Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33332e302f32342d3234203d3e203238313931.roa
File: 3138392e39302e33332e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier: z7IMidBt+2WLKikld/a1MbT9zUR5Jyp5FOJ7QqXLOzM=
Subject key identifier: 84:63:19:7A:27:2F:1A:78:DB:58:3F:EE:08:1F:62:D7:B9:DA:6F:88
Certificate issuer: /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial: 53C42BF315AABBA3D31E7CC27CBCC46CE78972BB
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33332e302f32342d3234203d3e203238313931.roa
Signing time: Wed 17 Apr 2024 11:42:34 +0000
ROA not before: Wed 17 Apr 2024 11:37:34 +0000
ROA not after: Wed 16 Apr 2025 11:42:34 +0000
asID: 28191
IP address blocks: 189.90.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c4:2b:f3:15:aa:bb:a3:d3:1e:7c:c2:7c:bc:c4:6c:e7:89:72:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Validity
Not Before: Apr 17 11:37:34 2024 GMT
Not After : Apr 16 11:42:34 2025 GMT
Subject: CN=8463197A272F1A78DB583FEE081F62D7B9DA6F88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2e:50:83:ed:0b:36:e6:93:4d:a5:31:d7:d4:
e5:dd:a5:ec:03:49:75:31:d0:45:69:5d:dc:2c:29:
2d:8c:f4:18:d1:7c:3f:67:0b:55:74:8d:57:15:54:
1a:38:75:18:1a:bb:68:06:bc:16:7c:f6:1c:6d:24:
d7:87:a3:da:f9:bb:85:85:30:ca:b0:d6:fc:a0:82:
cd:0d:a4:5c:c6:13:c0:0c:8e:81:37:4b:7c:c8:0a:
d3:1d:09:1b:1d:30:75:62:40:e8:83:c1:39:ca:6d:
c4:de:42:eb:4a:7d:34:9c:5b:af:e5:56:ee:85:ad:
ec:af:d5:8e:f7:d9:bd:c8:b8:28:5b:0c:1a:04:26:
e5:d0:28:9c:d2:35:49:b7:11:cd:24:f0:30:72:24:
c1:9f:d2:aa:b2:e6:07:d8:2f:0e:5f:cd:cd:1a:8d:
88:50:06:1b:c1:e2:aa:e9:55:54:54:2d:48:24:d0:
76:f3:8c:dc:5c:b9:82:32:f8:d1:dd:14:fa:8e:ea:
0e:a8:25:ab:cb:63:92:9c:ea:48:0f:ae:4e:f8:29:
c5:2b:2e:57:5f:3d:1f:0f:d7:38:99:a4:71:a6:db:
8b:a4:74:6e:56:92:2c:fc:bd:06:f9:33:79:0e:b1:
a1:f2:c1:14:55:43:0a:95:88:4e:73:60:cc:82:f3:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:63:19:7A:27:2F:1A:78:DB:58:3F:EE:08:1F:62:D7:B9:DA:6F:88
X509v3 Authority Key Identifier:
keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33332e302f32342d3234203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:25:ec:b3:29:1f:1d:1a:e4:26:bd:53:89:a7:ba:d4:ae:98:
47:55:4b:1a:9a:0f:f7:2c:cc:a4:cb:4d:d6:86:0b:f9:2e:89:
7b:63:74:15:35:ce:03:74:e5:cd:92:8f:ad:ce:e2:ea:10:31:
31:c7:74:7f:96:b5:5a:e7:71:ea:cf:3b:75:e2:43:70:87:e8:
90:74:a2:a1:36:3e:f8:74:22:36:67:63:de:60:71:04:3e:ee:
18:12:0e:d8:f5:e4:2f:f3:ce:78:89:d1:24:4a:3a:f7:c5:1c:
a1:ba:5a:1e:f6:35:5c:93:52:6f:47:21:2f:e3:e2:b1:29:3c:
9d:c8:27:ca:e6:24:cd:52:3b:81:a9:a0:84:76:a3:e3:94:57:
b9:09:ca:83:b1:56:1e:08:a0:5d:0b:c4:60:cb:a6:e5:65:7b:
6d:9f:17:e1:34:13:12:99:af:a3:cc:3a:a8:5e:07:d5:4f:9c:
40:b8:44:1d:ca:22:98:a8:d1:a6:82:e4:b1:c2:a9:8b:2b:63:
46:1e:f4:f4:7e:5f:8b:97:9b:55:bb:be:a5:dc:f2:65:41:d0:
48:53:04:b0:05:54:75:c8:50:53:06:cb:f5:fc:9f:33:a7:ea:
da:cb:c9:78:41:a0:c5:28:a8:f7:fc:b5:91:74:f9:95:cd:bb:
fc:67:d0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org