Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e392e302f32342d3234203d3e203238313832.roa
File: 3138392e38392e392e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier: +hxi82Di81gp4AKY0e93DgYiBvbv5ssLKRWJv4oaJSM=
Subject key identifier: C5:EE:55:D2:12:9D:2B:5E:10:6E:46:3D:8C:41:52:2F:33:2F:AA:9A
Certificate issuer: /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial: 7C919FCE6A3E0A4E6892F807EA6395ADAC0DFAEB
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e392e302f32342d3234203d3e203238313832.roa
Signing time: Wed 17 Apr 2024 11:39:51 +0000
ROA not before: Wed 17 Apr 2024 11:34:51 +0000
ROA not after: Wed 16 Apr 2025 11:39:51 +0000
asID: 28182
IP address blocks: 189.89.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 15:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:91:9f:ce:6a:3e:0a:4e:68:92:f8:07:ea:63:95:ad:ac:0d:fa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Validity
Not Before: Apr 17 11:34:51 2024 GMT
Not After : Apr 16 11:39:51 2025 GMT
Subject: CN=C5EE55D2129D2B5E106E463D8C41522F332FAA9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:0e:ea:64:5a:2f:1e:d2:aa:58:ca:c8:a3:
84:ee:27:ce:3c:5e:a5:d2:c8:26:a3:35:ce:74:b1:
02:d8:51:dc:d2:ac:c9:cb:58:a9:47:69:62:4c:6a:
a7:67:e6:43:77:10:45:b8:4d:4e:da:79:6f:61:b0:
34:0c:fc:41:6d:2a:4a:18:68:0f:69:88:07:2a:db:
6b:f5:24:c4:2b:73:a7:3b:c2:e1:2c:e5:97:ec:cf:
d4:44:eb:fd:78:6c:8c:76:2c:c0:e2:f2:d3:1b:92:
d7:65:49:9a:a5:d0:9e:9a:31:8b:5f:89:79:67:e8:
8b:1d:39:b1:4e:50:54:09:fb:cf:73:18:bc:c0:f0:
74:e3:13:32:a8:1d:06:da:53:70:71:d1:c9:6f:23:
73:dc:eb:fe:34:b5:e0:fc:43:45:8d:07:40:78:87:
32:10:89:0b:fe:d2:f0:54:91:2c:03:11:2c:d2:80:
57:ed:01:e5:69:91:56:80:56:8a:15:d9:79:02:98:
4d:f0:7e:ec:37:79:cc:03:0d:c1:a0:f2:b4:c1:68:
f4:0c:69:c7:eb:47:34:3a:e6:e5:fa:68:0b:c0:7c:
5f:2b:a6:93:db:f0:b0:4c:d3:f5:cc:c8:c2:16:25:
50:8d:39:9f:17:51:a3:29:af:99:fd:4f:96:e2:5a:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EE:55:D2:12:9D:2B:5E:10:6E:46:3D:8C:41:52:2F:33:2F:AA:9A
X509v3 Authority Key Identifier:
keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e392e302f32342d3234203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:10:91:98:e6:50:ea:c9:b2:25:56:b1:7d:61:6c:eb:26:37:
38:ba:2e:e1:b8:13:bd:74:8c:c4:33:a4:00:2a:ae:36:63:d1:
bc:a0:64:cb:e9:52:a3:c4:42:99:99:d3:31:c5:a4:1a:31:71:
82:45:c2:de:56:a6:30:25:7c:f8:ca:d2:ec:67:8e:11:28:7c:
e3:5b:77:7b:3f:a1:cc:6e:73:2a:f9:bb:3b:a4:fb:40:c6:f9:
d8:e1:f2:78:1a:b3:a1:dd:fd:ef:4e:ad:23:e2:c8:a3:98:ed:
50:38:64:f1:0f:ba:2b:0d:b0:bc:da:81:5c:2b:b3:9b:dc:29:
23:6b:c2:c7:ed:8b:90:48:c9:7e:0f:84:78:c5:0c:c6:06:03:
a2:0d:d8:21:90:ff:3b:f0:b7:a9:f8:87:a1:ea:fa:3d:65:80:
c9:bb:e4:5a:ae:91:d3:d3:4c:bd:b6:9c:ab:20:19:5b:45:1e:
b9:37:06:81:cd:01:9b:bb:a1:4f:f5:d9:45:c0:f1:4a:d4:29:
db:f0:22:b8:46:ab:bc:b9:6a:59:aa:d1:d7:44:91:43:24:76:
ad:1c:93:7f:8d:40:72:18:62:a1:a3:0f:c5:1c:3d:f6:31:b4:
ad:90:ce:c1:b2:03:81:d4:aa:cd:f1:5e:5f:bb:11:da:b1:ec:
4c:f0:d2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:55:14 2024 by rpki-client on console-fra.rpki-client.org