Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34322e302f32332d3234203d3e20323633333437.roa
File: 3139312e33372e34322e302f32332d3234203d3e20323633333437.roa (raw, json)
Hash identifier: 0MHUpeQV8ZahyTB137BlzV00/6YreFrhW8IKS0955/k=
Subject key identifier: 3B:74:D5:3C:BA:1F:23:F9:E0:4B:3A:2B:1E:D1:74:96:D8:D8:6A:65
Certificate issuer: /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial: 0826D65B27E80237B8BDA0AD5C686B0B996612F4
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34322e302f32332d3234203d3e20323633333437.roa
Signing time: Wed 11 Sep 2024 16:03:21 +0000
ROA not before: Wed 11 Sep 2024 15:58:21 +0000
ROA not after: Wed 10 Sep 2025 16:03:21 +0000
asID: 263347
IP address blocks: 191.37.42.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 15:46:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:26:d6:5b:27:e8:02:37:b8:bd:a0:ad:5c:68:6b:0b:99:66:12:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Validity
Not Before: Sep 11 15:58:21 2024 GMT
Not After : Sep 10 16:03:21 2025 GMT
Subject: CN=3B74D53CBA1F23F9E04B3A2B1ED17496D8D86A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:7e:86:ae:8c:53:a0:59:6d:e7:a4:80:df:
11:de:f4:d3:5f:8c:59:78:16:db:6b:c6:60:74:10:
94:76:90:ac:6b:48:d0:e2:c7:15:ab:b9:d2:21:63:
b3:c9:ae:68:12:c4:a5:50:3e:70:f0:cf:d5:19:23:
18:d7:4e:13:8b:a1:22:77:f4:09:86:86:90:81:9f:
e3:26:5a:10:d8:c1:ae:1f:b6:d5:8d:1d:77:20:13:
be:dc:55:78:51:90:00:d7:75:d7:9c:bc:0c:a7:78:
b7:aa:f3:c6:34:6a:fe:05:db:97:ce:99:5c:5d:35:
4e:95:cc:14:2a:41:1d:21:b3:13:a1:d1:89:83:64:
ef:8d:00:80:a1:9d:71:78:86:1b:0d:77:93:39:93:
f4:79:7c:57:dc:2b:58:3b:3b:eb:fd:cc:b2:e3:75:
3b:3d:7e:34:08:27:1e:ca:59:4f:95:78:5f:7f:75:
57:e0:80:9a:1f:66:a5:14:ba:29:0f:c7:f5:5f:c5:
f2:9c:0d:79:6b:0c:ad:99:a8:f1:12:53:94:a8:e9:
42:28:e5:68:ce:38:bb:3b:b8:cc:46:68:9e:8f:08:
9c:4d:a9:45:40:4c:57:d5:3e:3a:fb:ee:b8:75:e3:
84:4f:b6:15:6a:8e:9d:d0:9b:aa:3c:16:7b:04:8b:
65:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:74:D5:3C:BA:1F:23:F9:E0:4B:3A:2B:1E:D1:74:96:D8:D8:6A:65
X509v3 Authority Key Identifier:
keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34322e302f32332d3234203d3e20323633333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.42.0/23
Signature Algorithm: sha256WithRSAEncryption
52:c8:6c:2d:0f:44:ee:d4:3e:3c:9e:65:e3:fd:7a:41:63:be:
f5:c5:bf:bb:2e:ff:ff:8c:8a:82:4e:8f:b1:83:6a:10:5f:e3:
9c:f5:71:93:c0:97:7b:2b:b5:1a:9b:01:f3:33:f8:96:54:83:
83:32:92:ae:b9:9f:36:71:83:6c:51:cc:38:2a:97:b1:a1:b0:
9d:18:4f:bd:db:29:02:3a:76:91:5d:cd:5c:d1:af:ba:7a:dd:
ec:e1:76:25:97:b8:e9:3f:ea:17:33:15:5f:31:22:67:1b:ba:
22:23:70:47:06:dc:5c:da:88:cc:98:bc:7e:39:30:c8:08:0a:
70:b8:38:99:5c:aa:50:63:e7:2a:28:65:37:05:04:10:da:e1:
01:02:c1:7d:60:c3:80:11:f0:53:86:08:c9:6a:1a:3c:c8:1c:
a5:da:f1:bd:30:22:f6:49:37:aa:73:3e:30:27:f0:25:fa:22:
79:27:d5:b4:6d:a9:41:eb:51:74:00:7c:db:44:fa:84:56:d4:
48:fc:3b:64:d1:5a:d3:2a:70:1f:10:39:4d:d3:c5:7f:16:40:
c9:5a:82:3d:df:28:fb:82:e8:a8:cc:56:de:aa:68:7c:56:93:
aa:e4:8c:0a:16:ab:fa:d6:f8:8a:a4:03:ba:08:e7:7d:f9:fb:
fa:b2:54:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 20:13:11 2024 by rpki-client on console-fra.rpki-client.org