Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e342e302f32332d3233203d3e203238313832.roa
File: 3138392e38392e342e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier: pl7kU5RAzFttGY+PHRD++3Euti7wPbn9aSBGFjT4Sjg=
Subject key identifier: 5C:90:4B:68:1A:12:FB:3B:75:C1:09:2E:EE:BB:6A:CE:85:78:F2:8C
Certificate issuer: /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial: 69689BEB4EA91D1D1A68739A8C0BFB8DEB3311E9
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e342e302f32332d3233203d3e203238313832.roa
Signing time: Wed 17 Apr 2024 11:39:51 +0000
ROA not before: Wed 17 Apr 2024 11:34:51 +0000
ROA not after: Wed 16 Apr 2025 11:39:51 +0000
asID: 28182
IP address blocks: 189.89.4.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 17 Apr 2024 15:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:68:9b:eb:4e:a9:1d:1d:1a:68:73:9a:8c:0b:fb:8d:eb:33:11:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Validity
Not Before: Apr 17 11:34:51 2024 GMT
Not After : Apr 16 11:39:51 2025 GMT
Subject: CN=5C904B681A12FB3B75C1092EEEBB6ACE8578F28C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:12:fe:09:cf:eb:79:8c:c1:a0:4a:c6:ab:
48:11:40:6a:0b:38:ae:21:17:7e:09:dd:48:38:93:
38:1b:b3:e0:35:39:55:db:c3:86:86:df:ff:6b:04:
a0:0f:df:54:94:db:f6:d2:35:4b:ca:2d:b0:ca:9b:
cc:f4:2e:f8:9c:96:96:e0:09:93:a9:34:f9:f9:ee:
5f:0b:d4:39:f0:07:1b:41:28:f0:b2:78:9d:c9:f5:
d9:2a:26:41:f1:9a:7f:03:f7:fb:07:10:cd:40:c9:
dd:88:b5:a0:78:41:b5:86:c5:39:81:0b:e7:1c:93:
86:8f:fa:9d:4b:5b:4b:da:a8:28:d2:ef:f9:f9:73:
ca:22:2c:7a:79:e6:ef:2b:a9:3a:ad:07:90:ec:87:
4d:71:37:13:9b:11:cf:49:a1:49:8e:7c:54:e4:7f:
f9:63:21:8e:8e:28:70:43:45:5b:48:7e:b4:88:b4:
2c:05:d1:6b:8a:60:88:98:a9:46:6d:77:f3:3f:30:
0b:5c:5a:63:2c:e0:c7:5b:e5:43:42:40:9a:7f:0d:
b6:92:9f:54:f7:fa:7c:6d:f3:6f:3c:41:33:52:71:
0f:29:d3:42:f0:4a:ef:c4:a3:5b:46:80:13:21:dd:
a8:47:5d:2f:e6:70:5f:ff:5c:76:f5:90:1d:27:30:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:90:4B:68:1A:12:FB:3B:75:C1:09:2E:EE:BB:6A:CE:85:78:F2:8C
X509v3 Authority Key Identifier:
keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e342e302f32332d3233203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.4.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:c5:0a:de:14:c1:3c:a0:a1:9f:5c:9c:d8:93:7a:37:e5:84:
58:08:70:b6:a4:56:38:1b:c5:8d:31:fc:91:81:df:2f:77:91:
f9:0e:6c:2e:e2:4e:d2:40:17:1a:d7:f8:7a:63:14:7f:cc:dd:
4d:98:e6:df:c0:1c:f0:1f:03:82:29:75:e7:49:0f:74:1f:d4:
48:ac:7d:47:dd:f8:50:9a:1a:78:bd:e5:a4:2c:d5:2d:49:1c:
f4:92:56:89:0f:64:b5:0d:74:1b:b6:4a:e9:9f:c0:b8:2d:6e:
08:b7:60:6e:0e:e9:8f:37:18:6f:72:eb:9d:8d:70:c3:42:01:
d3:0d:f9:f1:b2:28:82:33:3c:16:05:e7:ab:e5:6b:8f:67:e8:
5d:3f:af:30:45:05:4f:2e:85:13:7c:32:e2:21:aa:05:18:88:
17:8a:b9:5a:49:be:3e:f4:90:dd:cd:07:4b:e8:0e:db:fa:07:
fe:84:aa:c0:46:c1:7a:d8:32:09:22:ec:89:2f:e6:89:78:aa:
7e:96:f7:c7:d1:1c:5f:e6:a1:26:1c:46:29:81:a7:28:92:33:
8f:6e:f6:83:5a:93:43:44:29:83:e9:23:aa:4a:f4:06:49:2b:
41:bf:19:ee:37:a1:2a:76:8a:de:ae:04:e3:18:30:99:e1:de:
a7:fb:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:55:14 2024 by rpki-client on console-fra.rpki-client.org