:c5:c5:4b:c8:41:07:e0:c3:12:78:b9:22:
42:f8:10:72:46:67:c3:d7:a9:5d:95:27:9d:c7:2e:
07:f5:d2:20:0e:28:17:0e:d3:ff:3c:af:02:2c:37:
30:86:d7:17:01:69:69:ed:ec:e2:98:2e:4c:35:47:
50:8c:89:45:30:1b:99:34:c9:82:ee:83:75:f3:ac:
34:96:3d:61:bb:bf:f8:8c:e6:92:2c:9e:42:c8:ae:
64:66:2a:28:87:88:e2:e3:6b:c1:16:73:1f:01:3b:
de:6e:6c:69:88:92:86:41:b4:07:4b:12:f0:0d:5f:
c2:92:39:5a:3f:4e:8b:18:5f:9f:77:49:d4:8c:fb:
8b:fe:e8:83:c1:f6:cb:28:01:07:01:7a:8f:32:a5:
00:10:d1:21:76:1c:37:b2:7f:1e:35:d1:b3:d3:5e:
bf:ad:d8:5f:3f:f4:61:b0:da:d1:53:ce:fb:65:e3:
39:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:36:39:AF:8F:64:90:C7:1B:27:36:BA:4F:23:5A:21:F9:5C:BE:EC
X509v3 Authority Key Identifier:
keyid:B8:C5:12:50:7A:29:ED:A5:D3:6B:9B:84:C0:4F:6A:EC:61:01:72:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/B8C512507A29EDA5D36B9B84C04F6AEC61017290.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8C512507A29EDA5D36B9B84C04F6AEC61017290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/3138392e382e3132302e302f32322d3232203d3e20323730373332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.8.120.0/22
Signature Algorithm: sha256WithRSAEncryption
87:48:66:ae:9d:01:e9:12:ed:2e:44:74:51:40:d3:5d:07:11:
be:27:8e:e0:ef:69:23:38:b7:6a:05:d4:9d:37:cb:5d:17:2c:
ea:a0:5a:68:2e:46:76:0e:3d:ab:16:e7:79:d7:f6:da:c2:f5:
bc:7e:11:68:5c:f9:36:9f:db:9c:95:10:37:7f:63:53:57:5e:
e4:0f:4f:ca:58:a5:fd:73:c3:be:e3:18:1d:40:07:80:4e:fe:
0e:f1:8b:62:54:b5:b1:a6:c6:19:ac:e2:6e:1c:05:af:ea:25:
dd:87:8d:f5:d4:bf:e9:d4:5d:a1:88:4a:88:a3:0f:1b:8a:8e:
de:53:47:9b:2e:85:34:0e:69:6b:14:8c:78:1b:85:5d:b0:93:
4a:a7:70:83:56:cd:aa:62:01:ea:3a:06:c4:9c:6f:9e:06:f8:
56:f1:3c:fa:a9:32:4a:ec:10:35:74:7e:e8:cc:50:36:f7:27:
db:cd:c4:e3:73:98:cc:c4:1a:f2:e2:cd:f8:a3:33:32:1e:12:
5f:80:0f:fe:98:d4:a7:54:c6:10:45:43:61:05:f9:22:09:b3:
fd:93:32:63:fb:da:1c:e2:6e:cf:55:b3:ed:38:37:e7:30:e5:
ba:d6:d1:ec:5a:ec:5b:a9:e3:aa:2a:36:8f:50:72:b2:79:59:
03:b9:d0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:53:30 2024 by rpki-client on console-fra.rpki-client.org