Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136322e302f32332d3233203d3e20323633303837.roa
File: 3137392e3130392e3136322e302f32332d3233203d3e20323633303837.roa (raw, json)
Hash identifier: K4icK13PBptz7+hcO+/kzc7h3j9VRxE7SETYLmrss5Q=
Subject key identifier: DF:65:71:D8:47:A0:C5:EB:3A:98:8F:BB:2D:E8:6A:D2:F9:1C:53:E8
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 087371CE1CBFD96353B7437BF53D826E7F0698FD
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136322e302f32332d3233203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:32:01 +0000
ROA not before: Thu 18 Apr 2024 14:27:01 +0000
ROA not after: Thu 17 Apr 2025 14:32:01 +0000
asID: 263087
IP address blocks: 179.109.162.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 22 May 2024 17:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:73:71:ce:1c:bf:d9:63:53:b7:43:7b:f5:3d:82:6e:7f:06:98:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:27:01 2024 GMT
Not After : Apr 17 14:32:01 2025 GMT
Subject: CN=DF6571D847A0C5EB3A988FBB2DE86AD2F91C53E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:c5:d2:00:75:21:90:c1:57:ed:8d:2d:32:
73:b6:98:93:46:b4:6b:26:d7:a8:f8:75:d3:0b:46:
d6:03:5d:9c:e9:71:97:a9:92:a7:17:d6:29:e2:d6:
8e:7e:6c:53:af:8c:bf:83:53:22:2b:57:1f:ba:6a:
0e:94:af:ac:94:cf:2a:d5:3b:39:76:33:c9:69:a2:
2e:bf:81:e9:e0:4c:c2:6b:94:61:2c:2e:e8:95:99:
01:5f:f5:6c:b4:1e:3a:8c:90:a5:72:e8:b4:4a:db:
64:c3:c5:17:fc:61:5d:4b:1d:a2:d8:83:44:31:1b:
2c:db:fa:bb:47:e2:72:e5:7b:c3:d2:8b:f7:f8:9b:
7b:de:92:4c:5b:73:d6:84:92:c1:46:33:24:38:0e:
85:e3:bf:30:cd:c2:56:06:8a:09:ee:46:9e:72:39:
d1:47:0b:1f:14:99:3c:38:61:c5:4c:16:f9:8d:91:
04:9e:de:2a:3f:54:5b:29:4d:10:e0:f2:35:53:a8:
8c:c8:2a:40:ac:44:b1:55:86:75:bb:a8:d7:fe:86:
50:31:74:5a:bf:3c:d3:88:91:a4:c5:bd:ef:11:e0:
b0:85:d3:f7:a0:98:68:53:0a:0b:6f:58:ca:bf:88:
4a:1d:51:88:ff:cc:c2:8e:c8:18:91:5b:2f:17:a1:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:65:71:D8:47:A0:C5:EB:3A:98:8F:BB:2D:E8:6A:D2:F9:1C:53:E8
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136322e302f32332d3233203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.109.162.0/23
Signature Algorithm: sha256WithRSAEncryption
86:3c:42:99:dc:f1:2d:6e:c3:cd:41:a3:96:ff:01:c5:2c:a7:
69:26:dd:3f:21:c5:60:f6:3c:96:d5:d7:1e:1c:c9:15:87:22:
74:5c:58:78:bc:9b:e9:cd:6d:49:66:76:02:c5:71:b2:ac:0d:
93:f3:db:b0:1a:a1:2d:29:61:af:48:30:4e:d7:e0:ea:6a:7f:
f3:fc:37:10:8a:ce:c4:89:2a:dd:23:80:40:3a:92:0f:fa:7c:
f1:98:d5:16:e0:da:17:1f:e8:2d:9f:43:8b:c0:4d:e5:b7:8c:
53:42:c9:aa:bf:da:5f:44:09:c8:c4:48:87:52:08:03:1d:b3:
25:0b:af:02:3c:16:31:1b:46:47:f4:20:f5:70:79:cb:b3:89:
5e:f3:34:05:bd:4a:43:7d:db:0f:05:d5:c1:af:85:27:13:f7:
14:30:c0:5f:1c:0d:d4:5d:1f:9f:9b:d3:ea:70:7e:5e:bb:67:
e5:7d:78:be:dd:11:07:e3:db:dc:93:00:7b:e3:48:f0:ab:cc:
d1:e0:36:73:bb:cf:ed:57:5c:b6:2d:a2:5d:3c:93:27:5c:0a:
73:7b:5a:ab:bd:e9:a5:47:52:a2:d7:aa:35:ef:a8:23:0a:12:
e5:0d:45:aa:db:95:ed:5e:7c:25:49:fc:3f:45:b8:3e:a1:c5:
9b:b6:e6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:06:29 2024 by rpki-client on console-fra.rpki-client.org