Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32322d3232203d3e20323634343931.roa
File: 3137302e3234372e3235322e302f32322d3232203d3e20323634343931.roa (raw, json)
Hash identifier: bez3epaqcwTZ0SNZBkDmzPBoMgEOqOMgq8VAReCTjKk=
Subject key identifier: 58:65:07:CA:75:5A:5C:73:14:7F:3B:0D:22:D2:04:23:4F:5C:C0:E2
Certificate issuer: /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial: 35F7C1C7564757B061E2909ED0108448775187ED
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32322d3232203d3e20323634343931.roa
Signing time: Tue 10 Oct 2023 03:11:24 +0000
ROA not before: Tue 10 Oct 2023 03:06:24 +0000
ROA not after: Tue 08 Oct 2024 03:11:24 +0000
asID: 264491
IP address blocks: 170.247.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f7:c1:c7:56:47:57:b0:61:e2:90:9e:d0:10:84:48:77:51:87:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Validity
Not Before: Oct 10 03:06:24 2023 GMT
Not After : Oct 8 03:11:24 2024 GMT
Subject: CN=586507CA755A5C73147F3B0D22D204234F5CC0E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:02:87:8d:86:63:e1:7f:9e:63:3e:6e:ed:
68:a4:ff:a4:be:88:8b:9f:3d:46:53:08:71:8d:02:
a6:ac:01:db:da:71:c8:20:94:a7:e1:20:55:a2:08:
4a:ea:42:bd:b4:74:45:ae:43:b3:08:48:08:7f:41:
0d:ed:b1:cc:0c:44:6c:d6:f4:26:09:7a:ce:ac:e3:
39:49:3e:e1:1d:62:81:fb:78:cb:06:9c:da:d9:c2:
e6:69:8d:70:7a:fa:7a:2d:56:4a:0f:b6:0a:ac:46:
f4:c8:8d:b5:67:68:0a:8f:e4:6b:19:a8:55:fd:87:
6f:d6:00:38:27:1e:43:c7:19:5b:25:1e:5e:ad:aa:
9e:c2:ae:16:5c:e6:d0:c2:e5:d2:8d:bb:56:cf:08:
7b:ed:24:67:c1:ff:1f:3a:9e:19:3a:a2:08:aa:cd:
fe:e3:a4:a4:41:e8:cb:35:04:6d:7f:b4:0a:b1:8a:
e3:f2:e9:79:0c:7e:b1:9e:1e:f6:a4:ca:c9:f7:40:
72:e9:a2:5b:7b:93:ad:d1:b3:79:42:2d:18:bc:25:
49:2d:7d:c9:84:64:6c:5b:6b:02:0d:c4:b2:07:22:
6d:e6:50:21:b2:e1:dc:e4:38:b9:81:2c:01:5e:38:
33:36:85:91:f8:8b:bf:b3:d3:66:1a:58:3b:5b:0f:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:65:07:CA:75:5A:5C:73:14:7F:3B:0D:22:D2:04:23:4F:5C:C0:E2
X509v3 Authority Key Identifier:
keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32322d3232203d3e20323634343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.252.0/22
Signature Algorithm: sha256WithRSAEncryption
57:65:b0:c6:48:f5:11:5e:8f:9d:a5:41:41:1d:16:b1:6e:48:
c3:1c:48:bb:32:5e:6f:b4:13:9a:df:15:d0:1a:de:4b:2d:b9:
88:e4:85:44:34:63:2f:27:3f:21:9a:56:7b:b0:bc:0a:5a:de:
e1:a6:6c:32:65:3a:e4:0f:17:8b:5f:cd:e5:5a:db:81:d8:92:
54:4b:07:bb:4f:26:ef:55:47:25:3b:74:7f:1e:86:2d:1d:93:
df:85:1e:51:f5:bc:7c:04:0a:47:51:94:7e:37:14:3d:db:61:
97:39:e4:f6:97:38:9b:0e:34:b3:a6:65:dc:cc:87:c2:63:df:
6b:3a:64:24:56:54:df:85:c8:0c:04:7a:39:30:ff:68:f0:8f:
ae:79:c5:a9:9f:48:2c:47:99:93:d9:1c:b0:9a:61:10:6f:f6:
83:a8:a3:36:18:e2:7c:dc:0c:47:2c:a0:40:cf:9c:27:73:eb:
fc:0b:38:6f:4b:81:05:d4:48:28:a2:42:5f:8b:0f:3e:49:44:
9c:0f:77:82:f3:c5:1e:d0:bd:24:04:40:47:15:97:52:e3:7e:
91:d9:03:92:c0:06:50:6d:ca:fd:e1:a4:60:7e:95:a6:20:c0:
57:29:2c:27:ef:ed:80:3d:6f:56:5b:9d:7e:ab:0e:5d:1f:f3:
dd:3e:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 20:28:13 2023 by rpki-client on console-ams.rpki-client.org