Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3131312e302f32342d3234203d3e20323632373931.roa
File: 3136382e302e3131312e302f32342d3234203d3e20323632373931.roa (raw, json)
Hash identifier: 2AtuEJ9kbDXF/81SqtROd6mo1e/CPJLaqm9sxkE95v0=
Subject key identifier: 28:BD:F3:B8:9B:05:3D:DB:9A:D8:81:0C:6E:67:ED:C1:E7:09:33:FD
Certificate issuer: /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial: 76080E1567C6DAB040E8EC6BE57FDEF116EB047E
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3131312e302f32342d3234203d3e20323632373931.roa
Signing time: Wed 24 Apr 2024 17:31:33 +0000
ROA not before: Wed 24 Apr 2024 17:26:33 +0000
ROA not after: Wed 23 Apr 2025 17:31:33 +0000
asID: 262791
IP address blocks: 168.0.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:08:0e:15:67:c6:da:b0:40:e8:ec:6b:e5:7f:de:f1:16:eb:04:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Validity
Not Before: Apr 24 17:26:33 2024 GMT
Not After : Apr 23 17:31:33 2025 GMT
Subject: CN=28BDF3B89B053DDB9AD8810C6E67EDC1E70933FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d9:94:cb:fc:3e:71:29:08:57:c0:90:69:0a:
40:72:d5:93:63:41:d6:c2:be:79:01:4a:42:8a:02:
12:e2:6f:1a:3f:c0:fd:20:07:3e:57:cc:f6:de:25:
e1:be:7b:ef:3b:71:23:33:d9:e2:14:5f:55:a3:8b:
35:f0:73:86:88:63:40:3e:b5:a9:6f:71:84:58:50:
a4:3e:99:b6:29:f8:fb:92:6a:ef:f9:fd:3c:9a:83:
4f:3b:4c:92:86:7e:e3:41:86:5c:3c:82:23:1e:a5:
0b:16:9c:71:81:94:4d:44:48:ec:d3:ee:70:dc:4b:
1b:00:61:9a:63:c5:57:9b:96:6d:9c:f7:1c:81:10:
e6:0f:e2:e8:a2:e9:2d:c4:61:dd:a7:dc:a8:a0:b1:
e4:f7:bb:29:4d:46:e0:f9:f1:28:c9:b7:26:1c:fc:
d4:56:e5:2d:91:51:64:76:a5:a7:46:d5:cb:16:4d:
fc:e1:9c:2a:0c:9e:34:26:cf:11:b8:45:48:44:28:
22:bd:44:2f:b6:6a:4e:11:e8:f3:ef:c5:24:2f:d5:
a5:d2:be:a9:76:40:1f:52:a6:1b:f9:db:e6:69:4b:
7c:a1:ae:31:1c:0f:0f:98:24:7b:22:f0:89:65:38:
7c:42:1a:e7:d6:ca:82:63:77:5a:de:2e:08:d7:f2:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BD:F3:B8:9B:05:3D:DB:9A:D8:81:0C:6E:67:ED:C1:E7:09:33:FD
X509v3 Authority Key Identifier:
keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3131312e302f32342d3234203d3e20323632373931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.111.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:b2:23:f8:f9:9e:ad:6c:ad:41:c8:45:1c:7a:40:73:f2:cd:
32:43:31:6c:b1:28:84:01:1e:de:c3:f4:bc:68:19:fe:a9:d6:
eb:60:df:8e:0d:11:d4:f9:d4:79:99:6d:ee:36:7d:d8:f6:1e:
8c:7e:24:65:e7:66:be:f1:ac:38:6c:98:e3:af:b8:a8:52:4e:
0a:8b:05:ee:30:98:75:19:3b:52:c6:2f:c4:67:98:3b:48:01:
ae:a8:93:fb:24:93:98:37:20:40:fa:e0:12:fa:62:c1:90:bd:
29:17:11:b9:10:d7:d3:fb:bb:ac:3e:d9:eb:db:d9:cc:1d:ab:
bf:f0:fe:1c:dc:c5:53:f1:25:f7:c8:2d:9a:f3:c9:db:71:81:
dc:de:22:7d:4b:3a:28:33:3c:0e:0a:e7:a3:cb:1b:28:44:82:
1a:71:03:6f:1b:73:7c:74:a1:38:74:1b:33:60:04:a2:62:55:
af:b1:ce:52:3e:d0:bf:19:e8:ee:c8:95:cc:f8:73:ac:ab:33:
c0:19:17:f1:15:22:10:2d:c1:f6:39:91:32:37:f2:c1:3f:7b:
0f:33:d5:2d:14:1a:65:3b:e1:b2:55:9a:e2:ab:cd:86:3d:11:
5d:e0:c3:9e:33:ea:90:07:a0:ed:7f:df:d3:5e:30:46:14:5f:
bd:26:4c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org