Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3137322e302f32322d3232203d3e20323633303837.roa
File: 3137392e3130392e3137322e302f32322d3232203d3e20323633303837.roa (raw, json)
Hash identifier: HHOP/2kAGgx6+ua3zTWbQE/qlpdplQxvcrRMA+0hUsQ=
Subject key identifier: 56:B6:0B:3C:97:79:52:CC:87:6F:46:9D:31:77:04:19:DF:0B:5F:3F
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 6BDDA927535F33C1A2E5893E9128B5D27C18D76D
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3137322e302f32322d3232203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:32:56 +0000
ROA not before: Thu 18 Apr 2024 14:27:56 +0000
ROA not after: Thu 17 Apr 2025 14:32:56 +0000
asID: 263087
IP address blocks: 179.109.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 22 May 2024 17:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:dd:a9:27:53:5f:33:c1:a2:e5:89:3e:91:28:b5:d2:7c:18:d7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:27:56 2024 GMT
Not After : Apr 17 14:32:56 2025 GMT
Subject: CN=56B60B3C977952CC876F469D31770419DF0B5F3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:99:a6:0f:2f:d7:3b:13:85:12:cc:b2:4b:40:
3e:1e:12:b0:da:e0:bb:d3:7e:25:bd:49:62:3c:a4:
58:b4:1b:c0:a7:e3:8d:81:d1:61:8e:c2:fa:2f:5d:
30:6a:0a:43:cc:d2:52:bc:0f:ac:66:9c:1d:59:e5:
6d:11:a1:81:3d:09:ab:1f:69:18:c8:4e:35:f5:13:
9b:f7:7f:f6:cc:48:ae:87:ff:3a:d7:4e:45:5f:2d:
f5:c8:10:6e:30:a0:4f:57:33:e0:e5:8a:c9:eb:5f:
b8:ba:bf:11:12:0f:bb:57:0f:fd:ca:6e:d8:83:ca:
a4:40:4c:1a:c5:db:a5:1f:96:98:fa:51:ff:64:31:
2c:66:18:85:fc:42:d2:b5:44:64:d7:8d:51:38:19:
47:15:bb:82:bb:ab:8d:0d:83:03:8a:3d:25:d4:74:
42:d4:db:f7:95:a3:47:58:13:d7:60:96:cd:18:cb:
a0:7b:ae:41:91:ba:07:6c:da:89:0c:11:5c:1c:e2:
d1:d1:27:de:56:8a:3e:4c:d1:05:4d:3b:8e:ff:28:
bb:8f:9e:f6:67:15:97:17:46:a9:1d:4d:89:24:79:
cf:c8:e3:c8:cd:6a:ca:14:81:99:6c:6d:94:8e:61:
e8:9c:e7:97:de:65:30:45:7f:63:18:f3:c0:9e:1b:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B6:0B:3C:97:79:52:CC:87:6F:46:9D:31:77:04:19:DF:0B:5F:3F
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3137322e302f32322d3232203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.109.172.0/22
Signature Algorithm: sha256WithRSAEncryption
96:ee:90:8e:0e:80:32:61:fb:12:70:08:64:37:b4:51:a5:9a:
21:e6:68:87:16:5f:64:c6:c5:b0:f2:c3:93:e6:e0:86:bc:2d:
4c:ba:8f:1a:ce:5a:c9:35:7a:fb:4c:33:4d:79:f3:ee:54:3b:
ea:38:94:e3:b8:59:02:43:d2:55:a5:17:a2:fc:6d:79:23:20:
db:8d:00:bc:e7:3a:d4:42:92:9b:85:04:b8:0b:be:9e:e9:f0:
eb:05:9b:96:89:70:97:3e:85:33:18:52:41:2d:51:5c:52:8a:
6e:ea:30:c9:17:6f:2b:2a:61:f5:b8:14:4c:02:9a:b1:42:c3:
45:95:ee:37:75:7e:c7:5e:7e:ed:20:8b:cb:5a:3b:a5:b9:be:
73:07:a2:d1:b9:06:68:3b:c8:8f:ce:6a:ac:fd:10:8b:50:40:
71:0b:40:10:d6:fe:f2:fd:a6:58:cb:65:fd:41:66:9a:79:69:
b0:ed:4a:54:45:be:4c:e0:01:93:fb:6e:09:1e:18:be:22:9a:
1e:0b:f8:16:44:78:1c:81:6f:38:78:92:e3:75:c8:95:db:3a:
3e:56:90:a9:9c:1f:7b:26:4a:9e:a0:74:7f:bb:e7:b9:74:ef:
8b:a0:93:be:e1:5b:10:fd:06:4d:75:9f:d3:52:ae:92:6e:41:
f8:7f:78:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:06:29 2024 by rpki-client on console-fra.rpki-client.org