Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33342e302f32332d3233203d3e203238313931.roa
File: 3138392e39302e33342e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier: BrBi080gvvK/PhFewuOHxHW9XHQ7LDW3EBQdTcfg60Q=
Subject key identifier: 52:F5:D7:D4:2B:52:6A:08:3E:CA:00:15:BE:C6:D1:45:F0:5A:7F:43
Certificate issuer: /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial: 59CBBF549144AECA9A77A289534640B4F3488919
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33342e302f32332d3233203d3e203238313931.roa
Signing time: Wed 17 Apr 2024 11:42:30 +0000
ROA not before: Wed 17 Apr 2024 11:37:30 +0000
ROA not after: Wed 16 Apr 2025 11:42:30 +0000
asID: 28191
IP address blocks: 189.90.34.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:cb:bf:54:91:44:ae:ca:9a:77:a2:89:53:46:40:b4:f3:48:89:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Validity
Not Before: Apr 17 11:37:30 2024 GMT
Not After : Apr 16 11:42:30 2025 GMT
Subject: CN=52F5D7D42B526A083ECA0015BEC6D145F05A7F43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:e5:7f:3d:ef:92:01:bd:9e:ae:db:b9:51:
1d:98:12:dd:01:b6:0d:3f:8f:8a:b6:60:28:ab:9d:
e1:ae:d7:34:4e:a9:0c:e9:d5:d6:eb:73:e8:db:a5:
cf:26:cd:3c:79:0b:05:b2:20:df:9c:c1:9d:a2:41:
79:59:72:4b:77:c4:f1:2e:ae:68:1e:1c:18:09:01:
3e:2b:99:bd:60:89:08:f9:03:dd:74:16:a5:d4:65:
fe:08:41:3b:f8:c6:6c:49:0b:4d:33:19:28:13:8b:
40:b2:ea:7e:05:d6:50:95:77:ab:7a:4b:65:68:0a:
0f:f4:53:55:09:c7:4b:fb:83:3a:88:e9:d6:1d:fe:
17:f3:19:bd:a8:ac:cb:6a:20:43:6d:5f:b5:19:4c:
44:ca:55:0c:7f:03:2e:b6:0f:18:06:cc:f7:22:d7:
03:f5:62:8b:a1:72:6f:ca:6e:83:a4:8b:e2:bf:07:
b4:e2:79:4c:fd:49:e6:7d:47:55:2d:a6:5a:be:3e:
4a:ee:94:97:9b:55:a0:1a:6d:78:4b:dc:37:e8:85:
57:22:ca:67:d7:7b:97:14:85:15:db:ed:5b:7d:c6:
ab:6d:bc:5e:4a:6c:fb:1f:83:45:ee:61:10:2a:18:
a2:b8:fc:d5:43:96:c5:d1:78:f5:bb:84:00:b8:19:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:D7:D4:2B:52:6A:08:3E:CA:00:15:BE:C6:D1:45:F0:5A:7F:43
X509v3 Authority Key Identifier:
keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33342e302f32332d3233203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.34.0/23
Signature Algorithm: sha256WithRSAEncryption
02:69:66:ae:06:10:44:7d:87:bb:b2:e0:5a:de:f2:3b:12:de:
18:c8:71:12:c2:9e:be:b5:1f:2e:b3:c7:24:a6:f2:cb:dc:44:
46:40:f3:7f:78:c9:2c:b4:d3:cf:34:63:67:a1:53:31:8b:23:
1e:a4:fe:ad:7a:ba:a8:35:77:b7:24:40:a1:a4:c2:c7:20:be:
56:d9:ab:05:77:59:82:c0:ae:04:06:33:5f:c9:68:ee:5c:5f:
b6:93:4c:52:1e:b7:a4:02:ca:44:3f:93:51:f5:3f:a6:5d:69:
bf:ad:e9:a0:26:06:cb:0d:25:a2:dc:b7:98:cf:d4:69:a7:c4:
e3:43:41:2f:d8:dc:87:b1:ca:f3:4a:67:c2:15:78:70:60:99:
4d:0a:e1:b8:08:ff:32:ff:3a:a9:d6:d6:26:2c:fb:5f:23:02:
61:42:72:b1:8d:14:f2:79:b6:7e:b8:bf:17:f5:a2:9a:33:d3:
ca:0c:7b:0b:28:43:09:73:fb:0f:c9:16:3b:bf:a3:9e:53:85:
3b:3f:27:0a:a6:3a:39:0c:dd:92:ee:0e:4e:fe:8f:91:3a:5e:
83:1b:73:ef:a2:4a:0e:53:a8:46:7c:b9:84:4a:e0:78:59:76:
73:3c:80:c6:7a:81:5d:b4:f9:ed:8b:61:87:be:77:17:f8:b8:
36:99:3e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org