Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32322d3234203d3e20323733343132.roa
File: 3230302e3139362e34302e302f32322d3234203d3e20323733343132.roa (raw, json)
Hash identifier: ECbU/PLdCnRkpQIr8wcgOmY7RhC4eaZzBprkUBT27+M=
Subject key identifier: E2:6C:3E:91:AE:13:AA:6C:91:C6:80:2C:5E:4F:D0:E4:EF:7B:45:E9
Certificate issuer: /CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Certificate serial: 2238A119F0BDE01FE88D40A16DEBD1D3C760A0B7
Authority key identifier: CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32322d3234203d3e20323733343132.roa
Signing time: Wed 17 Jan 2024 12:24:54 +0000
ROA not before: Wed 17 Jan 2024 12:19:54 +0000
ROA not after: Wed 15 Jan 2025 12:24:54 +0000
asID: 273412
IP address blocks: 200.196.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 00:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:38:a1:19:f0:bd:e0:1f:e8:8d:40:a1:6d:eb:d1:d3:c7:60:a0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Validity
Not Before: Jan 17 12:19:54 2024 GMT
Not After : Jan 15 12:24:54 2025 GMT
Subject: CN=E26C3E91AE13AA6C91C6802C5E4FD0E4EF7B45E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:31:29:94:20:f5:bf:65:73:81:e9:cc:9b:
3b:dd:22:95:69:99:dc:36:9a:e8:97:14:5f:21:86:
5b:4b:64:94:3c:cb:0f:15:d8:88:74:3e:fa:c9:36:
61:f4:cd:32:0a:49:45:24:59:9b:f4:a7:5a:fb:64:
fd:00:66:d6:3f:c8:dc:bb:9f:01:32:84:de:02:05:
6f:97:db:3c:51:f1:ef:bf:a5:87:9d:c8:5d:bd:69:
54:da:f3:36:47:2c:90:8b:54:8c:19:f0:19:1b:4c:
5d:ae:0a:b1:63:ea:e4:c9:e3:d1:f5:76:1e:0b:77:
e3:9d:a6:ca:52:a2:71:a4:86:90:d0:98:68:28:48:
c8:c8:e1:61:fe:13:1b:13:46:2a:2f:90:be:d9:2a:
c9:ba:4e:3b:1e:d2:07:e2:5e:fd:a8:94:cd:e0:46:
93:8c:3d:5b:cb:81:24:da:ca:ec:df:e7:16:b7:31:
a9:c7:ba:3b:5d:13:c6:29:52:e4:f5:b8:f4:cd:bf:
8c:cb:28:5d:63:6d:fc:12:bc:bf:93:e6:2d:70:c4:
13:24:b3:96:04:e7:e2:c2:3a:4c:55:45:d6:da:79:
c0:d3:00:c3:73:fe:34:1b:e4:ce:8d:08:42:c5:f9:
64:6d:e8:34:c1:2c:87:2b:67:8d:f4:21:ce:7b:8e:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6C:3E:91:AE:13:AA:6C:91:C6:80:2C:5E:4F:D0:E4:EF:7B:45:E9
X509v3 Authority Key Identifier:
keyid:CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32322d3234203d3e20323733343132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.196.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:75:72:b0:cc:25:01:a6:e9:9f:0d:12:b2:8e:6a:c9:45:e0:
38:7c:59:0f:8b:df:7f:88:a9:ac:bf:fa:91:c3:e2:82:dd:48:
00:d0:7b:bb:91:66:83:d7:c8:4b:7b:54:19:2e:98:4e:93:66:
c9:2c:1b:a5:b0:a6:c0:ee:c2:53:71:bd:78:8c:ca:f8:ad:c1:
32:07:23:ba:f8:75:fb:f7:ae:cf:e4:1d:e1:69:04:96:f7:03:
3c:be:8d:f7:2b:31:19:f4:8c:71:2b:eb:2e:94:28:5e:dd:e8:
e2:b0:c0:ab:80:60:15:ff:44:f3:3c:de:5f:c5:1d:7a:5f:f4:
01:93:d4:43:00:c1:f0:ed:4d:61:53:92:82:ea:1f:aa:fb:72:
49:5a:b4:dd:0b:b7:d2:da:8d:c9:5e:54:30:74:da:db:46:68:
37:89:f6:1e:77:2a:9f:5d:e4:54:2a:5c:5f:b0:f4:d2:22:59:
cb:76:9f:01:6e:00:21:98:80:30:5f:18:84:a8:ce:ba:cf:b2:
e5:67:62:c3:a0:26:ba:54:98:37:c0:e4:a5:46:1e:54:b8:c4:
f7:b5:01:3c:98:0f:b5:87:c5:6b:52:39:4a:c9:9d:2f:82:c1:
37:d4:4b:de:c5:5d:ff:23:81:30:80:43:53:53:02:56:cd:dc:
01:33:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 01:49:36 2024 by rpki-client on console-ams.rpki-client.org