Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32332d3233203d3e203238313931.roa
File: 3138392e39302e33322e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier: EnZtC8cFn9pDKoqwp0vDWiib7uw8QpciSTMhavFT5LA=
Subject key identifier: B2:D0:FF:98:6B:67:4F:96:5B:48:D8:32:A6:C4:C4:FE:6D:24:E2:02
Certificate issuer: /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial: 1AD0089BE1CB3DA14CDDBD1EFE812247208ADCD5
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32332d3233203d3e203238313931.roa
Signing time: Wed 17 Apr 2024 11:42:29 +0000
ROA not before: Wed 17 Apr 2024 11:37:29 +0000
ROA not after: Wed 16 Apr 2025 11:42:29 +0000
asID: 28191
IP address blocks: 189.90.32.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d0:08:9b:e1:cb:3d:a1:4c:dd:bd:1e:fe:81:22:47:20:8a:dc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Validity
Not Before: Apr 17 11:37:29 2024 GMT
Not After : Apr 16 11:42:29 2025 GMT
Subject: CN=B2D0FF986B674F965B48D832A6C4C4FE6D24E202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:a2:50:da:4e:9f:14:b6:6f:dd:03:a3:98:
e6:d7:83:e9:3d:df:b1:f1:02:a5:74:c4:b4:6d:5c:
4c:f3:af:76:95:ff:30:39:f7:33:a6:a9:55:6e:bd:
c3:43:06:68:c3:56:37:76:8a:36:8c:14:15:b8:47:
86:94:63:1a:f6:47:e8:4d:44:51:fa:84:d4:e0:e2:
6f:3b:cc:91:6c:38:4f:0a:85:3c:08:e5:b2:c8:5c:
25:1d:ac:d7:ad:08:4a:ad:99:4a:ed:29:97:95:2f:
9a:89:f5:4c:f2:64:7f:32:92:62:c6:c9:28:bb:1d:
ec:59:24:8d:ec:da:b6:5f:df:11:b3:9c:2c:b9:40:
ea:27:e7:8e:8b:5e:d2:4d:c3:44:4a:a9:55:3a:ed:
a6:08:38:db:24:9f:75:b0:cb:d2:d7:f2:1b:d0:2e:
6f:bc:fe:c1:cf:13:8a:f9:80:df:30:4f:ad:85:a6:
98:c4:99:aa:3d:a6:76:b6:1b:bf:37:b4:bc:67:e6:
de:d3:1b:68:5f:32:d5:e1:8c:6b:d4:e2:f2:7e:5e:
6d:3c:a0:0f:d4:28:bd:04:1a:de:9e:46:5d:84:8a:
00:b5:a2:91:f6:e0:24:b9:c5:b0:c9:05:bb:cd:ca:
6a:76:a9:a2:30:52:9a:dc:8e:69:16:fb:a3:ea:be:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D0:FF:98:6B:67:4F:96:5B:48:D8:32:A6:C4:C4:FE:6D:24:E2:02
X509v3 Authority Key Identifier:
keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32332d3233203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.32.0/23
Signature Algorithm: sha256WithRSAEncryption
57:e7:aa:01:f0:43:dd:7e:12:d8:eb:fb:fd:fa:ef:bc:43:6d:
2b:ce:01:90:a2:39:76:53:23:75:13:e6:c0:8c:f5:77:16:4d:
68:80:e1:0a:26:23:76:16:00:af:4d:83:a7:c5:9e:d0:40:6a:
d0:22:45:8e:35:43:b7:f5:e8:b7:43:44:51:73:ba:6c:2d:66:
3b:c0:81:c1:28:67:cd:1d:bd:9d:2d:f0:c7:77:75:bd:7d:93:
49:d3:0a:e4:b4:d0:c1:c9:02:f0:66:78:36:8e:a1:95:55:1a:
0d:fb:e1:a2:81:1a:be:18:40:69:af:dd:f7:95:e0:fc:d5:27:
f3:20:82:8c:8f:f9:eb:8a:21:aa:3e:fc:42:ad:66:7b:ca:95:
98:41:fa:00:33:27:a0:b8:0d:df:77:9a:a0:a6:60:29:3d:a7:
20:70:2b:31:b5:21:18:53:1b:bf:4a:29:ba:85:d9:ea:62:3b:
59:6f:d1:e0:e0:00:e6:5a:fc:95:42:0b:64:7c:1e:b8:03:21:
bd:b2:2a:60:6f:80:49:ce:30:c8:d3:96:b1:c8:8d:a3:86:ec:
35:f2:1b:a1:86:c6:4f:e3:d1:62:02:61:e3:c9:10:15:35:8a:
22:3d:1b:ac:b2:29:c8:d0:08:34:59:9c:5d:78:fd:a7:25:f8:
bb:27:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org