Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e3230322e3132382e302f31382d3234203d3e203131303937.roa
File: 3230302e3230322e3132382e302f31382d3234203d3e203131303937.roa (raw, json)
Hash identifier: lNWgCSiZPWsst/ZFYAovxWX/K2mL1LZ3Tv/B9dIi6K0=
Subject key identifier: 7A:E4:D1:F4:21:33:3B:C4:85:62:D1:3B:E7:41:54:E0:94:AD:4B:ED
Certificate issuer: /CN=35121215105D7401F74741FEB8604A2A9FA7E6DF
Certificate serial: 58A19CFC1F4681B81D83C15B6D922B2707AB27FF
Authority key identifier: 35:12:12:15:10:5D:74:01:F7:47:41:FE:B8:60:4A:2A:9F:A7:E6:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35121215105D7401F74741FEB8604A2A9FA7E6DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e3230322e3132382e302f31382d3234203d3e203131303937.roa
Signing time: Fri 16 Aug 2024 14:38:27 +0000
ROA not before: Fri 16 Aug 2024 14:33:27 +0000
ROA not after: Fri 15 Aug 2025 14:38:27 +0000
asID: 11097
IP address blocks: 200.202.128.0/18 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 17:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a1:9c:fc:1f:46:81:b8:1d:83:c1:5b:6d:92:2b:27:07:ab:27:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35121215105D7401F74741FEB8604A2A9FA7E6DF
Validity
Not Before: Aug 16 14:33:27 2024 GMT
Not After : Aug 15 14:38:27 2025 GMT
Subject: CN=7AE4D1F421333BC48562D13BE74154E094AD4BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:bc:1d:1c:2c:30:df:10:a3:7a:66:20:38:
7b:32:87:00:38:db:17:75:29:2a:77:80:54:ed:d5:
fd:17:34:c2:4a:09:5b:89:d1:00:a8:c5:d8:5a:81:
09:34:69:b9:3c:f6:0c:95:76:ba:79:2c:9d:ee:10:
e9:d1:ef:34:8a:b4:09:f9:24:4b:39:c4:41:e3:5b:
79:bb:46:ae:fd:59:4d:75:39:f0:b2:16:ef:ba:fd:
a2:b6:f1:e7:1f:26:75:ff:ff:b7:9c:ca:6a:bd:8d:
e3:3b:01:fa:13:56:a8:53:e3:99:e1:85:e9:f1:85:
23:1f:d6:72:b5:09:69:c8:5f:e5:49:e0:8a:9c:23:
a2:6a:74:77:77:50:bb:aa:77:5f:62:a8:f7:d3:23:
7d:82:84:ae:41:6c:66:46:d3:dc:26:53:ec:b0:2a:
ae:6c:58:13:4a:c5:10:f5:d1:f7:de:76:c7:25:44:
ec:1e:7e:be:15:6d:28:3d:38:92:5c:5e:48:9e:00:
e3:7d:d9:9d:a7:33:d2:57:4c:15:0c:19:9c:7c:2a:
51:c6:48:c2:6c:53:7d:d5:4b:d3:4c:75:23:18:1c:
0e:6d:e8:84:35:d9:0b:53:c2:0f:05:07:09:0e:e5:
50:22:30:f0:b7:db:46:eb:7e:79:6c:dc:d2:37:ca:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E4:D1:F4:21:33:3B:C4:85:62:D1:3B:E7:41:54:E0:94:AD:4B:ED
X509v3 Authority Key Identifier:
keyid:35:12:12:15:10:5D:74:01:F7:47:41:FE:B8:60:4A:2A:9F:A7:E6:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/35121215105D7401F74741FEB8604A2A9FA7E6DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35121215105D7401F74741FEB8604A2A9FA7E6DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e3230322e3132382e302f31382d3234203d3e203131303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.202.128.0/18
Signature Algorithm: sha256WithRSAEncryption
44:47:6d:98:b9:40:1f:9c:35:83:cc:9d:ef:ee:58:34:eb:be:
2e:b1:b1:13:7f:f9:48:93:51:e8:4a:4c:ec:82:92:c2:b8:55:
de:1a:9b:9c:b0:9e:28:75:1e:de:fd:43:76:4e:31:f0:37:72:
0f:db:03:56:b0:b8:82:5c:5a:5a:89:d0:37:5f:69:44:db:fc:
da:ea:52:6c:aa:e5:ef:c0:2e:56:7b:85:81:00:85:52:87:0f:
ff:d8:ad:1c:0d:33:1f:fc:a8:11:d7:76:f0:d1:4f:a9:af:2b:
f0:d3:0e:b7:cf:d5:90:19:14:c5:01:67:1b:cc:3b:8f:00:3f:
11:a8:d8:67:00:4c:c6:21:c4:ba:bc:7f:0c:04:93:52:b8:80:
56:8e:67:d7:79:2c:69:5e:07:2f:91:ae:3a:e8:08:3d:26:fd:
9b:a9:cc:57:b6:44:a4:1f:15:5d:b0:8b:9d:79:de:09:d3:97:
5a:84:a0:7f:fc:ef:3e:e1:9a:ac:1d:0b:7c:f7:1a:8a:d2:a7:
70:48:9a:f7:9f:c6:91:ad:5c:65:f8:87:7e:fe:77:b2:69:fe:
6f:08:97:e9:30:05:38:cf:bb:1a:e4:22:c8:c1:d3:dd:ff:09:
a7:83:f5:09:c8:83:2e:56:47:f8:8e:97:b2:78:82:71:d9:06:
db:2a:21:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 19:52:41 2024 by rpki-client on console-ams.rpki-client.org