Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135372e302f32342d3234203d3e20323635323536.roa
File: 3136382e302e3135372e302f32342d3234203d3e20323635323536.roa (raw, json)
Hash identifier: 1Vfi2f4tQZORYMRbUMdXjc2FFkXXLnKe98ih+IsBeuQ=
Subject key identifier: C0:07:59:B7:A7:F7:7E:AB:A9:99:B5:1B:B4:64:71:00:2B:34:1D:00
Certificate issuer: /CN=95CE674952A93BE73C10B416EB0EE35010832094
Certificate serial: 742538B0B0CD36247CBCB6947BD34720F5D4B4FA
Authority key identifier: 95:CE:67:49:52:A9:3B:E7:3C:10:B4:16:EB:0E:E3:50:10:83:20:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95CE674952A93BE73C10B416EB0EE35010832094.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135372e302f32342d3234203d3e20323635323536.roa
Signing time: Fri 06 Sep 2024 01:42:06 +0000
ROA not before: Fri 06 Sep 2024 01:37:06 +0000
ROA not after: Fri 05 Sep 2025 01:42:06 +0000
asID: 265256
IP address blocks: 168.0.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 03:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:25:38:b0:b0:cd:36:24:7c:bc:b6:94:7b:d3:47:20:f5:d4:b4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95CE674952A93BE73C10B416EB0EE35010832094
Validity
Not Before: Sep 6 01:37:06 2024 GMT
Not After : Sep 5 01:42:06 2025 GMT
Subject: CN=C00759B7A7F77EABA999B51BB46471002B341D00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:c9:79:07:30:d2:98:a9:5f:34:23:9a:db:
81:b7:c6:00:f2:11:06:b6:13:af:f1:00:6e:7e:f2:
65:33:8a:1f:9a:09:a2:5e:b2:5b:c7:e4:6d:23:00:
99:0e:77:51:27:48:6b:69:c3:30:9d:6d:25:23:5a:
e1:37:f5:19:77:b8:b8:2f:8a:d6:96:1a:c6:61:7d:
ae:4c:86:02:e9:69:5f:1d:00:01:e6:b7:15:3b:d7:
70:b2:0a:8d:3e:e1:1b:df:a5:13:03:94:15:18:84:
f2:1b:1f:3b:a3:1e:a2:d2:66:93:56:f3:d5:ee:7f:
a4:19:1b:c5:1b:21:fa:bf:3d:bd:76:d7:6e:8c:e0:
01:9a:34:ea:74:55:05:34:58:25:b5:c1:52:40:01:
50:97:14:6c:fe:06:9b:02:a5:94:62:31:97:d3:81:
04:5c:8e:4d:b5:4c:98:c1:81:1f:0a:9b:81:4e:42:
2c:3b:1d:37:e0:39:b2:16:bd:fa:ed:bb:4e:9f:57:
ac:e5:7a:f9:d6:2e:c1:53:45:12:85:f2:79:67:b9:
dd:51:65:72:8c:5d:75:bd:d7:3a:fd:86:f0:03:1a:
40:52:68:1b:eb:ab:63:d3:28:32:6f:c0:d6:d5:03:
2d:83:bb:5b:08:60:4a:a4:a3:16:ff:b0:28:a2:cf:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:07:59:B7:A7:F7:7E:AB:A9:99:B5:1B:B4:64:71:00:2B:34:1D:00
X509v3 Authority Key Identifier:
keyid:95:CE:67:49:52:A9:3B:E7:3C:10:B4:16:EB:0E:E3:50:10:83:20:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/95CE674952A93BE73C10B416EB0EE35010832094.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95CE674952A93BE73C10B416EB0EE35010832094.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135372e302f32342d3234203d3e20323635323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.157.0/24
Signature Algorithm: sha256WithRSAEncryption
29:16:40:2b:61:ca:34:dc:ff:b0:53:6d:1c:ab:04:bc:a7:36:
1a:2c:52:14:fd:d8:62:37:8e:66:dd:0f:b8:72:e9:b1:ad:84:
3d:2d:94:44:b0:fc:8f:1c:a7:3b:5f:72:7c:03:bb:5c:38:49:
9a:1a:b7:66:38:b9:7b:54:00:f9:61:6e:5e:1a:ec:c1:b3:21:
87:27:bb:c9:c6:d6:45:ba:56:8f:a5:60:52:21:bd:3d:9e:2d:
ba:0a:19:ca:88:bf:e1:60:48:94:11:cb:b1:5a:42:e5:e6:de:
2e:09:76:74:76:6a:14:9d:85:1f:87:f1:11:59:ab:f1:6e:d1:
83:50:7f:6c:bb:2c:29:08:ab:b9:30:19:d4:82:a2:a2:f6:63:
15:70:7b:51:2a:c6:4b:81:ce:1e:0b:3d:f8:4a:1b:3a:f1:8f:
66:99:b1:fb:ad:42:a2:bf:ef:a9:af:9e:14:b5:02:f0:79:e6:
2d:0e:e5:0a:71:eb:22:5e:af:e8:c6:a3:62:c8:38:b5:b3:12:
42:7c:37:f6:a1:07:33:16:a6:ba:8d:dd:5d:6d:83:bf:b9:8e:
16:41:97:3c:74:6f:08:cd:30:39:96:ab:8c:6d:47:b0:4c:0c:
4a:62:81:b1:2d:80:89:87:be:7e:39:00:ef:52:36:e2:ed:78:
0e:7c:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 05:04:42 2024 by rpki-client on console-ams.rpki-client.org