Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32332d3233203d3e20323633303837.roa
File: 3137392e3130392e3136302e302f32332d3233203d3e20323633303837.roa (raw, json)
Hash identifier: YeveO6KjPiNFs2hDNPDdtWQjWfuJDAozhh36t1EIfn4=
Subject key identifier: D8:68:78:DF:0B:14:B2:9B:A9:86:D6:D8:AC:EC:E6:35:FA:2B:30:08
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 16091FB11C770DB94A8601BFE86C5F71224AE8E1
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32332d3233203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:31:58 +0000
ROA not before: Thu 18 Apr 2024 14:26:58 +0000
ROA not after: Thu 17 Apr 2025 14:31:58 +0000
asID: 263087
IP address blocks: 179.109.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 22 May 2024 17:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:09:1f:b1:1c:77:0d:b9:4a:86:01:bf:e8:6c:5f:71:22:4a:e8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:26:58 2024 GMT
Not After : Apr 17 14:31:58 2025 GMT
Subject: CN=D86878DF0B14B29BA986D6D8ACECE635FA2B3008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:87:34:69:0e:81:30:69:34:b3:95:83:d1:
07:e4:5b:4b:41:f6:96:70:61:0d:7a:90:76:70:ee:
fb:fa:1f:81:c5:19:6d:a4:64:d2:51:55:96:4b:c8:
00:4c:46:2e:17:61:06:45:ec:bb:2c:69:9c:3c:14:
e5:95:b0:35:b6:4d:10:bf:df:f1:9a:b5:eb:f3:f5:
5e:c1:78:ea:e6:df:9f:fc:0d:71:7d:3b:c0:92:e3:
89:f0:0f:eb:01:a2:35:26:74:fa:f0:0e:dc:30:cb:
39:d7:ae:b2:c0:f1:c6:19:05:c4:01:4d:d5:38:1b:
dc:c8:b7:8a:39:50:3c:be:3f:d1:55:82:dc:89:02:
de:c4:df:ee:17:c9:7f:c3:22:4b:42:28:2f:5f:60:
13:25:bf:4a:5c:4a:06:07:92:0d:3e:76:a5:d9:ac:
5f:30:90:a5:93:94:b6:cb:ac:fc:38:c8:25:03:4f:
7c:a5:9a:95:ce:b7:8f:ab:aa:e5:05:3e:50:7e:41:
11:bb:e2:32:f7:44:f2:ae:43:d9:06:8b:0f:69:f0:
b7:25:bc:5d:1a:ef:5a:cd:68:6c:4e:9a:f5:0f:54:
52:c5:dc:0c:ef:31:14:e7:88:cc:c1:f9:39:2d:68:
c4:41:58:ca:8e:ba:96:b7:30:e6:83:a5:8a:c1:91:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:68:78:DF:0B:14:B2:9B:A9:86:D6:D8:AC:EC:E6:35:FA:2B:30:08
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32332d3233203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.109.160.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:d0:52:01:91:0f:24:d1:a0:5e:5a:c9:b0:40:dd:32:70:92:
8f:a8:a5:2e:43:96:98:ea:41:3b:7c:35:82:5b:1c:da:b7:e2:
83:89:5d:93:3c:46:80:37:54:0f:aa:7a:f3:c5:5a:ae:59:7c:
99:88:80:b5:85:c5:38:9c:b6:62:af:59:b6:eb:36:61:3e:e4:
cb:cf:75:88:17:98:47:6e:b6:11:76:c4:92:d9:d1:0c:d5:f6:
78:bb:3c:51:07:02:47:ce:f0:85:5e:a6:23:32:b8:64:8c:88:
ec:dc:b2:2d:1f:2e:1e:6a:39:ce:4f:ce:02:9b:ea:52:b3:57:
82:2c:3a:25:73:b3:af:99:f4:ad:aa:3d:ce:74:fc:48:73:11:
d7:15:2c:48:f5:22:65:5f:75:29:60:85:ed:50:b2:52:16:7e:
df:d1:3a:73:73:f5:5f:ef:23:80:f4:05:62:07:c8:58:b3:d8:
a1:9a:15:80:4e:95:83:d5:fc:14:2c:d4:a9:5b:42:9f:53:5a:
c0:77:aa:44:52:3b:c1:5f:bc:a9:6c:7a:1c:6b:e7:0d:b1:51:
ad:c9:21:71:25:e9:0a:d8:41:7e:d9:8d:77:e7:97:cf:11:ff:
da:78:2e:43:ec:37:55:86:6c:51:12:11:98:79:7c:f7:dc:5e:
dc:91:f4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 22:19:57 2024 by rpki-client on console-ams.rpki-client.org