Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137302e3235342e3138382e302f32322d3234203d3e20323632393037.roa
File: 3137302e3235342e3138382e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier: HiEEm8b9jo4woBpgPrWHHdr1H07/0mToiq2/6/6Onv4=
Subject key identifier: 23:11:70:12:75:33:A0:9F:FA:3B:8E:6B:2B:03:F9:AE:DB:60:8E:2B
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 7AA3478535F49B98F413AB2B7B7C2B7A97356232
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137302e3235342e3138382e302f32322d3234203d3e20323632393037.roa
Signing time: Sat 03 Feb 2024 12:53:20 +0000
ROA not before: Sat 03 Feb 2024 12:48:20 +0000
ROA not after: Sat 01 Feb 2025 12:53:20 +0000
asID: 262907
IP address blocks: 170.254.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a3:47:85:35:f4:9b:98:f4:13:ab:2b:7b:7c:2b:7a:97:35:62:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Feb 3 12:48:20 2024 GMT
Not After : Feb 1 12:53:20 2025 GMT
Subject: CN=231170127533A09FFA3B8E6B2B03F9AEDB608E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:92:63:b4:bb:8f:05:eb:0a:8e:53:a8:9f:
3c:9f:21:91:53:6a:4a:f3:c8:cb:f2:86:10:64:83:
d0:be:75:b0:b0:97:b5:9b:c9:e3:ae:8e:ff:3d:e6:
c7:a2:8f:0a:e9:1d:79:88:2d:e2:fa:a8:d3:98:00:
61:3c:42:e5:d6:d7:a6:c7:ba:4e:09:91:5d:6f:7c:
dd:c8:c6:1b:9d:15:6c:85:b2:cb:cb:4d:ee:d4:07:
89:e3:39:c2:af:bc:f3:0a:2f:ce:7a:79:32:c1:13:
10:3f:49:17:33:ae:28:3f:ff:e8:60:0c:fe:80:13:
8b:9c:89:3a:e9:10:80:23:2b:a0:f2:1c:3f:e8:aa:
7c:9a:9f:bf:4e:cf:92:1e:f9:8b:74:97:ce:e1:0c:
19:11:0f:8d:ed:8b:e8:5b:24:64:5e:7d:b0:97:fc:
da:c4:eb:a2:44:f8:71:23:b6:2d:56:b4:30:48:66:
3a:e3:42:83:17:cc:09:d4:b2:a5:91:f1:46:3e:54:
1f:40:1e:c4:b3:b0:d1:3e:59:65:45:d7:66:6c:05:
4a:e9:2c:46:a9:d6:be:5d:76:99:03:05:5e:5c:0c:
09:18:0d:45:8e:fd:9f:ac:9a:68:73:3e:a7:81:18:
7f:9e:e2:80:34:24:8e:6b:c7:71:cf:bc:bd:33:be:
df:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:11:70:12:75:33:A0:9F:FA:3B:8E:6B:2B:03:F9:AE:DB:60:8E:2B
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137302e3235342e3138382e302f32322d3234203d3e20323632393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.188.0/22
Signature Algorithm: sha256WithRSAEncryption
07:2a:29:99:3b:af:c6:2d:3f:ca:3d:2c:2b:3b:f7:01:a0:1e:
f5:64:c5:b3:e6:70:d2:7d:56:99:99:03:04:66:80:80:d0:b5:
fe:62:78:75:e8:dd:fe:8e:ec:c3:e8:cd:49:35:68:4b:3d:2f:
94:c3:4c:d2:4a:3d:5c:84:96:52:50:1f:fb:f8:35:d5:07:20:
14:a8:e6:be:b3:39:9a:37:c9:b9:71:88:95:31:71:5d:37:f6:
3b:97:1a:4d:b2:e5:4c:5d:e4:8c:ff:a4:fb:16:37:cb:6d:c5:
46:17:8b:f7:28:a3:5b:a7:e5:cc:17:4d:ac:5f:2b:d3:09:de:
9d:de:ae:64:ed:2c:20:0f:a6:fd:1d:08:34:2a:aa:ac:29:c3:
46:01:1e:ac:b3:8f:eb:bf:98:fe:fd:81:f6:70:80:50:31:e8:
8a:8e:c3:1d:46:8d:8f:3e:56:ea:50:fe:93:44:be:56:f8:20:
8a:52:56:a3:d3:7f:dc:0f:b4:98:97:a8:a6:d7:12:1e:65:2f:
71:e3:34:53:da:a3:cd:77:c5:25:ae:17:9a:f6:21:36:9d:71:
9b:3f:fe:3e:08:be:b7:96:a2:f5:83:4d:64:bc:14:47:1f:fb:
ee:e8:46:f5:68:a6:e7:9c:7e:e9:85:5c:5d:a9:08:5e:94:95:
f2:67:86:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org