Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135362e302f32332d3233203d3e20323635323536.roa
File: 3136382e302e3135362e302f32332d3233203d3e20323635323536.roa (raw, json)
Hash identifier: 0pzJC4MXH1bWLiNENyQE2iUTyd02ZTEOSWud4N4Vlvk=
Subject key identifier: 6A:A7:76:B0:41:2E:62:02:F6:2C:63:4A:4C:0D:B1:AF:28:83:96:16
Certificate issuer: /CN=95CE674952A93BE73C10B416EB0EE35010832094
Certificate serial: 7B7D2931592C0397E94004157381D56CAA37E414
Authority key identifier: 95:CE:67:49:52:A9:3B:E7:3C:10:B4:16:EB:0E:E3:50:10:83:20:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95CE674952A93BE73C10B416EB0EE35010832094.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135362e302f32332d3233203d3e20323635323536.roa
Signing time: Tue 06 Aug 2024 21:25:12 +0000
ROA not before: Tue 06 Aug 2024 21:20:12 +0000
ROA not after: Tue 05 Aug 2025 21:25:12 +0000
asID: 265256
IP address blocks: 168.0.156.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 06 Sep 2024 01:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:7d:29:31:59:2c:03:97:e9:40:04:15:73:81:d5:6c:aa:37:e4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95CE674952A93BE73C10B416EB0EE35010832094
Validity
Not Before: Aug 6 21:20:12 2024 GMT
Not After : Aug 5 21:25:12 2025 GMT
Subject: CN=6AA776B0412E6202F62C634A4C0DB1AF28839616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:15:4b:44:f2:29:94:eb:0d:cd:b5:34:9a:
14:8b:99:09:a9:5c:f5:72:ba:55:3b:0b:f8:5e:fb:
4d:b7:d5:51:3b:0d:eb:6c:33:a4:04:7f:07:b0:a6:
77:1a:20:d2:ef:21:ca:58:e4:a7:25:93:5d:83:d3:
5c:8e:e9:21:2d:d2:7e:cb:0b:9c:0a:ae:c9:e4:28:
b4:c6:84:57:15:4e:60:1f:7f:45:51:63:3d:d8:c1:
9f:fc:18:51:ae:a9:f6:ae:92:c0:16:2e:74:13:92:
68:ea:a6:5e:93:ca:13:ed:51:35:52:db:d7:6f:66:
a9:44:6d:3b:f3:00:aa:3b:b4:17:d9:72:25:c8:39:
d9:4f:4c:b1:c4:66:db:4f:2e:3e:7f:8e:49:3c:82:
db:3c:9c:8f:c0:28:f7:b6:46:e3:fe:67:d6:8f:a5:
2b:0c:fa:86:8f:03:07:e8:e4:a5:3b:05:91:5e:42:
32:a4:d3:f2:01:96:73:18:ee:88:01:94:68:f3:75:
84:8e:50:66:84:41:9f:58:bb:69:41:38:2d:81:64:
fb:a3:45:c8:77:b5:ea:b0:ca:71:13:c6:bd:76:6d:
d5:1b:3d:63:d2:14:b9:a9:d8:12:76:9d:10:d9:01:
3d:e2:56:d5:e2:ac:da:83:8a:ba:64:d2:f7:a3:92:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A7:76:B0:41:2E:62:02:F6:2C:63:4A:4C:0D:B1:AF:28:83:96:16
X509v3 Authority Key Identifier:
keyid:95:CE:67:49:52:A9:3B:E7:3C:10:B4:16:EB:0E:E3:50:10:83:20:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/95CE674952A93BE73C10B416EB0EE35010832094.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95CE674952A93BE73C10B416EB0EE35010832094.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135362e302f32332d3233203d3e20323635323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.156.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:7d:2e:d8:40:02:67:08:42:11:c7:35:97:62:8d:54:7c:14:
46:52:cc:6e:90:b4:28:85:cf:9d:ed:54:e8:a5:fc:6d:09:5b:
88:e1:82:57:f5:b8:e8:97:bf:00:58:29:ab:1c:9d:51:b0:db:
71:6d:7e:de:5c:e7:c5:8d:a8:fa:6f:ed:69:7a:fa:68:65:46:
d2:86:c7:f5:a3:b7:c3:e5:a8:f9:19:c7:58:56:6c:9b:28:78:
cf:b0:e5:16:e1:db:fe:e9:9e:6f:9e:06:25:96:fd:dd:e6:d6:
23:d0:d5:d1:f0:d9:60:c4:c8:2a:a3:01:64:82:45:ab:74:ba:
e7:9a:77:62:14:70:08:4f:82:3f:2e:59:3b:6a:91:17:2f:73:
65:ba:c0:01:20:bb:36:f7:de:c6:8d:5a:53:b6:73:52:a1:49:
81:02:53:01:c5:2a:08:4a:cf:f5:fe:cb:a3:b3:15:b4:d5:98:
67:65:6e:47:02:1b:21:9e:39:04:60:b3:02:7d:c6:a7:3b:dd:
4f:f0:b2:e1:db:e4:16:0a:bc:a3:7c:c5:ce:ac:bd:94:7c:02:
da:7b:8e:c7:aa:f2:b4:d1:df:2f:ab:09:d7:ad:73:27:b2:29:
f4:87:a6:11:e1:3e:1a:0f:e3:be:e6:38:12:85:61:a8:20:6e:
c4:30:3f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 03:41:39 2024 by rpki-client on console-ams.rpki-client.org