Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35382e302f32332d3233203d3e20323634303235.roa
File: 3136382e3139372e35382e302f32332d3233203d3e20323634303235.roa (raw, json)
Hash identifier: Hg2sPjBKKfaznvR+caGK3jAsGQ5QSsCwPNzYeYS+TUQ=
Subject key identifier: 65:D6:20:4E:57:2C:4C:DB:CA:23:5F:EB:29:9E:CA:86:96:AA:21:51
Certificate issuer: /CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Certificate serial: 1AA45F5BE19DD6499D913CDC28B249ED3C11379D
Authority key identifier: 12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35382e302f32332d3233203d3e20323634303235.roa
Signing time: Mon 11 Mar 2024 12:33:15 +0000
ROA not before: Mon 11 Mar 2024 12:28:15 +0000
ROA not after: Mon 10 Mar 2025 12:33:15 +0000
asID: 264025
IP address blocks: 168.197.58.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 12 Mar 2024 16:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a4:5f:5b:e1:9d:d6:49:9d:91:3c:dc:28:b2:49:ed:3c:11:37:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Validity
Not Before: Mar 11 12:28:15 2024 GMT
Not After : Mar 10 12:33:15 2025 GMT
Subject: CN=65D6204E572C4CDBCA235FEB299ECA8696AA2151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:42:51:97:3b:ab:d2:23:cc:96:54:83:f4:
58:a5:eb:a6:f2:09:98:7b:ad:22:e8:71:85:a4:7f:
63:ed:bd:22:ff:55:c6:3b:a5:b2:7e:48:1a:6c:58:
b2:99:8a:f0:8a:0d:2e:68:8c:a1:cc:09:46:da:1b:
63:f9:1a:a4:82:bf:59:14:bf:88:76:ea:1d:c3:18:
4e:77:a7:78:01:f1:5e:22:ac:e7:0e:88:4a:9f:5f:
ec:66:88:56:36:8e:19:25:60:1f:dd:75:62:59:d8:
d2:d1:26:39:a8:ea:c2:d6:0a:95:d9:71:94:0e:01:
45:ed:bc:cf:18:77:47:0c:02:63:31:e5:32:a2:89:
28:ec:b7:74:d9:f8:d6:06:0f:27:9a:e4:a7:af:5a:
c8:2f:74:fb:cc:3d:02:f2:2c:44:1d:b5:53:cd:85:
32:02:cc:7b:90:1a:dd:56:80:5f:ae:16:af:0b:d4:
0f:c0:49:c7:f0:4f:d0:72:10:75:ef:17:df:bc:c8:
10:fe:2a:d5:dc:7a:75:bf:19:2e:c9:7f:4c:6a:18:
1f:ce:4d:47:da:cc:9a:e4:89:2e:33:f3:00:03:53:
08:30:96:6b:12:12:f1:07:10:a0:1d:e4:b5:97:df:
95:f4:74:61:c8:d1:a2:7a:da:55:87:2e:95:ae:49:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D6:20:4E:57:2C:4C:DB:CA:23:5F:EB:29:9E:CA:86:96:AA:21:51
X509v3 Authority Key Identifier:
keyid:12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35382e302f32332d3233203d3e20323634303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.58.0/23
Signature Algorithm: sha256WithRSAEncryption
77:49:9a:f6:d9:b7:11:1b:ea:f8:23:b0:61:18:76:e6:94:b0:
58:eb:2b:2d:7e:7f:db:1f:92:19:f1:70:27:9d:6c:13:68:f0:
9c:ec:06:9d:47:96:d7:8e:65:21:29:7d:6c:11:46:74:9b:b5:
6d:b8:56:73:d9:34:3d:76:a9:13:f6:f1:62:42:3a:9c:3e:c3:
a0:91:0d:fb:5b:fb:c4:b5:da:6e:81:4e:9c:94:71:c6:7c:e6:
83:02:61:e5:b4:af:37:9b:2a:2e:44:ec:cd:ad:fd:05:2c:4c:
37:cf:e9:c6:43:aa:c7:64:f5:23:f7:59:59:92:af:ab:2c:94:
eb:4f:dc:7d:72:5b:69:07:8f:9d:83:96:78:b9:69:34:12:c4:
b9:fd:f6:e6:b5:8b:a9:32:11:a6:bb:a9:28:ed:26:b2:34:9b:
37:9b:1a:d9:e5:98:d8:62:db:ae:0d:2d:ea:5c:5e:c9:81:4c:
4e:ad:4d:4a:83:be:70:bb:53:ae:b7:36:aa:6e:e7:1f:c5:81:
f4:7d:c2:94:fa:7a:cd:8a:7d:8f:95:6a:55:8e:47:53:91:7e:
83:fe:02:d4:c0:84:0d:1e:79:f3:73:ac:ee:b5:37:d9:e2:4b:
19:40:45:2a:58:37:6a:ea:41:ba:6a:4e:37:63:87:ce:7e:a3:
5f:5c:77:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 20:04:40 2024 by rpki-client on console-ams.rpki-client.org