Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3133312e3139362e3134342e302f32322d3234203d3e20323635393131.roa
File: 3133312e3139362e3134342e302f32322d3234203d3e20323635393131.roa (raw, json)
Hash identifier: KccuLlmAPRwX7MwWC9d2htzUojTemrYjdyigMLbsib0=
Subject key identifier: 32:F3:2D:D8:6C:BA:84:31:84:09:3E:36:28:59:C9:E3:70:14:23:98
Certificate issuer: /CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
Certificate serial: 52F1F21E30120926472DF252EF9928253EE3D668
Authority key identifier: 1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3133312e3139362e3134342e302f32322d3234203d3e20323635393131.roa
Signing time: Fri 07 Jul 2023 18:40:03 +0000
ROA not before: Fri 07 Jul 2023 18:35:03 +0000
ROA not after: Fri 05 Jul 2024 18:40:03 +0000
asID: 265911
IP address blocks: 131.196.144.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f1:f2:1e:30:12:09:26:47:2d:f2:52:ef:99:28:25:3e:e3:d6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
Validity
Not Before: Jul 7 18:35:03 2023 GMT
Not After : Jul 5 18:40:03 2024 GMT
Subject: CN=32F32DD86CBA843184093E362859C9E370142398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:e4:47:19:87:7b:24:ee:6f:71:10:54:15:
45:b7:a7:84:82:42:4a:86:28:71:a2:d4:a9:e3:6c:
bc:f6:26:51:7d:76:67:6f:7a:5f:23:5d:93:4d:fb:
0d:95:e0:9e:60:9f:10:52:ce:43:e3:b3:7a:a1:75:
8f:30:af:6c:54:7a:0c:99:3d:ca:fc:44:f0:64:c4:
cc:82:a2:ab:57:f0:ed:8e:5c:a5:c6:6c:c2:5c:19:
39:2d:8d:0c:80:78:71:d6:a9:06:b8:5e:57:74:ae:
eb:81:d0:b5:46:47:80:e3:f5:6a:d8:7f:f4:5a:88:
8c:d0:15:24:16:50:5f:e8:9a:a9:2f:34:f0:78:8e:
ef:38:a2:3e:df:e4:a6:9c:a9:ab:b5:87:c3:1e:d6:
0e:fd:8a:56:23:36:5a:3b:14:a6:dc:b0:10:59:78:
5f:13:a6:92:1d:b1:36:8c:57:6d:dd:9a:7e:62:a7:
03:ff:78:f7:ba:78:32:f4:3b:52:47:18:8d:96:60:
7d:3d:6f:76:87:37:d9:82:1a:1d:4a:b5:bf:45:5a:
fe:1c:37:7e:9f:f6:d9:78:3d:8a:d6:09:41:78:b9:
ae:9c:45:6a:10:5f:98:95:64:2a:01:aa:91:19:83:
d1:97:9f:da:c6:60:c7:17:ea:cc:1b:a0:9d:0b:56:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F3:2D:D8:6C:BA:84:31:84:09:3E:36:28:59:C9:E3:70:14:23:98
X509v3 Authority Key Identifier:
keyid:1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3133312e3139362e3134342e302f32322d3234203d3e20323635393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.144.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:89:2e:46:07:2e:5f:d5:0d:92:33:61:a0:84:f2:a2:4c:67:
dd:1a:33:9f:f9:85:0b:a3:62:93:d0:db:5f:88:e5:d1:0b:23:
8c:3e:10:df:fa:3e:ea:d6:e2:0a:8f:c0:5b:33:e0:98:6e:cc:
fb:57:34:86:bb:bb:41:dd:40:c8:f0:90:3c:29:c2:91:34:04:
83:07:ba:07:54:79:50:94:6e:f1:41:0a:b7:b5:7e:29:cf:fe:
fe:80:11:5b:4a:80:c8:ef:5c:6e:e2:a4:f4:0d:4f:c9:6e:d2:
f4:be:ff:3f:d0:6c:45:a7:b4:37:e6:f9:ca:95:c4:2d:e8:d8:
2f:3a:52:c3:5c:88:98:22:18:c0:5d:17:2c:00:2b:3e:15:ac:
dc:0a:85:db:c9:c0:55:7f:10:41:39:d0:1b:23:9b:13:2b:d4:
13:3d:3b:59:20:fd:4e:38:3c:92:7e:0a:01:1b:0d:94:ea:02:
cb:ae:b3:ee:31:f0:15:5c:18:94:a7:55:01:01:c3:0a:38:a1:
e7:85:e3:c7:4f:18:7c:ca:d5:55:e1:65:90:ab:be:70:b5:69:
54:81:d6:73:2e:11:b8:fd:84:1a:13:44:4a:e1:8d:dd:ec:e4:
42:b3:7d:dc:b1:67:4b:7d:59:da:0d:dc:cb:b9:b3:3d:0d:7b:
51:7a:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 18:50:23 2023 by rpki-client on console-fra.rpki-client.org