Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231322e302f32332d3233203d3e20323633303837.roa
File: 3137372e3133372e3231322e302f32332d3233203d3e20323633303837.roa (raw, json)
Hash identifier: KTP4nKwKc0IpIUEfjKh3IJcRo2djXKpm7oR3pwXLPmI=
Subject key identifier: 58:60:51:9E:B5:F0:F1:0A:B1:D5:B3:47:45:48:C8:1C:14:8E:84:37
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 2B5727B214FAE3BAF4E09CEA17E760A9CD9E437E
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231322e302f32332d3233203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:31:23 +0000
ROA not before: Thu 18 Apr 2024 14:26:23 +0000
ROA not after: Thu 17 Apr 2025 14:31:23 +0000
asID: 263087
IP address blocks: 177.137.212.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 22 May 2024 17:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:57:27:b2:14:fa:e3:ba:f4:e0:9c:ea:17:e7:60:a9:cd:9e:43:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:26:23 2024 GMT
Not After : Apr 17 14:31:23 2025 GMT
Subject: CN=5860519EB5F0F10AB1D5B3474548C81C148E8437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:e9:b9:11:56:be:93:a7:a3:b5:fe:98:54:
08:41:06:56:f2:3e:d3:4f:31:6b:e9:09:84:9d:79:
94:a9:5d:68:9d:53:94:9b:6a:a4:00:1f:b3:e8:4b:
cc:b9:89:be:e2:82:55:62:d7:0d:84:ac:c4:38:c9:
dc:d5:c5:fa:d7:11:9f:8c:69:90:c3:38:e3:85:77:
be:7f:70:1b:b4:3a:d2:b0:d4:fc:ba:8a:14:61:54:
7e:a5:5b:ba:b3:8a:94:1b:d7:81:52:ae:49:07:60:
a6:77:db:e0:28:85:97:c2:28:b4:86:f3:40:44:13:
8a:80:c7:a1:9a:72:33:d6:5f:57:16:0a:14:19:02:
e8:98:e4:40:02:68:ee:d8:70:66:c7:c3:31:8b:d3:
be:24:5f:ce:96:84:72:68:5b:a5:87:7b:ad:b9:52:
d1:6c:b5:12:f2:aa:73:3d:39:fd:4f:cc:fd:0a:da:
55:f4:e4:0e:eb:eb:39:d2:27:3c:1d:72:a8:b8:ca:
bb:6b:5a:82:40:3e:85:a1:13:2b:af:12:27:51:9c:
e8:79:69:0a:0f:f6:73:6e:26:b4:0b:ed:9e:92:35:
18:46:39:d4:dc:46:b6:d0:ac:f2:7b:e5:21:07:6b:
51:b7:a9:39:50:fb:c9:41:31:ea:a1:24:33:0e:8a:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:60:51:9E:B5:F0:F1:0A:B1:D5:B3:47:45:48:C8:1C:14:8E:84:37
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231322e302f32332d3233203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.212.0/23
Signature Algorithm: sha256WithRSAEncryption
21:9e:1d:cb:39:e3:3c:26:7a:92:75:58:a9:a1:98:b2:7e:31:
c3:31:c0:9d:87:da:f4:fc:6e:3f:79:c8:61:75:4b:65:a7:fe:
38:b3:1d:32:99:f8:2f:41:7d:52:7e:af:a3:05:7c:a7:aa:51:
61:42:f3:a1:0e:df:f5:bb:f6:7e:a9:95:fb:f5:20:5e:f4:21:
68:ca:79:a7:57:75:15:d7:42:3c:84:31:11:1f:5c:dc:8d:cd:
84:88:82:cd:93:c6:5c:4d:ea:5a:de:ee:c2:34:f7:f1:05:20:
5f:43:4a:11:eb:14:94:d6:30:89:33:46:3e:d5:7b:c6:f4:ec:
f3:41:12:92:ab:ba:c8:5c:a9:00:f5:e7:67:17:ca:16:b3:1c:
90:41:31:ed:49:de:22:c4:51:30:14:b3:48:26:63:36:7e:a0:
4c:10:39:e4:a9:8c:ea:0c:22:0c:ea:2a:ae:87:91:09:62:58:
88:fb:cf:05:d3:f3:1c:a4:de:40:95:01:30:36:e1:13:5a:ed:
88:a3:da:16:44:f6:b5:ab:c1:95:cf:6f:e7:6e:b3:dc:c3:5d:
d5:7d:4f:d5:2c:4b:76:70:ca:bf:b5:9a:2d:45:10:6a:6b:0c:
79:ee:82:91:59:2b:76:26:19:c6:19:0a:96:42:01:39:ef:73:
3a:cf:34:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:06:29 2024 by rpki-client on console-fra.rpki-client.org