Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e342e302f32322d3332203d3e203631393030.roa
File: 3137302e3234372e342e302f32322d3332203d3e203631393030.roa (raw, json)
Hash identifier: fJOO1oHIYDG0QSfXKofaL3gL6YsHquJO3I4o2bKJ9IE=
Subject key identifier: F8:8B:F4:32:66:2B:FE:E2:A5:E8:23:B3:42:A5:0B:11:DA:9E:39:82
Certificate issuer: /CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
Certificate serial: 30A98CE6972905A8FAB5FA56F969B0D4070231E7
Authority key identifier: 00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e342e302f32322d3332203d3e203631393030.roa
Signing time: Mon 23 Sep 2024 19:31:20 +0000
ROA not before: Mon 23 Sep 2024 19:26:20 +0000
ROA not after: Mon 22 Sep 2025 19:31:20 +0000
asID: 61900
IP address blocks: 170.247.4.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 07 Oct 2024 19:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a9:8c:e6:97:29:05:a8:fa:b5:fa:56:f9:69:b0:d4:07:02:31:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
Validity
Not Before: Sep 23 19:26:20 2024 GMT
Not After : Sep 22 19:31:20 2025 GMT
Subject: CN=F88BF432662BFEE2A5E823B342A50B11DA9E3982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:65:21:2e:34:41:16:0f:58:66:b0:a7:e5:
b8:c4:58:7c:79:59:04:df:d0:94:77:27:87:f5:06:
41:cc:49:77:a4:70:13:9d:ab:16:c6:91:92:82:ea:
7f:5a:a3:dd:32:ac:8e:8a:c0:6c:de:29:bd:cf:f3:
a0:60:c6:fc:a6:99:49:e8:17:47:20:50:5f:9a:77:
32:2d:fe:f3:ae:ca:78:c7:97:eb:3f:7b:06:dd:fa:
56:f5:8e:46:d7:b0:74:5e:aa:af:9f:c9:7a:2c:6a:
ca:76:72:f1:ad:1a:dd:07:b3:ac:6b:18:c2:be:2b:
cd:74:7d:60:e1:5f:6b:83:d6:81:88:a6:76:e5:7e:
71:fb:15:45:a9:f4:d5:fe:cb:53:5c:61:a5:54:58:
93:55:e6:8f:62:d2:dd:66:95:e2:ef:b0:72:7c:8b:
f1:a3:36:7c:fe:9d:e2:05:07:94:5c:3f:1d:51:e4:
f9:53:73:f1:c8:58:5a:36:33:24:cd:3c:df:f7:42:
af:5c:b1:99:e1:eb:be:d3:37:68:5e:62:5f:f5:ad:
ba:2b:a0:a3:ea:8b:68:0a:84:b4:08:e7:e1:12:d7:
f4:4e:17:1d:86:ed:3e:9c:23:f2:a6:52:16:41:32:
11:95:32:c3:7c:96:d3:62:32:f2:43:9e:8d:9d:ff:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8B:F4:32:66:2B:FE:E2:A5:E8:23:B3:42:A5:0B:11:DA:9E:39:82
X509v3 Authority Key Identifier:
keyid:00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e342e302f32322d3332203d3e203631393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:3b:92:0c:5d:79:cc:e7:54:b6:52:11:b8:2c:ae:ba:68:f8:
b7:58:14:2a:76:4c:cf:e2:7f:4f:5d:f9:a7:bc:cd:35:61:ec:
62:e6:3e:d6:56:64:d8:5f:29:42:b8:94:33:cf:36:61:5b:e4:
0b:43:7b:46:e6:a5:55:e2:16:79:03:64:28:c0:bd:ef:09:00:
41:9c:d3:10:44:4c:11:ea:b2:2d:8f:e1:1e:fb:43:21:54:a1:
46:4a:58:c4:55:a9:82:d5:06:f9:61:f9:57:eb:aa:0c:06:10:
fc:cb:78:3e:24:53:a1:b1:50:c9:b6:c4:1a:d5:9a:07:7a:5e:
26:f9:d9:fc:89:2f:ac:52:17:d8:86:2e:7a:fd:2b:c5:96:43:
9d:81:a0:0a:42:96:5a:2d:fb:8e:e3:ec:c6:4a:b6:5f:3d:21:
4d:66:fb:08:25:25:94:e3:e2:25:c5:79:54:f1:3f:f9:c5:49:
55:61:98:63:2d:37:4e:d4:31:1a:48:1f:71:c2:f8:0d:ae:d2:
98:a1:91:3f:15:a3:d4:2d:58:62:c3:bb:c2:24:fa:13:fd:4e:
2b:45:79:bc:1c:5c:b3:d3:a7:de:9f:90:fe:0a:5d:47:ff:c6:
4c:04:03:80:9b:87:ca:2e:b1:52:94:48:11:c2:35:d0:ab:de:
e6:08:16:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 23:07:55 2024 by rpki-client on console-ams.rpki-client.org