Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32322d3234203d3e20323731353636.roa
File: 3137392e36332e3137322e302f32322d3234203d3e20323731353636.roa (raw, json)
Hash identifier: AM6YqhOH4dQXuQfQer+Fl6t1W0dMVCJTD2TsusyQH14=
Subject key identifier: 9D:8B:5A:E3:AD:CB:AF:6B:2C:4B:C1:24:70:B8:47:3D:07:94:64:C3
Certificate issuer: /CN=8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521
Certificate serial: 41708B7D76DE0153D757E4451CA7424A95C247FE
Authority key identifier: 8C:3A:73:A3:F4:E7:E3:89:1D:0D:C6:F8:E4:5F:E4:7C:B0:3D:85:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32322d3234203d3e20323731353636.roa
Signing time: Mon 26 Feb 2024 13:17:58 +0000
ROA not before: Mon 26 Feb 2024 13:12:58 +0000
ROA not after: Mon 24 Feb 2025 13:17:58 +0000
asID: 271566
IP address blocks: 179.63.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 23:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:70:8b:7d:76:de:01:53:d7:57:e4:45:1c:a7:42:4a:95:c2:47:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521
Validity
Not Before: Feb 26 13:12:58 2024 GMT
Not After : Feb 24 13:17:58 2025 GMT
Subject: CN=9D8B5AE3ADCBAF6B2C4BC12470B8473D079464C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:9b:d7:84:94:5e:2d:5c:a9:85:a4:4e:ba:
b5:66:ba:47:05:80:1b:f8:33:7f:6e:0b:1b:ec:e3:
7e:d8:80:43:aa:a3:58:5b:9e:e3:36:01:1c:6f:4a:
1a:c1:10:52:02:5a:bd:51:bd:ec:e6:34:a5:5c:ff:
e2:05:f5:31:bf:62:b8:11:db:db:00:72:7e:a2:16:
18:6a:09:dd:8c:7e:60:be:c0:a8:2e:2e:2e:c6:e0:
d4:18:fa:d0:c4:e3:79:ce:bf:ee:bc:a3:01:d2:dd:
52:4a:41:71:cc:48:04:86:cd:0e:88:eb:16:9f:4c:
02:a0:0a:47:a9:3c:3d:05:bc:e7:71:d6:c7:54:b6:
d1:51:f5:28:32:7f:d6:64:73:ad:2a:e3:85:2f:5a:
f2:85:2c:4e:65:1b:bd:3e:cc:09:0e:76:f7:48:a1:
8e:cb:d2:16:12:8b:04:04:e7:18:8d:a7:d7:81:5b:
43:cc:69:c5:96:bb:99:0a:c6:3b:87:d7:6c:15:5b:
29:8c:91:d6:1a:c0:13:70:ad:0f:5a:9c:43:7a:85:
6f:01:7b:43:86:22:69:7c:74:78:31:4d:ed:36:bf:
d0:81:99:2f:59:98:10:66:f5:01:b2:a3:9f:7d:03:
aa:58:f4:96:1f:6b:aa:56:42:5d:98:2e:82:03:76:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8B:5A:E3:AD:CB:AF:6B:2C:4B:C1:24:70:B8:47:3D:07:94:64:C3
X509v3 Authority Key Identifier:
keyid:8C:3A:73:A3:F4:E7:E3:89:1D:0D:C6:F8:E4:5F:E4:7C:B0:3D:85:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32322d3234203d3e20323731353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.63.172.0/22
Signature Algorithm: sha256WithRSAEncryption
99:4a:6d:17:e9:27:f8:76:ef:01:c8:73:3a:4c:b0:24:53:2b:
1d:1a:34:3f:32:23:58:9b:11:fe:c4:d6:2a:c3:0f:3e:a9:a0:
65:45:d1:fa:b6:7a:af:ae:d0:27:fd:16:e9:17:6b:e8:b5:11:
fb:a1:d2:7b:21:88:f0:9e:6b:ff:2c:9c:d9:9b:71:0a:9e:95:
3d:56:63:d9:e6:ee:92:39:bb:30:d1:06:59:91:8e:8c:56:5a:
16:75:68:72:48:93:83:3b:78:ed:33:9f:75:c1:01:7a:86:9e:
3a:ba:48:ff:c1:59:6d:de:0b:67:c5:37:34:25:b5:3b:b0:58:
11:7d:64:87:5b:89:03:28:7b:e8:a9:ba:99:50:e9:7a:cc:dc:
eb:a6:7f:d5:c1:ed:37:b4:9f:b6:95:9e:46:df:48:38:dd:71:
77:f6:ca:13:f1:e2:48:cf:15:28:73:99:17:ca:30:10:a0:e3:
19:83:39:23:25:fe:b7:24:dd:bc:c1:95:aa:12:78:c0:15:04:
60:4a:0b:10:38:c0:26:8e:b8:ab:23:40:2f:65:8c:4b:f5:54:
a8:fe:36:32:dd:22:ed:15:c7:1f:35:94:53:b5:fd:2d:36:79:
0d:1d:2d:2d:e6:23:f1:b0:3a:89:1d:0c:9d:2c:0f:b0:64:68:
dd:76:f5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 04:43:43 2024 by rpki-client on console-fra.rpki-client.org