Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34362e302f32332d3233203d3e203238313931.roa
File: 3138392e39302e34362e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier: QPFGC+GoM6DU69fnOK+lEwgJVjRYD5VwIwyUqdlT87k=
Subject key identifier: 11:42:D1:61:29:CD:F4:60:5F:F1:B8:C7:87:A2:3B:49:DD:FE:39:BD
Certificate issuer: /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial: 230350AD6FACAF19639EF717CDFFC7BEDC597EFA
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34362e302f32332d3233203d3e203238313931.roa
Signing time: Wed 17 Apr 2024 11:42:33 +0000
ROA not before: Wed 17 Apr 2024 11:37:33 +0000
ROA not after: Wed 16 Apr 2025 11:42:33 +0000
asID: 28191
IP address blocks: 189.90.46.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:03:50:ad:6f:ac:af:19:63:9e:f7:17:cd:ff:c7:be:dc:59:7e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Validity
Not Before: Apr 17 11:37:33 2024 GMT
Not After : Apr 16 11:42:33 2025 GMT
Subject: CN=1142D16129CDF4605FF1B8C787A23B49DDFE39BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:a4:19:af:cb:cd:e2:7a:de:c9:1d:fc:66:
63:ff:b2:fa:4f:18:8f:82:29:53:9a:53:8e:f2:3a:
de:50:b7:9c:2d:16:16:dc:e3:f2:3d:e8:94:24:df:
4a:c1:c5:b6:9e:fc:19:b9:9e:8b:3c:83:4e:a4:70:
57:86:14:24:e8:c9:aa:a5:17:79:84:ea:ff:7e:03:
82:b2:f3:1f:37:4d:0c:5f:bc:61:b3:91:ce:bd:8e:
67:db:25:f2:20:30:50:62:dc:fa:91:8c:5d:3d:38:
ec:de:b7:65:ce:46:e2:60:56:fe:38:f7:cf:79:4e:
f0:28:21:88:f2:3b:ec:f0:00:6d:23:aa:28:07:c0:
4b:f4:0b:35:e7:1f:85:4d:62:02:a7:52:59:ec:68:
51:a7:01:06:53:14:32:10:50:a9:6a:53:ca:92:0c:
0e:7c:1d:7b:0b:ee:33:e7:52:23:11:f6:11:26:08:
3d:47:0d:8d:b9:1a:c2:33:2d:75:2d:c4:e7:0c:fb:
b8:33:a4:a6:88:f0:f5:1c:8e:35:c8:3a:a6:00:70:
87:64:be:d1:eb:9a:b4:17:29:ab:54:3c:52:d2:9c:
26:c0:9c:6c:69:6d:cc:41:7a:d1:3c:e6:04:a1:87:
1c:b7:54:28:04:05:0d:88:d5:c0:e2:66:6c:a7:e0:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:42:D1:61:29:CD:F4:60:5F:F1:B8:C7:87:A2:3B:49:DD:FE:39:BD
X509v3 Authority Key Identifier:
keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34362e302f32332d3233203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.46.0/23
Signature Algorithm: sha256WithRSAEncryption
50:bc:64:0c:c1:5b:fc:0b:a3:99:ca:d2:a8:97:ff:e1:1e:c6:
3c:5d:92:c5:30:35:4f:cd:c7:ec:c6:d4:42:79:1f:89:18:59:
6d:2a:54:e8:a5:e1:53:9f:80:fc:40:45:f4:6d:5e:d2:ea:e8:
3c:44:7f:76:6f:43:0d:55:65:15:5f:81:a7:9b:83:20:5d:5f:
ba:c5:45:1e:4e:45:39:d4:b8:8f:b2:4b:40:60:1f:34:94:98:
87:f7:b6:62:7e:7b:70:4b:2c:12:73:8f:9f:5b:a0:01:6d:31:
60:e2:20:3b:84:28:16:de:73:58:c3:5a:3b:94:0f:f4:5e:65:
bd:97:69:0a:2e:b0:36:a9:4d:cf:77:1f:ee:57:48:8e:64:bb:
84:66:25:f2:0b:40:41:42:46:76:5f:1e:2b:50:f8:17:8f:df:
fe:72:15:50:91:c1:98:6c:bd:e2:83:4b:6c:60:0d:9d:4c:45:
ec:b2:ca:10:09:38:53:41:37:fa:85:af:c4:3e:de:77:ae:23:
1b:03:b3:0d:8e:46:81:43:ef:86:5c:fa:3c:44:cb:58:ab:4e:
17:37:9c:20:b6:5a:1b:ab:b2:b0:44:2a:78:b2:62:b8:67:cf:
7c:45:9e:05:8e:37:ae:72:34:e2:ce:b6:c2:67:d0:21:ec:cc:
a2:4f:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org