Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32342d3234203d3e20323632373931.roa
File: 3136382e302e3130382e302f32342d3234203d3e20323632373931.roa (raw, json)
Hash identifier: IkG/CGfax/U8DaK5baPQ963N0KO48vjzBQ5nNsULwDo=
Subject key identifier: CE:C6:D2:3A:A9:7D:19:EF:AF:A7:FB:61:0E:F9:47:08:98:FF:60:97
Certificate issuer: /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial: 444123B349812E59AB2DBB03735C62E47B6CB20B
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32342d3234203d3e20323632373931.roa
Signing time: Wed 24 Apr 2024 17:31:25 +0000
ROA not before: Wed 24 Apr 2024 17:26:25 +0000
ROA not after: Wed 23 Apr 2025 17:31:25 +0000
asID: 262791
IP address blocks: 168.0.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:41:23:b3:49:81:2e:59:ab:2d:bb:03:73:5c:62:e4:7b:6c:b2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Validity
Not Before: Apr 24 17:26:25 2024 GMT
Not After : Apr 23 17:31:25 2025 GMT
Subject: CN=CEC6D23AA97D19EFAFA7FB610EF9470898FF6097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:42:dd:05:f3:89:8b:e2:fa:3e:1f:e8:b9:79:
88:fc:db:dc:f6:73:03:10:84:3c:b0:2a:e6:88:b8:
04:fa:fe:e7:ca:b7:84:65:13:13:06:2c:2b:3a:47:
41:22:24:14:fa:14:54:8f:b4:9a:7f:02:6e:33:4c:
2f:49:7f:08:08:3a:4c:99:1b:27:e6:4c:e4:57:7f:
79:04:a1:01:ed:cf:96:71:32:6e:c0:1e:53:79:87:
32:88:5b:8e:66:40:d0:86:1d:09:9b:1f:7a:7b:46:
90:5c:20:27:b3:73:4b:d5:ff:fa:38:0e:de:58:e8:
d1:63:d2:8e:d1:fd:ef:a7:bb:de:90:1e:e8:eb:63:
52:06:89:fa:3c:4e:f1:e1:18:0b:19:1b:95:49:8f:
65:bb:0c:a9:4f:ec:9a:6b:42:12:52:4e:9a:63:ad:
fe:ce:69:c2:02:30:3e:59:29:13:66:e6:7d:7d:52:
10:9d:5b:13:1b:64:41:d4:26:89:4b:13:83:b6:14:
8a:97:3a:e1:2e:6e:ef:30:1b:76:26:03:8e:68:71:
0d:9e:2a:21:72:02:f4:f0:89:21:0b:3b:c6:bb:7d:
1c:e6:c8:59:86:3e:f0:50:54:87:6b:92:aa:12:10:
fa:96:f0:a1:32:c0:7a:b7:e5:80:a8:2f:40:e9:3e:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C6:D2:3A:A9:7D:19:EF:AF:A7:FB:61:0E:F9:47:08:98:FF:60:97
X509v3 Authority Key Identifier:
keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32342d3234203d3e20323632373931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.108.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ac:e8:fc:e6:e9:4d:b0:8d:2a:e0:1c:36:96:55:43:11:6f:
b3:05:84:f1:ff:04:09:98:b4:bd:22:2a:2c:a8:19:2b:0e:e9:
d1:c4:fd:ae:8d:de:f4:68:74:c2:a3:76:89:e1:fa:5e:36:33:
ad:17:9f:f0:e5:49:be:67:1a:2b:03:9f:94:83:10:00:50:ca:
4c:ed:1f:cb:1a:f0:ce:5b:b0:9c:ad:a0:b2:db:e5:32:90:aa:
de:ef:c6:34:15:f3:d9:10:41:00:1a:bf:4c:01:16:a8:9b:05:
8c:f6:ae:cf:de:64:c0:6c:0f:cf:32:5b:fc:6b:2f:96:48:8e:
0d:3d:0b:99:49:ef:67:01:2a:8f:41:cf:ec:46:ae:72:ed:65:
68:f0:33:c3:e5:eb:b6:8b:02:23:0d:ac:2f:30:e8:57:b3:91:
0b:42:77:f3:46:c6:dd:83:91:47:fb:f7:ad:32:88:52:f6:9c:
4e:4e:5d:67:86:aa:21:78:31:b0:84:62:3d:f9:34:4c:6a:85:
e3:ff:b3:0e:c1:87:74:a9:e3:c6:dc:23:7c:fe:8c:7a:cb:64:
ba:22:2f:6c:64:16:e1:ba:b7:3a:3b:b6:cd:6a:18:c4:98:d0:
b4:24:ac:09:0b:17:6f:cc:14:0d:0e:c1:eb:cf:cc:fc:6f:7a:
6e:fb:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org