Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133332e302f32342d3234203d3e20323632353838.roa
File: 3137302e38332e3133332e302f32342d3234203d3e20323632353838.roa (raw, json)
Hash identifier: FVfK8pXAEvH/+55uJnRtK2Sqvbz+dSrYzofblpqa0ps=
Subject key identifier: BE:CD:D3:8C:69:C6:E0:00:DF:74:6C:E5:2E:53:68:D3:B6:D2:C0:23
Certificate issuer: /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial: 1E8E1AFC545B68EE2AAB10BDE7B99F9B762D1985
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133332e302f32342d3234203d3e20323632353838.roa
Signing time: Sat 09 Apr 2022 14:18:26 +0000
ROA not before: Sat 09 Apr 2022 14:13:26 +0000
ROA not after: Sat 08 Apr 2023 14:18:26 +0000
asID: 262588
IP address blocks: 170.83.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:8e:1a:fc:54:5b:68:ee:2a:ab:10:bd:e7:b9:9f:9b:76:2d:19:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Validity
Not Before: Apr 9 14:13:26 2022 GMT
Not After : Apr 8 14:18:26 2023 GMT
Subject: CN=BECDD38C69C6E000DF746CE52E5368D3B6D2C023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:76:29:fa:c5:62:98:54:24:42:bb:62:e5:
13:ff:34:a5:9c:e2:33:e8:42:ce:e2:73:40:18:70:
a3:13:05:90:49:fc:37:96:ac:a7:1b:82:2e:47:44:
f6:2e:90:49:16:81:7f:c5:5f:0e:d5:2e:a0:4a:be:
c2:75:3c:95:8e:88:93:c0:17:5c:c2:d6:2c:d9:b0:
fc:86:db:44:ed:e8:b5:44:9f:87:38:0f:7b:39:f0:
67:3b:1b:c7:bf:c6:46:19:4b:e6:2f:53:cc:38:f3:
1a:78:9c:25:3d:56:13:9f:51:18:37:3d:b0:0a:e2:
72:10:1d:0b:a3:24:ba:09:36:bd:fc:a4:5a:88:49:
30:1f:32:72:01:6f:16:7a:32:22:c7:2c:45:a2:2b:
f9:c3:b2:9c:bd:f1:9c:77:b0:c0:ae:6a:0b:7d:9c:
3e:3e:4f:d1:8f:1d:de:b9:a7:30:b2:74:4a:2d:f9:
8b:dd:96:12:8b:3d:73:d0:0d:80:0f:47:07:f2:fa:
8e:1a:8a:f5:08:f5:92:28:c1:7f:a4:f6:b3:c5:99:
87:65:b0:6c:6b:35:3b:61:95:15:02:7a:38:f8:f3:
86:a0:5c:96:8a:88:94:31:0b:6d:e0:cc:85:a1:b7:
37:7a:c3:fc:9b:fc:8c:5d:b7:f3:18:68:f5:0c:9c:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CD:D3:8C:69:C6:E0:00:DF:74:6C:E5:2E:53:68:D3:B6:D2:C0:23
X509v3 Authority Key Identifier:
keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133332e302f32342d3234203d3e20323632353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.133.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:57:6f:6a:6e:8f:da:a7:f9:00:02:b0:b8:07:67:f0:d8:a2:
76:52:d6:76:f9:e6:54:1f:c6:01:3c:c7:c9:bd:2d:70:fb:f9:
bf:30:14:06:dc:3c:60:95:40:a7:12:a6:08:d5:dc:0c:49:18:
2a:34:0f:bd:3a:c0:be:ab:e1:09:31:3a:fe:ae:a7:27:df:95:
92:20:08:79:7e:de:bc:47:ad:9f:8a:12:87:58:d3:04:96:68:
c0:ac:2f:95:5b:78:2a:32:42:92:fe:1e:ef:f0:b3:fa:8a:b2:
d5:1d:f3:be:fa:d5:e5:29:f2:7d:3e:88:d8:89:01:28:36:70:
b9:83:4d:cc:e6:d9:e4:a2:bc:25:71:d9:d2:ce:37:36:58:99:
96:20:1c:a1:75:1f:94:20:98:a8:c2:95:6f:a0:79:7b:b8:64:
72:4e:b4:20:41:7d:2e:44:75:97:af:68:4a:0b:fd:7e:dd:50:
f7:14:35:c3:e5:31:a1:4f:75:69:f8:eb:90:69:f6:c3:68:34:
24:c4:fa:59:9c:4b:ea:68:5a:1a:53:f3:6f:2e:bc:5a:5f:54:
be:45:f8:f7:02:7b:2b:d5:83:db:9f:e6:c6:43:c0:53:d8:99:
89:73:cd:29:72:70:73:b2:58:4c:55:3b:3e:5d:01:cc:a6:e6:
4d:0d:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:39 2023 by rpki-client on console-fra.rpki-client.org