Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32332d3233203d3e20323634343931.roa
File: 3133312e3235352e3137362e302f32332d3233203d3e20323634343931.roa (raw, json)
Hash identifier: pagdxwKBvYRQgmb/CWECD48aPW/694STfRhfH+C/F50=
Subject key identifier: D9:35:2F:4E:4E:28:4E:87:F0:6E:2F:A1:94:4A:D0:98:8E:3B:7C:94
Certificate issuer: /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial: 58B48B738EA3D53ACA926CC8E10079344FC1F0A4
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32332d3233203d3e20323634343931.roa
Signing time: Tue 10 Oct 2023 03:11:23 +0000
ROA not before: Tue 10 Oct 2023 03:06:23 +0000
ROA not after: Tue 08 Oct 2024 03:11:23 +0000
asID: 264491
IP address blocks: 131.255.176.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b4:8b:73:8e:a3:d5:3a:ca:92:6c:c8:e1:00:79:34:4f:c1:f0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Validity
Not Before: Oct 10 03:06:23 2023 GMT
Not After : Oct 8 03:11:23 2024 GMT
Subject: CN=D9352F4E4E284E87F06E2FA1944AD0988E3B7C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:f7:b3:0c:f2:7e:84:cc:ac:23:3c:5a:04:
98:29:7c:2b:d4:14:02:df:8e:73:c4:85:4a:f5:b8:
6b:2b:48:f9:77:c2:d5:6a:a8:83:7e:96:47:3d:1f:
ec:3b:d7:6b:1d:42:e6:fb:9c:50:f2:50:8b:39:87:
ca:a5:a6:c2:85:df:7a:7c:67:1f:02:5e:02:00:c6:
a2:48:42:97:32:c2:93:bd:be:cf:c1:56:41:d1:a3:
08:2d:8f:1b:1a:30:7d:21:4a:29:91:27:3a:28:ed:
3d:87:5f:fe:19:12:97:a8:68:e8:90:78:88:11:a8:
11:55:ff:5d:f6:dc:c7:74:76:2e:3b:0d:1c:58:3f:
b6:bb:a4:5b:b0:bc:32:ac:ee:a5:df:36:bf:86:e3:
6d:9f:aa:c2:ad:22:74:ee:fe:94:6c:12:1d:3f:34:
d9:bb:39:aa:b1:87:ae:95:c3:f4:df:f2:96:71:93:
5e:ed:e1:36:61:9c:7a:26:a1:6a:9f:c9:57:6e:7d:
9c:7b:d8:43:98:6b:16:88:7b:14:19:cf:a0:85:f1:
6f:89:e1:ff:32:a7:fb:37:c0:30:f6:92:95:fa:c3:
15:bc:7e:e1:bf:e7:eb:9e:e6:33:de:0d:c2:f8:80:
23:79:63:86:66:3f:9d:30:0b:31:47:07:99:2e:7d:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:35:2F:4E:4E:28:4E:87:F0:6E:2F:A1:94:4A:D0:98:8E:3B:7C:94
X509v3 Authority Key Identifier:
keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32332d3233203d3e20323634343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.176.0/23
Signature Algorithm: sha256WithRSAEncryption
09:99:f8:48:fe:b0:67:4f:7b:5b:27:9b:56:e6:f4:fb:f9:90:
0e:eb:02:53:1b:e9:dc:6a:55:64:11:e5:63:d8:fb:66:c5:88:
4b:a1:ea:58:81:b9:92:89:a3:39:32:4d:3c:57:c7:27:a2:d1:
f3:43:ae:8d:a7:9d:80:18:77:a1:71:36:f1:5d:79:16:d4:79:
25:ae:fb:5d:5d:1e:e1:cf:42:2c:ff:0b:9e:75:9b:ee:b7:c6:
7c:eb:00:8c:f7:18:b8:0c:07:6b:0f:31:1b:d8:19:c0:9c:43:
e2:6c:87:c0:ed:86:aa:bf:4e:c9:5d:81:29:e7:00:36:4d:ba:
48:ac:35:e9:af:41:11:db:a1:b9:db:51:a6:05:a4:15:1c:67:
e1:d8:b9:1a:79:9e:63:b2:88:84:de:99:4d:c6:08:32:d1:90:
6a:58:15:f4:72:e3:50:4f:eb:86:e0:e1:9e:4e:66:02:09:59:
1c:da:31:dc:85:f1:55:81:c9:b1:fc:d3:84:7f:d4:51:86:0a:
bb:5e:58:1d:2f:c7:c4:d0:18:31:75:6a:94:8e:16:54:3c:74:
4b:f3:b7:84:b6:d0:12:1c:97:33:17:73:ca:13:fe:7c:c1:84:
68:d7:ce:0e:a3:b0:7e:ea:87:62:7e:b0:6b:c3:e6:11:f9:fe:
92:71:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 20:03:25 2023 by rpki-client on console-fra.rpki-client.org