Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e312e302f32342d3234203d3e20323733343331.roa
File: 3139312e372e312e302f32342d3234203d3e20323733343331.roa (raw, json)
Hash identifier: PmrYXiViucg5lg/NJRpZaAQ/X2GfsdvC3kpDw0JLyHE=
Subject key identifier: 21:58:3E:F3:69:9B:8D:2C:74:EE:B2:36:6C:EA:A6:94:A9:8B:49:6E
Certificate issuer: /CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
Certificate serial: 4B1799B848E16A5F87D3E931E0B207B5D0887820
Authority key identifier: 8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e312e302f32342d3234203d3e20323733343331.roa
Signing time: Wed 17 Apr 2024 11:37:11 +0000
ROA not before: Wed 17 Apr 2024 11:32:11 +0000
ROA not after: Wed 16 Apr 2025 11:37:11 +0000
asID: 273431
IP address blocks: 191.7.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:12:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:17:99:b8:48:e1:6a:5f:87:d3:e9:31:e0:b2:07:b5:d0:88:78:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
Validity
Not Before: Apr 17 11:32:11 2024 GMT
Not After : Apr 16 11:37:11 2025 GMT
Subject: CN=21583EF3699B8D2C74EEB2366CEAA694A98B496E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:20:a0:2c:c9:2d:c0:15:17:3e:fd:b6:6c:
de:71:3e:b1:03:d9:06:da:9b:24:95:30:eb:b3:e0:
4b:cb:b9:ae:40:45:68:4a:b3:99:bd:69:55:2e:48:
16:fd:f9:8c:7a:58:9f:92:f4:e8:c9:5f:f7:b7:ed:
36:4d:79:c8:31:ba:39:c5:d3:85:2f:05:3d:de:72:
53:4e:22:20:0f:63:89:87:e5:ae:9a:13:c2:07:6c:
39:49:f7:4b:7c:b5:7d:aa:f3:98:04:e4:01:2c:6c:
4d:ab:f0:73:27:eb:6f:69:8f:8a:f7:8b:d9:97:2d:
b3:ae:44:56:b3:d8:79:0b:2e:c5:f4:a9:a5:9d:c7:
ca:42:12:61:b1:6c:b4:18:59:3a:10:32:4f:a1:83:
42:5e:d2:9c:30:2f:e5:06:32:ca:79:ac:dc:7e:e7:
6b:e0:ad:06:83:97:e7:a7:7c:1c:39:70:03:10:f1:
24:ca:36:39:c2:e8:2f:26:2a:d4:22:3b:19:b6:4e:
bb:5e:4c:4d:a7:da:bb:23:f0:e9:4d:8b:16:a9:88:
92:88:8d:7c:7d:42:77:22:39:12:22:75:0e:b4:10:
eb:c7:ea:0e:88:3b:c1:3d:00:c5:e3:5c:bb:da:57:
6f:33:aa:50:a0:10:27:c0:88:9a:ef:8f:a2:d6:a5:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:58:3E:F3:69:9B:8D:2C:74:EE:B2:36:6C:EA:A6:94:A9:8B:49:6E
X509v3 Authority Key Identifier:
keyid:8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e312e302f32342d3234203d3e20323733343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.7.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8f:56:bd:3c:30:7f:30:12:f3:e8:4e:6b:f4:73:1b:65:d4:
c4:19:cc:9b:82:58:2f:cd:d3:69:5f:95:42:67:12:ed:37:88:
8e:d0:90:fc:5a:d7:90:d8:4c:7d:44:22:55:a4:d0:9d:6b:54:
5b:85:2e:27:c9:43:22:42:c1:b5:fb:2b:c8:a2:17:66:1a:f1:
87:09:10:a3:7c:96:89:a6:ba:9d:7e:82:e3:3f:65:e8:94:fe:
cd:2c:21:08:3c:54:e7:98:f5:fc:44:37:d2:01:6e:4a:d4:70:
87:df:93:ef:71:6f:1f:93:9b:57:0c:a8:1f:f0:a8:df:f8:7f:
c2:b3:cb:c9:96:70:fa:57:ab:c1:fa:0e:32:48:29:ed:ca:11:
8a:0f:71:d4:8b:8a:ba:5d:97:33:35:48:68:bd:02:77:25:bc:
10:b0:98:d6:f0:e3:73:8a:72:25:bf:34:a1:2a:93:2c:53:64:
5f:a9:33:ad:55:bd:d6:89:47:d6:7c:2a:e3:1e:6d:4a:31:c2:
f0:14:03:4d:02:c5:ab:83:71:a1:d1:15:ac:c7:75:66:74:4b:
b3:e5:37:1d:06:4d:f7:bf:dd:4c:b6:b4:88:77:25:64:1c:0e:
aa:6c:cd:1c:96:6c:7b:06:94:b0:f3:c0:b1:03:7a:a3:92:af:
71:b5:a4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org