Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32322d3232203d3e203238313931.roa
File: 3138392e39302e34302e302f32322d3232203d3e203238313931.roa (raw, json)
Hash identifier: JSr+1S+8ksTDfjs87FDEUcQhxoDgkTpikOzdd+GHrE8=
Subject key identifier: C3:F3:B9:61:C2:49:5F:EC:31:41:CA:40:E1:63:83:C5:0D:13:65:99
Certificate issuer: /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial: 3AD4D9E2B461471C2624633C3E71DA4848CF7238
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32322d3232203d3e203238313931.roa
Signing time: Wed 17 Apr 2024 11:42:34 +0000
ROA not before: Wed 17 Apr 2024 11:37:34 +0000
ROA not after: Wed 16 Apr 2025 11:42:34 +0000
asID: 28191
IP address blocks: 189.90.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d4:d9:e2:b4:61:47:1c:26:24:63:3c:3e:71:da:48:48:cf:72:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Validity
Not Before: Apr 17 11:37:34 2024 GMT
Not After : Apr 16 11:42:34 2025 GMT
Subject: CN=C3F3B961C2495FEC3141CA40E16383C50D136599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:28:7c:8f:be:b2:e1:61:ed:6d:78:b1:4f:
42:2b:65:a6:67:37:0a:d8:a9:eb:e1:5d:c7:8b:15:
79:24:ad:43:6e:4d:42:a8:09:16:83:7c:90:ce:aa:
62:7f:1f:ed:17:73:67:e3:00:c9:49:c5:7a:22:1e:
c7:1c:9e:c0:87:08:9c:e2:49:0c:32:24:42:25:50:
07:96:5c:54:16:2e:63:ef:bd:22:90:6d:f5:f8:a7:
82:ea:e6:e2:98:7d:55:6d:1b:69:63:21:ab:03:5b:
9f:da:d4:a6:12:5b:fb:d6:24:55:bc:f2:62:c5:0a:
ca:77:2f:e0:42:82:ac:76:ec:53:75:7e:0b:a8:c5:
70:75:fd:44:d9:d9:85:2c:99:10:cf:fd:25:04:25:
95:e7:f9:42:06:dc:9a:09:f1:98:21:fb:96:ab:52:
dc:60:26:5a:be:e7:e6:cb:0d:e5:2a:10:22:11:de:
80:26:a1:bb:ab:3c:44:e0:08:c6:b6:8b:dc:3e:7f:
ca:cd:e1:89:08:14:a4:e9:0c:e6:d8:d3:de:28:58:
80:0e:94:99:ec:5c:2e:ea:bd:8b:5a:fa:c6:af:01:
a8:f9:73:01:f9:21:68:27:69:dd:27:09:48:2c:b9:
9e:c5:7c:c5:cd:d9:f3:1d:f8:4a:78:35:73:0b:c7:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F3:B9:61:C2:49:5F:EC:31:41:CA:40:E1:63:83:C5:0D:13:65:99
X509v3 Authority Key Identifier:
keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32322d3232203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.40.0/22
Signature Algorithm: sha256WithRSAEncryption
04:42:72:3b:de:d0:f0:e2:0c:3c:2e:12:11:80:30:b6:44:e8:
de:ca:b4:68:06:79:48:4f:a6:df:a0:15:cd:35:42:6e:d9:3b:
cd:bb:c0:be:45:19:e9:0c:1c:f2:86:cd:69:6d:c4:d8:ac:c6:
e1:1a:02:d9:93:48:ce:c6:aa:b7:4e:33:fb:a1:f2:d5:b5:9b:
a2:0d:62:ed:5d:60:eb:65:1f:64:55:65:05:03:6a:37:8b:dc:
4a:13:2a:1f:d5:8f:1a:02:32:d9:7b:09:39:b0:3e:40:a9:fb:
a2:40:a3:60:7d:6d:ee:c1:aa:c5:e0:d8:4f:51:64:9b:68:43:
22:30:39:1e:1d:ed:9f:f7:5a:b4:54:2f:eb:54:67:c6:b7:31:
2e:c9:e1:b6:b2:32:cc:ed:62:04:65:6b:e8:e8:df:1a:37:d2:
8f:15:c4:f6:cb:66:0b:14:aa:1f:c2:24:ed:ed:9a:49:32:72:
43:7d:8e:ec:94:19:94:12:91:46:ec:b2:b6:a0:ac:95:d6:33:
1b:5e:d5:4b:a1:52:d5:fc:50:f7:b2:92:be:16:e1:32:2a:4d:
61:f3:68:66:73:f6:68:db:5a:01:3f:85:fa:95:e3:66:42:64:
cb:47:30:41:3b:ed:6e:c0:ba:16:38:10:71:c8:9a:0d:01:29:
61:f2:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:40:31 2024 by rpki-client on console-fra.rpki-client.org