Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3134382e302f32322d3232203d3e20323634313937.roa
File: 3133382e39372e3134382e302f32322d3232203d3e20323634313937.roa (raw, json)
Hash identifier: Oeq0aBaZ09Nca+UegJAftXucZShwU4eqBTchEWyCXnw=
Subject key identifier: B5:1F:52:1D:F7:26:CF:5C:BB:8B:43:F7:0A:F5:15:69:E1:0D:D4:E5
Certificate issuer: /CN=D734736DE25120E6797606BF75F2DB44E938B286
Certificate serial: 2F5522A26514C2C069E62AA02675FB4295D28B89
Authority key identifier: D7:34:73:6D:E2:51:20:E6:79:76:06:BF:75:F2:DB:44:E9:38:B2:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D734736DE25120E6797606BF75F2DB44E938B286.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3134382e302f32322d3232203d3e20323634313937.roa
Signing time: Fri 22 Mar 2024 17:57:01 +0000
ROA not before: Fri 22 Mar 2024 17:52:01 +0000
ROA not after: Fri 21 Mar 2025 17:57:01 +0000
asID: 264197
IP address blocks: 138.97.148.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Mar 2024 20:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:55:22:a2:65:14:c2:c0:69:e6:2a:a0:26:75:fb:42:95:d2:8b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D734736DE25120E6797606BF75F2DB44E938B286
Validity
Not Before: Mar 22 17:52:01 2024 GMT
Not After : Mar 21 17:57:01 2025 GMT
Subject: CN=B51F521DF726CF5CBB8B43F70AF51569E10DD4E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:05:12:e9:d8:2c:ca:0f:d3:51:47:3d:66:
f8:b6:da:90:78:5e:99:b7:df:43:08:8c:16:56:aa:
37:fa:5d:52:f8:e1:f8:76:1b:5a:69:ff:d2:46:cb:
22:cf:d4:37:8e:12:4f:67:1f:fd:cf:b1:43:83:ee:
f9:11:69:3e:4d:f8:43:be:08:78:c0:4c:0a:78:45:
69:81:a2:46:1f:37:f3:fe:10:e6:90:74:bc:83:5c:
0e:71:e8:aa:54:16:6f:e4:d2:cf:78:67:43:7c:9c:
f1:c7:a9:69:43:9b:18:b5:61:13:af:77:09:b7:d9:
31:01:78:d0:75:1c:ba:c1:a1:2c:5d:25:87:d2:2a:
07:b2:59:3d:22:16:02:94:3f:21:ce:8e:51:d7:58:
d9:ca:9b:a1:07:b1:f0:74:37:53:6d:3f:87:5f:79:
3f:4e:da:4e:e1:94:8a:44:e3:e9:05:8c:08:0a:95:
c8:e2:b6:3c:9b:95:5f:a5:4a:e1:c6:65:3e:e6:60:
d2:3d:81:82:bb:0c:43:ec:ab:fa:a9:b8:2a:2f:68:
9a:67:50:23:cf:a7:fa:72:36:ae:82:80:9b:ee:05:
94:9f:69:59:e0:7d:25:72:cd:5e:9c:6a:02:39:1b:
c5:37:23:38:1a:22:6d:19:04:35:27:23:4f:8e:f6:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1F:52:1D:F7:26:CF:5C:BB:8B:43:F7:0A:F5:15:69:E1:0D:D4:E5
X509v3 Authority Key Identifier:
keyid:D7:34:73:6D:E2:51:20:E6:79:76:06:BF:75:F2:DB:44:E9:38:B2:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/D734736DE25120E6797606BF75F2DB44E938B286.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D734736DE25120E6797606BF75F2DB44E938B286.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3134382e302f32322d3232203d3e20323634313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.148.0/22
Signature Algorithm: sha256WithRSAEncryption
10:12:e8:42:ff:ee:56:a6:0d:37:5b:a3:71:0e:6e:23:2c:c6:
de:34:3b:cc:fd:e2:2d:75:52:77:d3:30:dc:a5:78:ba:43:db:
7f:1b:1e:3a:fa:91:2e:85:84:43:6f:f2:c1:9d:a5:03:5d:c9:
95:d1:9a:15:69:1a:7d:10:b1:7f:ce:ae:46:67:3c:4b:0b:4e:
de:7b:4c:bd:4c:61:23:5d:08:0e:8a:16:64:fd:69:4f:3f:97:
57:e9:0d:48:1b:dc:2d:02:3e:a1:f7:51:53:7f:f7:bb:fa:ac:
8c:8a:28:52:fd:d7:d9:17:a8:4b:b7:09:87:22:8e:45:41:f4:
2a:5d:c8:9a:e9:8a:7f:a9:f7:21:8e:26:09:0f:19:85:5e:0d:
e3:61:a8:fb:cd:30:07:53:32:c9:03:e5:8e:2c:4a:e3:c7:fa:
a5:d4:3a:eb:be:a6:c6:55:83:cf:98:6f:a2:31:8d:1a:e0:55:
2b:23:82:b5:2c:46:76:9e:f0:f4:a7:e9:d2:b0:2a:25:89:28:
a7:4d:02:79:6c:23:83:ec:1d:c9:69:c9:a0:70:3f:83:ed:ba:
f7:0a:9b:e4:68:1b:1f:5f:6e:9d:d2:da:64:8d:aa:ce:41:c0:
1d:c4:53:2f:1d:a2:25:64:72:7a:2d:dd:5f:85:ce:20:0f:78:
b7:ca:c0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 23:52:03 2024 by rpki-client on console-ams.rpki-client.org