Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e35342e3232342e302f32342d3234203d3e20323639323338.roa
File: 3137372e35342e3232342e302f32342d3234203d3e20323639323338.roa (raw, json)
Hash identifier: nsB1qfAEINcPIG9zUo2xW1+u37q/OTeTreS1L5GS7pE=
Subject key identifier: 3A:57:12:75:43:D6:51:59:4D:E9:55:66:DC:56:A4:7C:FE:EC:B9:35
Certificate issuer: /CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
Certificate serial: 0A7550D90438FD24F5622E0550CE12F3A7E59C9D
Authority key identifier: 2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e35342e3232342e302f32342d3234203d3e20323639323338.roa
Signing time: Wed 07 Feb 2024 14:07:44 +0000
ROA not before: Wed 07 Feb 2024 14:02:44 +0000
ROA not after: Wed 05 Feb 2025 14:07:44 +0000
asID: 269238
IP address blocks: 177.54.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 19:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:75:50:d9:04:38:fd:24:f5:62:2e:05:50:ce:12:f3:a7:e5:9c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
Validity
Not Before: Feb 7 14:02:44 2024 GMT
Not After : Feb 5 14:07:44 2025 GMT
Subject: CN=3A57127543D651594DE95566DC56A47CFEECB935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:d8:2f:be:92:ce:12:13:37:3d:4f:68:09:
b5:71:7e:80:c1:46:1e:cc:6e:72:77:4c:dd:a1:0b:
0a:b8:69:a6:4f:53:35:c8:66:82:77:25:e3:85:fa:
d4:b4:85:e6:17:f0:d0:f0:66:21:0e:1b:3c:39:fb:
5f:f8:30:f3:6b:27:7b:08:3c:16:eb:1c:cc:7a:23:
38:40:6b:be:4b:a8:b1:8a:02:94:b8:db:7e:21:e4:
3f:44:bd:e8:d5:bb:c8:e2:70:b0:9c:66:54:97:7f:
a3:cc:41:c8:a7:30:7c:e0:d6:a0:9f:41:d1:6f:86:
22:b2:66:8f:81:c3:9c:da:17:3e:08:f0:f0:aa:13:
12:85:bc:0b:7d:b7:be:71:2a:e2:00:ce:7a:29:c6:
37:2d:84:23:b5:92:4e:ed:5d:a4:60:59:44:92:7a:
e6:22:f7:4f:d2:1e:75:63:d9:32:02:e4:c0:4f:cb:
17:ac:25:eb:9f:f6:71:cb:ea:f0:2e:6b:d3:a2:4a:
b5:5f:f9:5e:b2:ca:9e:36:e7:c8:fd:85:37:51:e4:
fd:ca:0e:4e:c0:d7:6e:a5:4c:3e:96:08:aa:11:85:
77:19:f3:6a:49:e4:ef:ba:5e:4b:10:69:ef:c6:74:
27:f5:de:b1:56:6a:7a:74:61:63:bc:7d:3f:20:21:
06:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:57:12:75:43:D6:51:59:4D:E9:55:66:DC:56:A4:7C:FE:EC:B9:35
X509v3 Authority Key Identifier:
keyid:2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e35342e3232342e302f32342d3234203d3e20323639323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.54.224.0/24
Signature Algorithm: sha256WithRSAEncryption
50:90:ea:8d:bc:5b:83:6e:8d:a5:b7:63:14:01:e1:d8:9f:55:
0f:49:53:09:01:62:50:0a:19:27:12:94:59:3b:8c:52:6d:5b:
bb:c9:e9:9d:ab:54:97:b9:9d:a9:19:08:f6:63:e4:ea:49:b6:
67:5a:38:bb:94:77:94:7d:dc:74:aa:2e:85:d0:fe:1c:a0:a6:
01:ef:0e:e1:70:90:27:56:15:d8:b8:d7:76:7d:01:9d:5c:bf:
a7:88:3e:d7:4f:be:a7:e4:67:bd:eb:e0:a2:80:5b:71:da:93:
af:26:43:85:d0:97:d2:d8:66:d4:b4:07:55:17:62:48:f2:6c:
9f:fc:7b:d9:f0:4e:90:90:34:84:ca:db:eb:6e:4f:d6:bf:93:
ab:65:5a:c8:99:12:87:84:4a:37:09:57:f2:af:5f:ff:41:5f:
97:cb:3c:e5:86:25:ab:57:c5:29:50:8a:8c:5a:cb:e0:ab:64:
66:83:c0:83:81:f1:76:d0:3d:19:15:2a:a2:f8:75:9c:52:dd:
d8:1b:15:f2:ef:e7:96:6e:19:8e:01:c5:ae:fe:69:9d:00:ab:
97:7b:27:83:e6:56:18:db:e8:88:f9:80:09:81:e8:c4:c4:f8:
12:c9:03:e0:e7:29:d5:ce:16:73:70:1e:98:c2:7d:15:a0:29:
16:58:94:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 21:06:18 2024 by rpki-client on console-ams.rpki-client.org