Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35362e302f32322d3232203d3e203238323034.roa
File: 3138392e39312e35362e302f32322d3232203d3e203238323034.roa (raw, json)
Hash identifier: pHb93lFERUIxVlRGiGNZxZUa+9341csritY4oLSVUxQ=
Subject key identifier: 1E:DB:E5:88:EB:BD:5C:56:96:3F:E5:AF:BE:A3:49:EC:5F:60:1D:8E
Certificate issuer: /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial: 02B630F376EE96FE8B81C669ED2C306A47356FCE
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35362e302f32322d3232203d3e203238323034.roa
Signing time: Wed 24 Apr 2024 14:37:47 +0000
ROA not before: Wed 24 Apr 2024 14:32:47 +0000
ROA not after: Wed 23 Apr 2025 14:37:47 +0000
asID: 28204
IP address blocks: 189.91.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:b6:30:f3:76:ee:96:fe:8b:81:c6:69:ed:2c:30:6a:47:35:6f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
Validity
Not Before: Apr 24 14:32:47 2024 GMT
Not After : Apr 23 14:37:47 2025 GMT
Subject: CN=1EDBE588EBBD5C56963FE5AFBEA349EC5F601D8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2b:5d:5f:09:ed:a1:eb:b9:9b:42:3e:3d:1e:
b0:f2:6f:d4:1e:5d:38:c1:fa:8b:e9:f1:bc:0b:57:
2f:e0:38:d4:ad:fa:e6:14:37:15:eb:4a:7a:3d:c2:
e8:2c:42:8d:d8:a1:ab:ec:fa:58:28:0f:69:8e:95:
aa:91:59:dc:11:bf:b4:c4:d1:ea:12:85:91:aa:e9:
41:cf:1d:1d:a2:1e:c5:46:3d:07:40:b5:34:1a:f9:
e8:a8:84:b5:9b:79:26:90:c0:33:f9:33:ce:cd:23:
23:60:ed:5a:5b:0b:e9:b1:44:33:bf:45:bc:3e:48:
4c:d7:03:ef:11:b1:14:35:50:8a:e8:a1:e8:68:4c:
54:0a:f2:50:5c:ff:37:f5:9c:5c:20:bd:8b:96:4c:
ef:50:29:e8:26:f0:23:93:c7:23:30:ae:6f:bd:5d:
99:83:8d:13:18:6f:47:dd:7b:1d:a2:49:26:0f:cc:
cf:bb:15:da:f0:b4:a6:9c:e6:9d:c1:a8:2b:1b:2e:
62:d6:6f:c7:4d:35:7d:ee:d6:76:d3:17:6d:07:7e:
d6:cc:d7:33:23:12:40:69:bb:5b:08:9c:b8:55:a6:
03:22:e3:b8:c2:30:19:a6:ae:81:e3:84:d1:1b:bb:
72:fa:dd:ba:bb:6c:0d:6c:13:17:c0:18:9f:4f:88:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DB:E5:88:EB:BD:5C:56:96:3F:E5:AF:BE:A3:49:EC:5F:60:1D:8E
X509v3 Authority Key Identifier:
keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35362e302f32322d3232203d3e203238323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.91.56.0/22
Signature Algorithm: sha256WithRSAEncryption
67:b6:36:e8:2f:ca:c8:21:2f:d0:65:54:b9:02:e3:0a:d3:7f:
cf:7e:f6:bd:2d:00:e2:2d:50:eb:a5:4e:9a:80:76:2d:cd:7d:
55:a2:ab:31:c6:f3:a1:88:22:53:ed:ba:7e:04:ff:58:af:d1:
72:38:71:3b:21:a6:c6:3a:3c:41:c6:52:70:77:9f:2b:5c:41:
a7:af:1c:69:8d:d9:c7:81:fa:d9:54:2a:eb:c0:21:a7:e2:6d:
c5:ad:22:20:a3:6b:ec:a8:7d:66:f5:2d:02:00:e5:f5:78:9c:
83:a8:bc:b9:a0:5a:51:ae:82:04:e8:d6:b6:bd:44:bf:b3:1f:
d5:54:87:da:bd:af:a5:b4:c3:92:09:e9:34:af:cd:6f:59:7c:
1f:82:a8:d8:5d:8f:c7:dc:7e:b4:b3:6d:0a:ad:8c:4b:16:56:
d9:d4:f4:bb:f3:6b:04:19:d8:21:55:ca:46:db:79:d8:58:94:
d9:27:c9:9e:34:f2:a1:c3:f5:99:c9:69:56:99:68:ef:03:6e:
9e:e5:02:59:ce:e0:7b:21:2a:4e:ca:f7:aa:30:cf:92:5c:cf:
8a:fc:6a:52:ff:47:f9:f4:9b:b8:e6:e4:ce:66:b8:47:b5:18:
c9:1f:87:ef:12:60:68:45:ad:4f:8f:a6:18:7a:a0:14:5e:b1:
c1:94:a1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org