Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32332d3233203d3e203238313931.roa
File: 3138392e39302e34302e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier: eh4ediNfq9yEvQOXa+3Y39+E7SfkplJT+PbZwrwu5mw=
Subject key identifier: D4:0D:C1:FD:C2:8D:29:5F:A4:20:FF:4B:A3:E2:A7:73:E5:D3:8A:BD
Certificate issuer: /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial: 4AD3D8D54DA6CEDCD01BC5C5F5C77CE551CE494F
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32332d3233203d3e203238313931.roa
Signing time: Wed 17 Apr 2024 11:42:35 +0000
ROA not before: Wed 17 Apr 2024 11:37:35 +0000
ROA not after: Wed 16 Apr 2025 11:42:35 +0000
asID: 28191
IP address blocks: 189.90.40.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d3:d8:d5:4d:a6:ce:dc:d0:1b:c5:c5:f5:c7:7c:e5:51:ce:49:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Validity
Not Before: Apr 17 11:37:35 2024 GMT
Not After : Apr 16 11:42:35 2025 GMT
Subject: CN=D40DC1FDC28D295FA420FF4BA3E2A773E5D38ABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c1:40:aa:14:d8:b2:24:6f:b9:29:b9:7d:e5:
dd:94:bb:74:49:ad:a6:6e:06:b3:1c:b8:35:c9:a2:
9f:4e:d3:12:66:96:f2:75:01:46:8e:32:1b:d2:82:
9a:92:5f:48:3a:89:7d:74:79:fa:72:3e:8c:c7:6d:
e8:ac:1d:3b:6b:0c:fd:e1:b6:8a:eb:6a:53:cc:67:
d0:eb:cb:ba:84:ab:bc:68:0d:00:db:8c:a3:34:43:
57:22:1b:d5:dc:28:03:c8:6e:e2:5e:5a:d7:f2:81:
f0:01:72:c8:3d:0a:84:14:8e:22:8b:5f:db:0d:9f:
dc:6d:41:90:97:ec:b7:63:dd:5e:af:4e:18:db:5e:
f2:ea:0f:f9:1b:e8:5e:1c:04:16:b9:bf:93:7f:df:
c7:31:cd:1a:44:d7:a3:6c:f0:99:3c:05:98:7d:2d:
bd:ab:ae:97:6a:4d:6c:c3:9b:05:a6:8c:75:a9:4c:
3f:de:d3:2e:68:3c:57:e0:17:25:2c:99:d7:32:45:
b2:9e:b6:11:d4:29:1a:53:34:30:dd:4e:2a:90:cb:
f4:8e:40:8b:5d:8a:cc:97:39:13:e1:46:cd:df:f0:
20:b4:44:9c:26:b2:10:bf:31:66:db:79:68:99:ab:
30:27:49:7d:35:8a:0e:f9:99:e0:1c:44:6c:ba:62:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0D:C1:FD:C2:8D:29:5F:A4:20:FF:4B:A3:E2:A7:73:E5:D3:8A:BD
X509v3 Authority Key Identifier:
keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32332d3233203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.40.0/23
Signature Algorithm: sha256WithRSAEncryption
07:33:ae:fa:19:22:c4:2f:d1:bf:03:6b:1b:c3:a4:34:10:65:
8c:ef:5d:32:a7:53:0a:8b:d0:69:ed:0f:f2:30:b4:b5:d0:c2:
b2:a4:13:b0:4a:b4:70:0b:55:62:f1:0a:32:55:36:cb:9f:7b:
7b:7e:c6:0d:01:b7:33:c3:b4:db:fe:95:17:58:8d:f2:35:09:
93:0a:2b:00:32:9d:a3:75:c3:ca:fc:d8:29:c1:91:bd:1b:99:
79:29:39:2a:83:15:c8:e1:de:2b:cb:06:bc:59:0b:f5:45:80:
01:c9:36:03:36:28:9b:21:d4:d1:47:b9:7d:ea:08:96:ba:8e:
f7:07:30:f9:9c:d7:96:78:d9:de:8d:6e:09:62:53:d3:88:fd:
48:8b:ea:95:0b:f3:a1:bc:fe:ea:54:83:7c:88:18:11:4e:6d:
d2:db:4a:13:ad:c0:16:eb:b3:81:e0:b4:71:52:16:53:53:cc:
3e:98:fe:9c:a2:99:7a:1b:00:4c:64:88:42:59:1b:1b:bb:d5:
48:45:a4:79:44:8d:dd:cd:20:35:a2:f8:40:30:57:ec:9e:34:
33:61:e4:87:c0:72:fa:40:3f:b2:34:5d:9c:00:91:5f:81:98:
85:3f:5e:02:7e:17:5a:c7:a8:57:86:20:93:8c:df:f5:5b:ac:
e4:5b:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org