Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32322d3332203d3e203631393030.roa
File: 3133382e39372e33322e302f32322d3332203d3e203631393030.roa (raw, json)
Hash identifier: i/20pQ9+UCmKUqOemxdq4sOQYjfEqs5Veefuzent12Y=
Subject key identifier: 49:B2:CC:63:F7:57:69:1B:54:AB:F2:14:35:71:7A:7A:24:E4:35:D7
Certificate issuer: /CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
Certificate serial: 13DDD740551A1F74646963A17F413E308AA9D58E
Authority key identifier: 00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32322d3332203d3e203631393030.roa
Signing time: Mon 23 Sep 2024 19:31:41 +0000
ROA not before: Mon 23 Sep 2024 19:26:41 +0000
ROA not after: Mon 22 Sep 2025 19:31:41 +0000
asID: 61900
IP address blocks: 138.97.32.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 07 Oct 2024 19:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:dd:d7:40:55:1a:1f:74:64:69:63:a1:7f:41:3e:30:8a:a9:d5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
Validity
Not Before: Sep 23 19:26:41 2024 GMT
Not After : Sep 22 19:31:41 2025 GMT
Subject: CN=49B2CC63F757691B54ABF21435717A7A24E435D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:3d:c4:3e:61:29:7a:8b:aa:de:7e:30:63:
01:29:75:26:e4:bb:b7:e8:b9:fe:7d:d8:4e:f9:13:
67:cb:4b:e7:bb:e4:fa:90:ee:26:ed:38:b5:17:75:
37:47:46:2d:90:13:c6:b9:2f:1a:d3:d0:d8:d7:14:
e9:a8:cf:3c:2a:79:72:b6:c8:24:8c:12:5f:8d:c2:
b3:4f:ed:be:cf:e6:47:f0:13:bc:12:d1:21:31:70:
0f:c0:fd:60:70:be:8c:18:20:32:8f:c5:ff:b9:f4:
d8:3f:11:a2:4a:cf:5c:86:90:cf:f6:ee:da:e5:61:
3b:9e:3e:1e:04:e6:75:d9:de:fa:7e:94:59:7e:e3:
3c:26:fb:72:f2:aa:2a:51:93:2d:f3:54:ee:e2:3a:
2d:e9:0b:52:ef:1a:74:47:47:36:cd:aa:5b:d2:b7:
88:c8:9c:85:91:2e:f4:42:e3:6b:58:ad:13:1b:8c:
ce:65:3f:ce:96:78:77:3c:94:e0:fd:5b:f8:d4:2c:
39:d6:73:df:85:2d:6c:97:cb:af:89:af:d7:71:4e:
50:d4:c9:20:ac:0f:0e:12:53:7a:74:b5:41:94:89:
28:83:a9:e3:68:ba:19:56:a8:26:66:f0:1f:04:3a:
ad:59:5a:96:ea:8e:47:8b:9e:20:b3:e9:e1:2c:57:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B2:CC:63:F7:57:69:1B:54:AB:F2:14:35:71:7A:7A:24:E4:35:D7
X509v3 Authority Key Identifier:
keyid:00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32322d3332203d3e203631393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.32.0/22
Signature Algorithm: sha256WithRSAEncryption
27:55:91:7d:3c:bc:b6:fa:51:6b:6c:ce:91:15:72:4a:b7:79:
e3:12:43:2a:ec:52:a1:ca:e5:bd:ad:83:40:45:9f:08:c5:2b:
82:0a:34:63:cc:4a:bf:9e:73:23:d3:11:2a:fc:c9:c6:b9:a7:
33:8d:1f:fc:c7:52:1d:59:94:86:9a:2a:17:c1:29:b1:28:49:
9b:c5:fa:55:b1:2e:96:90:42:90:78:42:dc:bf:26:5d:2d:21:
ab:7a:63:06:f5:57:11:27:43:a5:db:67:50:85:47:51:94:15:
80:8e:92:c1:55:32:88:2a:30:d2:c3:7f:7f:db:cd:78:7a:21:
65:93:af:8d:3a:91:c3:17:f5:f4:b6:f4:c3:57:2e:c0:02:e3:
66:fa:11:df:37:21:d8:15:95:b6:90:33:3d:ca:33:fe:b3:2a:
36:f1:44:27:3e:11:26:f1:64:cb:95:e5:c1:00:f7:68:10:2c:
0a:9c:2d:b2:d2:32:46:0a:f2:15:64:71:14:04:08:77:e7:ad:
da:25:eb:dc:72:71:0a:98:0d:ce:08:a8:85:d0:e5:ad:d0:64:
a0:a0:37:16:87:d0:c9:9e:b2:52:b1:12:a7:20:8f:9b:ea:c6:
43:a6:fe:87:91:91:42:9a:d4:7c:98:fa:a0:50:2a:5d:5d:13:
5b:97:13:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 00:11:47 2024 by rpki-client on console-fra.rpki-client.org