Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e382e302f32332d3233203d3e203238313832.roa
File: 3138392e38392e382e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier: TJHrZCugfUs4oxU1OYf0OLMe0kXk0beGcbRswosQbdU=
Subject key identifier: 95:90:EE:EA:9E:8E:A2:15:A9:D6:1A:1C:17:92:32:E4:6E:76:BF:00
Certificate issuer: /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial: 60EF25E1B5D54AEC2E0344D4BB7E0490F487701C
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e382e302f32332d3233203d3e203238313832.roa
Signing time: Wed 17 Apr 2024 11:39:52 +0000
ROA not before: Wed 17 Apr 2024 11:34:52 +0000
ROA not after: Wed 16 Apr 2025 11:39:52 +0000
asID: 28182
IP address blocks: 189.89.8.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 17 Apr 2024 15:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ef:25:e1:b5:d5:4a:ec:2e:03:44:d4:bb:7e:04:90:f4:87:70:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Validity
Not Before: Apr 17 11:34:52 2024 GMT
Not After : Apr 16 11:39:52 2025 GMT
Subject: CN=9590EEEA9E8EA215A9D61A1C179232E46E76BF00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:02:f5:e9:ee:51:fb:ed:0a:c6:4d:cb:ef:
57:a3:4c:7a:4d:df:e4:89:d7:dd:f9:24:c0:9d:ed:
ec:58:f3:7a:ce:f3:a2:c8:49:7d:e5:44:bc:4e:f9:
48:33:47:33:03:e2:44:e6:d5:47:82:e9:12:5c:77:
e2:1a:57:ae:6e:b9:17:63:de:74:6c:c7:32:dd:db:
d0:32:49:f9:10:4c:bd:ad:89:97:86:a2:9f:54:cd:
bc:c9:f2:f1:6a:02:96:8a:04:60:b3:99:51:a8:b2:
ad:02:e3:e7:d5:0d:b4:10:5e:33:3f:f5:82:18:7c:
c1:3c:68:fb:6b:64:eb:73:5f:d8:fd:3c:fb:5b:e6:
17:ce:04:71:fd:5e:a5:b1:05:f0:06:54:ea:e4:94:
40:83:55:33:ec:18:af:25:99:91:95:3f:e7:c3:c1:
b6:24:60:c7:fa:4f:6b:3f:b1:ed:78:a8:6e:0a:13:
27:b1:71:01:e1:e4:b8:b9:fa:e0:6a:20:da:d8:a7:
6c:69:60:f3:71:70:7c:97:81:e1:37:da:6a:93:fe:
94:b4:e8:27:6c:5c:68:bf:ed:b9:52:6d:66:d6:28:
f8:15:37:7f:50:f3:3b:72:8f:4b:b0:c9:62:62:01:
5f:79:1f:b9:bb:bf:16:23:61:44:be:4c:15:a6:aa:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:90:EE:EA:9E:8E:A2:15:A9:D6:1A:1C:17:92:32:E4:6E:76:BF:00
X509v3 Authority Key Identifier:
keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e382e302f32332d3233203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.8.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:25:8b:fc:34:43:31:63:4d:d4:a0:70:d7:21:48:e5:78:1b:
62:51:0f:4d:37:dd:e4:2d:cb:60:cd:c1:2d:78:44:8f:2f:2d:
7b:aa:d3:06:82:90:b7:b3:de:fe:98:78:b3:f7:08:43:ed:8c:
1e:00:11:dc:84:a3:16:b3:00:c9:8f:39:90:76:79:3d:c7:f3:
58:25:e3:8d:ae:e6:76:48:ff:f0:3f:c9:15:5f:cf:44:82:05:
6a:be:66:0c:e3:7c:5e:6e:3a:f9:ae:7e:38:08:53:07:6e:75:
e8:99:c8:98:85:b4:3c:c5:3d:3e:23:95:0e:92:17:d6:3d:4d:
7e:43:20:ce:3d:94:41:ed:88:df:22:b6:8f:07:68:8f:e5:49:
de:02:de:a4:a4:55:2b:9a:63:d7:5f:69:65:60:be:bf:b4:96:
67:79:a5:38:83:c4:0d:ef:c7:59:90:e9:bb:37:b9:fc:e6:95:
b4:9d:e3:0f:f9:79:2b:82:ed:da:a1:a9:d6:f3:cb:92:8d:16:
a3:23:c5:3a:10:5f:77:3f:de:12:27:21:e7:5e:65:ed:14:47:
c2:54:e4:b2:e7:8e:d8:63:08:9f:e0:4b:fc:fb:9e:44:ac:ac:
bf:2d:1e:3e:0c:3d:60:79:fa:d5:a8:2c:63:0a:34:7c:54:ac:
27:1b:a9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:55:14 2024 by rpki-client on console-fra.rpki-client.org