Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32322d3232203d3e20323632373931.roa
File: 3136382e302e3130382e302f32322d3232203d3e20323632373931.roa (raw, json)
Hash identifier: FNOin+LFfrXimCg0tQqUnLayENj6s3PlPNfnrwPRTrg=
Subject key identifier: 56:4D:D8:F7:EC:AC:7E:80:CE:49:90:17:7F:88:0B:B8:17:47:09:D4
Certificate issuer: /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial: 4083FB84442C6F369B79663E8109E346F935EDFE
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32322d3232203d3e20323632373931.roa
Signing time: Wed 24 Apr 2024 17:31:20 +0000
ROA not before: Wed 24 Apr 2024 17:26:20 +0000
ROA not after: Wed 23 Apr 2025 17:31:20 +0000
asID: 262791
IP address blocks: 168.0.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:83:fb:84:44:2c:6f:36:9b:79:66:3e:81:09:e3:46:f9:35:ed:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Validity
Not Before: Apr 24 17:26:20 2024 GMT
Not After : Apr 23 17:31:20 2025 GMT
Subject: CN=564DD8F7ECAC7E80CE4990177F880BB8174709D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:46:77:f9:75:0c:a3:9f:56:4b:19:b2:8a:
79:4b:d2:b1:b0:3e:3f:9c:01:1c:4f:af:3f:17:db:
6f:ba:60:96:31:49:2a:ce:82:30:c3:5e:3d:ed:4d:
d6:49:ec:ac:b4:d6:3e:68:ec:0c:50:01:86:04:f0:
f5:37:d1:29:c1:a4:e3:ef:ba:ad:be:23:1c:e6:37:
1f:e1:15:b5:70:90:2a:64:11:67:ad:e7:9a:1f:c1:
1f:71:3d:84:78:3d:6f:4f:49:a2:e4:5a:16:95:e9:
53:c2:32:c0:61:c2:3a:0a:68:d3:97:14:be:2f:29:
a5:f9:14:60:13:b5:52:67:ae:e0:f1:cd:dc:a7:2e:
6d:93:26:aa:73:b6:9b:0b:b6:70:33:ed:c9:2f:3e:
12:59:e2:e5:64:53:07:e3:cd:fb:88:cb:0e:6c:fa:
fd:0a:d7:9d:e2:b6:92:a2:ac:60:87:21:46:fd:bc:
0d:28:6e:8f:7e:f1:07:42:1b:2c:95:76:47:00:26:
cd:58:f6:1d:54:46:ca:d2:f7:ec:c8:7d:21:ae:89:
e6:ea:af:68:35:88:15:d3:db:0f:12:db:c3:d8:51:
d6:68:70:c8:9e:63:11:7e:2a:51:da:59:eb:ea:93:
a4:05:3b:77:49:90:54:80:a6:aa:c6:3e:76:d2:d5:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4D:D8:F7:EC:AC:7E:80:CE:49:90:17:7F:88:0B:B8:17:47:09:D4
X509v3 Authority Key Identifier:
keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32322d3232203d3e20323632373931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.108.0/22
Signature Algorithm: sha256WithRSAEncryption
16:65:ac:e5:7d:53:ae:a1:48:9e:6a:cf:a9:67:6b:b7:a0:1d:
cb:41:f1:4f:5e:d6:7e:26:da:52:38:8d:b0:a7:4c:8c:8c:a9:
08:03:6c:da:b4:a6:27:e0:20:b4:8c:72:82:b7:46:6d:de:8a:
bf:2e:a3:85:e2:0e:1a:9b:dc:2a:3d:c5:65:f9:35:bb:23:76:
1d:3b:6c:18:50:45:4e:22:8d:7d:3e:59:03:0a:4d:0f:9a:c2:
24:9a:60:b4:88:15:1a:36:8d:f0:26:f3:11:5e:3d:2d:f5:29:
8a:0a:45:57:44:68:ea:d6:c8:5e:54:3f:ec:b3:d5:6a:f5:d6:
09:8b:05:ad:64:fc:79:49:bb:48:2d:e3:5c:56:6b:3f:1f:b1:
31:27:e8:20:cb:32:e6:e3:a9:7e:33:90:11:de:42:f9:83:da:
f6:9b:3b:04:f9:a6:24:b9:54:de:f4:23:1a:11:48:dd:f6:5a:
fc:1c:d2:1a:2d:04:a8:0e:c5:6e:26:cf:bc:55:79:ac:7c:7d:
6c:a6:c1:79:2d:a7:69:13:dc:48:60:58:49:d2:fd:4c:b0:97:
f0:24:29:f1:76:bf:6b:fc:7a:1e:e0:5a:a8:f4:2b:54:b6:35:
c6:a4:cc:7c:47:fd:88:1a:dd:e8:f2:24:ab:0b:f1:60:82:21:
c7:54:0d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org