Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e302e38382e302f32322d3234203d3e20323632393037.roa
File: 3136382e302e38382e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier: 7sFSydBhoBnf+pLG2IN9V9DjZUhl6CNikOh52EUJboY=
Subject key identifier: E2:34:71:BA:ED:5C:B6:73:BD:9E:87:87:91:A8:FF:8B:9E:F1:CE:48
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 350825001ABEDEFEA1A7660BC1A703A918BED9E4
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e302e38382e302f32322d3234203d3e20323632393037.roa
Signing time: Sat 03 Feb 2024 12:53:24 +0000
ROA not before: Sat 03 Feb 2024 12:48:24 +0000
ROA not after: Sat 01 Feb 2025 12:53:24 +0000
asID: 262907
IP address blocks: 168.0.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:08:25:00:1a:be:de:fe:a1:a7:66:0b:c1:a7:03:a9:18:be:d9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Feb 3 12:48:24 2024 GMT
Not After : Feb 1 12:53:24 2025 GMT
Subject: CN=E23471BAED5CB673BD9E878791A8FF8B9EF1CE48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:dc:20:22:a2:ba:36:61:66:8b:ff:2c:2c:
2c:8f:8f:9c:e5:cf:c8:64:ad:09:98:fd:e5:79:f1:
8c:0c:ee:0a:18:20:16:38:e8:e7:3a:29:45:13:08:
1f:8c:14:0c:04:c6:71:2f:3c:45:d6:fb:60:8a:af:
11:00:1a:4b:5f:2d:ea:8d:d0:de:f5:5c:b5:2d:2a:
9a:54:20:06:0e:ae:12:f5:b7:01:de:7c:bc:5e:2d:
3d:da:b2:60:0c:1c:db:83:be:8b:71:09:b3:8c:c5:
01:29:59:57:b6:66:75:f5:77:d7:7e:77:35:12:a5:
67:ee:cf:98:10:7d:b4:7d:97:ea:09:57:c6:1f:06:
cb:c2:51:07:de:f6:20:8d:eb:dd:28:bb:47:0b:48:
fe:a2:7f:e3:21:e6:78:63:e5:93:8b:ad:ec:01:5d:
0c:cc:27:d9:e5:6a:59:c7:e3:0a:f9:40:ae:72:0b:
5b:fb:8e:e2:b5:4a:bb:5b:56:23:ed:17:1f:7e:74:
eb:d4:b1:83:95:f4:7d:40:f9:22:8d:50:22:3d:ba:
53:89:1e:78:94:d6:73:3c:b1:fe:17:13:0b:57:77:
4b:5d:ca:89:03:71:4b:8f:49:10:03:e7:13:13:8b:
d4:83:c4:d1:f1:8b:41:f8:a0:71:f0:74:b6:97:fd:
13:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:34:71:BA:ED:5C:B6:73:BD:9E:87:87:91:A8:FF:8B:9E:F1:CE:48
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e302e38382e302f32322d3234203d3e20323632393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.88.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:00:54:df:54:13:ae:53:49:2b:83:03:8b:05:b8:d6:40:89:
ec:74:1e:51:2d:06:9e:66:68:c7:af:61:52:b2:70:15:c7:a0:
7f:72:eb:f7:63:96:7d:61:3c:6e:02:82:55:c2:66:ee:80:d5:
d6:59:97:33:cc:c5:a2:22:6e:04:30:41:31:bb:4c:6e:b0:90:
fc:bb:90:f8:74:22:72:41:44:48:23:27:33:b4:22:c4:c7:6a:
b4:75:a1:1d:c8:2e:67:d9:cf:aa:f5:db:d9:e5:ee:b8:8b:26:
7d:5b:e0:f7:9f:92:fe:7c:d0:7c:f4:89:76:67:f2:29:a9:6d:
cf:1a:b7:d0:f9:bc:a2:ec:41:10:49:f3:f9:ab:8d:c1:a1:f1:
d1:25:b3:35:95:54:b1:6e:a2:fd:cd:ef:48:bb:a5:d2:be:ef:
12:47:12:d6:3d:c2:22:ba:eb:91:46:b5:1d:34:a6:b4:0d:08:
4f:5a:7c:74:ad:b1:ca:d5:74:c2:e6:7d:26:20:4e:22:85:c9:
24:55:f6:10:c9:5c:08:b7:26:ea:6f:4a:f3:4c:35:64:64:62:
2d:af:d3:21:fd:8f:1e:f8:01:ac:24:38:25:77:85:83:c3:1f:
b9:8c:0a:02:1e:6b:e5:1e:6d:1f:1a:33:08:29:95:e3:9a:30:
ca:50:3b:3e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNQglABq+3v6hp2YLwacDqRi+2eQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4RTQ4NTVFOEFGNDY4MENDMzgyN0M1RjU0OEQxMUFG
RUVDOTE3ODAeFw0yNDAyMDMxMjQ4MjRaFw0yNTAyMDExMjUzMjRaMDMxMTAvBgNV
BAMTKEUyMzQ3MUJBRUQ1Q0I2NzNCRDlFODc4NzkxQThGRjhCOUVGMUNFNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQEdwgIqK6NmFmi/8sLCyPj5zl
z8hkrQmY/eV58YwM7goYIBY46Oc6KUUTCB+MFAwExnEvPEXW+2CKrxEAGktfLeqN
0N71XLUtKppUIAYOrhL1twHefLxeLT3asmAMHNuDvotxCbOMxQEpWVe2ZnX1d9d+
dzUSpWfuz5gQfbR9l+oJV8YfBsvCUQfe9iCN690ou0cLSP6if+Mh5nhj5ZOLrewB
XQzMJ9nlalnH4wr5QK5yC1v7juK1SrtbViPtFx9+dOvUsYOV9H1A+SKNUCI9ulOJ
HniU1nM8sf4XEwtXd0tdyokDcUuPSRAD5xMTi9SDxNHxi0H4oHHwdLaX/RM3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4jRxuu1ctnO9noeHkaj/i57xzkgwHwYDVR0j
BBgwFoAUxo5IVeivRoDMOCfF9UjRGv7skXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMC9DNjhFNDg1NUU4QUY0NjgwQ0MzODI3QzVGNTQ4RDExQUZFRUM5MTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2OEU0ODU1RThBRjQ2ODBD
QzM4MjdDNUY1NDhEMTFBRkVFQzkxNzguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3M3FZUFNLMkRXV2pDQmFtV2hOQzdyZ3JxaENRUEFqZEdIU2RDWm45VjZvLzAv
MzEzNjM4MmUzMDJlMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMjM5
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqgAWDANBgkqhkiG9w0BAQsFAAOCAQEALQBU31QTrlNJ
K4MDiwW41kCJ7HQeUS0GnmZox69hUrJwFcegf3Lr92OWfWE8bgKCVcJm7oDV1lmX
M8zFoiJuBDBBMbtMbrCQ/LuQ+HQickFESCMnM7QixMdqtHWhHcguZ9nPqvXb2eXu
uIsmfVvg95+S/nzQfPSJdmfyKaltzxq30Pm8ouxBEEnz+auNwaHx0SWzNZVUsW6i
/c3vSLul0r7vEkcS1j3CIrrrkUa1HTSmtA0IT1p8dK2xytV0wuZ9JiBOIoXJJFX2
EMlcCLcm6m9K80w1ZGRiLa/TIf2PHvgBrCQ4JXeFg8MfuYwKAh5r5R5tHxozCCmV
45owylA7Pg==
-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org