Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e37322e39362e302f32312d3234203d3e20323632393037.roa
File: 3137372e37322e39362e302f32312d3234203d3e20323632393037.roa (raw, json)
Hash identifier: xUyIe6EQgoQv2JErCIQXuRLqYCjEgnYlRRjccVV4I84=
Subject key identifier: 63:C8:ED:2F:E8:2F:53:F2:B6:61:DF:56:9D:95:86:22:95:4A:57:0C
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 6BFFE94FEBE177F867F9B16CCE53B028C82A1C3C
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e37322e39362e302f32312d3234203d3e20323632393037.roa
Signing time: Sat 03 Feb 2024 12:53:22 +0000
ROA not before: Sat 03 Feb 2024 12:48:22 +0000
ROA not after: Sat 01 Feb 2025 12:53:22 +0000
asID: 262907
IP address blocks: 177.72.96.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ff:e9:4f:eb:e1:77:f8:67:f9:b1:6c:ce:53:b0:28:c8:2a:1c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Feb 3 12:48:22 2024 GMT
Not After : Feb 1 12:53:22 2025 GMT
Subject: CN=63C8ED2FE82F53F2B661DF569D958622954A570C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:ba:af:6c:2d:de:cc:a9:12:50:9a:f8:7b:
d7:67:6e:31:f9:96:5e:3e:06:69:ee:1a:5e:68:15:
55:63:02:d7:da:20:4a:f6:77:09:17:06:ab:7f:70:
f0:0f:b2:c9:40:92:f6:74:21:45:6b:04:b2:18:c6:
6f:1a:3f:b3:37:50:d9:f2:3d:48:22:2f:da:ba:42:
83:11:5c:88:58:8f:b0:d6:06:4f:03:21:7d:58:31:
f3:c5:c8:2e:08:28:c1:93:ba:dd:7e:86:5f:97:31:
5b:b8:09:c3:b3:cd:0f:d2:0a:61:e8:2a:f4:0f:dc:
12:e0:ed:4e:2e:40:3f:1d:97:f4:58:ce:78:0c:12:
7a:25:74:87:7b:fe:af:2c:26:6b:f6:64:04:41:93:
4d:30:06:78:22:90:85:da:24:1f:b2:c9:f5:95:48:
fa:e3:3d:c5:f6:e0:bf:46:e5:01:ba:b4:d0:d4:90:
da:7f:ac:8d:d6:f9:a0:90:28:67:1b:66:86:a8:89:
75:93:98:a1:f3:f4:eb:c7:ed:26:ee:09:10:67:e7:
52:1e:e4:9e:b0:4c:48:bf:97:ae:79:d9:af:f3:b4:
b7:8a:9f:59:29:c1:02:27:4b:81:f3:cb:3c:3b:19:
3d:a3:b9:8b:96:a3:8d:4d:a3:64:b8:37:01:a2:6b:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C8:ED:2F:E8:2F:53:F2:B6:61:DF:56:9D:95:86:22:95:4A:57:0C
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e37322e39362e302f32312d3234203d3e20323632393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.72.96.0/21
Signature Algorithm: sha256WithRSAEncryption
13:c8:1e:87:3f:75:db:95:d1:c9:08:66:79:e5:f5:c6:d0:ab:
b5:67:57:c7:04:59:53:0d:8f:54:61:76:b0:83:7c:93:f2:ee:
0d:d8:b8:ed:60:2d:72:9e:64:d4:a8:f9:3e:37:1a:9d:61:58:
96:bc:dc:e4:ae:8d:6e:72:ab:64:62:fc:39:f5:d4:86:85:0d:
ec:1f:d8:7e:4a:f7:d9:20:97:aa:ea:fc:ba:74:b8:15:c5:2f:
a2:cb:1d:a6:88:89:5a:cb:0f:32:93:6b:20:17:6e:9d:56:1e:
45:cb:60:22:6c:7c:d4:5e:86:ce:61:d9:94:29:f7:82:74:77:
2e:13:76:ee:f9:d2:02:25:6e:5c:df:b0:c6:96:d8:83:2e:ee:
c1:a7:31:b0:25:75:70:1b:da:f1:92:e8:83:cd:2c:8b:6f:d4:
3a:d1:34:53:c5:14:6f:23:3c:bc:81:58:79:c0:cd:11:16:17:
91:f1:ec:c2:cc:cf:82:1d:a2:67:60:f1:55:f0:03:a4:64:ae:
f0:a3:9b:98:d6:3a:15:89:a6:fc:af:62:08:9c:59:ab:82:2b:
fb:7c:c0:11:67:c3:02:98:ef:36:3d:da:0e:04:91:58:7c:6a:
90:86:b2:dc:39:0e:0b:c1:e2:5c:3e:4b:db:7c:8f:71:38:78:
4d:ec:ff:ad
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa//pT+vhd/hn+bFszlOwKMgqHDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4RTQ4NTVFOEFGNDY4MENDMzgyN0M1RjU0OEQxMUFG
RUVDOTE3ODAeFw0yNDAyMDMxMjQ4MjJaFw0yNTAyMDExMjUzMjJaMDMxMTAvBgNV
BAMTKDYzQzhFRDJGRTgyRjUzRjJCNjYxREY1NjlEOTU4NjIyOTU0QTU3MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa+rqvbC3ezKkSUJr4e9dnbjH5
ll4+BmnuGl5oFVVjAtfaIEr2dwkXBqt/cPAPsslAkvZ0IUVrBLIYxm8aP7M3UNny
PUgiL9q6QoMRXIhYj7DWBk8DIX1YMfPFyC4IKMGTut1+hl+XMVu4CcOzzQ/SCmHo
KvQP3BLg7U4uQD8dl/RYzngMEnoldId7/q8sJmv2ZARBk00wBngikIXaJB+yyfWV
SPrjPcX24L9G5QG6tNDUkNp/rI3W+aCQKGcbZoaoiXWTmKHz9OvH7SbuCRBn51Ie
5J6wTEi/l6552a/ztLeKn1kpwQInS4Hzyzw7GT2juYuWo41No2S4NwGiawMtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUY8jtL+gvU/K2Yd9WnZWGIpVKVwwwHwYDVR0j
BBgwFoAUxo5IVeivRoDMOCfF9UjRGv7skXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMC9DNjhFNDg1NUU4QUY0NjgwQ0MzODI3QzVGNTQ4RDExQUZFRUM5MTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2OEU0ODU1RThBRjQ2ODBD
QzM4MjdDNUY1NDhEMTFBRkVFQzkxNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3M3FZUFNLMkRXV2pDQmFtV2hOQzdyZ3JxaENRUEFqZEdIU2RDWm45VjZvLzAv
MzEzNzM3MmUzNzMyMmUzOTM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMy
MzkzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsUhgMA0GCSqGSIb3DQEBCwUAA4IBAQATyB6HP3Xb
ldHJCGZ55fXG0Ku1Z1fHBFlTDY9UYXawg3yT8u4N2LjtYC1ynmTUqPk+NxqdYViW
vNzkro1ucqtkYvw59dSGhQ3sH9h+SvfZIJeq6vy6dLgVxS+iyx2miIlayw8yk2sg
F26dVh5Fy2AibHzUXobOYdmUKfeCdHcuE3bu+dICJW5c37DGltiDLu7BpzGwJXVw
G9rxkuiDzSyLb9Q60TRTxRRvIzy8gVh5wM0RFheR8ezCzM+CHaJnYPFV8AOkZK7w
o5uY1joViab8r2IInFmrgiv7fMARZ8MCmO82PdoOBJFYfGqQhrLcOQ4LweJcPkvb
fI9xOHhN7P+t
-----END CERTIFICATE-----
Generated at Wed Apr 10 23:29:25 2024 by rpki-client on console-ams.rpki-client.org