Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3137312e302f32342d3234203d3e20323635343336.roa
File: 3136382e3139352e3137312e302f32342d3234203d3e20323635343336.roa (raw, json)
Hash identifier: EJFxxzD9FvlXsDQLNGUWfudjouWOjx79RH1XZzAwscM=
Subject key identifier: 66:64:56:10:73:7B:58:C9:BA:C6:7F:78:CD:CE:A8:15:E2:45:EB:78
Certificate issuer: /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial: 0D07722A60344F573E941179B4998FA39A8DF61F
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3137312e302f32342d3234203d3e20323635343336.roa
Signing time: Wed 24 Apr 2024 17:06:45 +0000
ROA not before: Wed 24 Apr 2024 17:01:45 +0000
ROA not after: Wed 23 Apr 2025 17:06:45 +0000
asID: 265436
IP address blocks: 168.195.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:07:72:2a:60:34:4f:57:3e:94:11:79:b4:99:8f:a3:9a:8d:f6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Validity
Not Before: Apr 24 17:01:45 2024 GMT
Not After : Apr 23 17:06:45 2025 GMT
Subject: CN=66645610737B58C9BAC67F78CDCEA815E245EB78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:30:1f:25:25:77:77:12:bd:da:0f:f5:bd:79:
0e:c1:f9:cf:18:49:54:e8:90:78:81:bd:c9:e6:63:
9f:db:e7:e8:19:70:0e:29:04:78:e8:52:3f:65:7a:
d9:76:9d:21:32:4e:75:df:cc:06:65:a7:57:80:cf:
97:1c:f7:4a:a8:45:f4:f4:fa:8b:a1:27:81:a5:ae:
a2:95:9e:5b:b1:3d:8d:f0:95:d7:81:80:28:8a:6f:
dc:91:07:fe:3b:42:bf:39:f1:b6:d0:25:8c:71:6f:
63:b5:c2:8f:b7:74:00:4c:44:1c:86:d4:5b:c3:38:
b1:d7:f7:a8:08:f6:5d:58:93:b4:7e:cb:0e:c3:90:
59:4b:5c:92:79:47:d6:ef:9e:d6:8a:a4:6b:78:ab:
66:1b:79:1d:d5:ad:e0:a7:69:d6:ce:59:0f:e5:24:
37:99:c5:5c:41:31:f8:28:b4:8d:45:3a:42:e8:b8:
3a:0b:0a:44:c2:f3:0e:13:75:e4:22:e3:ae:76:32:
95:cc:15:05:00:5e:e3:84:35:8f:f6:4d:96:20:ea:
42:58:e8:3f:b6:28:f5:6e:62:b6:59:8f:ee:1a:b5:
47:c3:f5:58:63:d0:a6:d2:0d:ba:cf:81:85:2a:54:
2a:48:99:b6:dd:8a:74:29:23:ec:f9:8c:2c:cd:4e:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:64:56:10:73:7B:58:C9:BA:C6:7F:78:CD:CE:A8:15:E2:45:EB:78
X509v3 Authority Key Identifier:
keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3137312e302f32342d3234203d3e20323635343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.171.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:fa:eb:6c:be:b1:7d:3b:1d:ae:bf:8b:6a:6b:6b:9d:8c:ab:
8e:f7:8f:4c:82:8d:25:4f:b7:c6:26:22:53:50:e1:c0:2a:78:
77:c5:b4:92:e5:df:6f:b9:aa:9d:e2:68:4d:f8:a1:14:50:59:
84:b6:c5:7e:0c:37:93:6a:71:7c:ab:d6:8a:41:09:92:71:e1:
bf:1d:0e:99:b0:b1:2b:ad:67:81:68:fb:6a:c4:62:eb:3e:7b:
3a:1a:50:9b:c8:e1:79:72:36:80:09:a4:1f:d3:44:24:01:ac:
d5:72:ba:32:27:79:9b:87:bf:a8:35:99:7d:b1:8a:2f:a9:4d:
45:67:95:7b:74:24:89:8e:3b:8c:42:00:ae:a2:0b:74:1d:6e:
38:7e:f6:6c:e2:ac:df:6f:7e:70:07:b5:88:bf:d7:e7:3c:4a:
93:a0:7f:dc:d7:b3:bd:d9:d3:56:0d:b6:2e:ee:ce:82:ba:ae:
ec:6a:d2:76:06:81:00:e4:81:1a:9f:e1:d9:11:50:57:c1:10:
5c:92:95:c5:35:c9:ef:ee:f9:c4:4e:dc:2c:08:1e:12:93:1b:
88:6e:e5:ec:73:1c:51:cb:69:8e:ef:6b:30:dd:cb:5f:7b:e6:
44:33:a5:fb:02:d8:a7:10:35:d3:21:76:cd:6b:42:b9:26:c3:
c6:2e:38:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org