Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32312d3231203d3e20323632373932.roa
File: 3230312e37362e39362e302f32312d3231203d3e20323632373932.roa (raw, json)
Hash identifier: rygUOdu8xNced3jOpHvodvCPhqZL5XowEdbnuEfe5fc=
Subject key identifier: BF:F6:38:5A:58:9F:F3:52:69:72:4F:7C:3A:D2:84:C5:A1:D7:03:A1
Certificate issuer: /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial: 1625BBA9AA6341CEA7C7C5CD23C05600B93A681F
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32312d3231203d3e20323632373932.roa
Signing time: Thu 04 Apr 2024 11:26:04 +0000
ROA not before: Thu 04 Apr 2024 11:21:04 +0000
ROA not after: Thu 03 Apr 2025 11:26:04 +0000
asID: 262792
IP address blocks: 201.76.96.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 30 Sep 2024 23:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:25:bb:a9:aa:63:41:ce:a7:c7:c5:cd:23:c0:56:00:b9:3a:68:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Validity
Not Before: Apr 4 11:21:04 2024 GMT
Not After : Apr 3 11:26:04 2025 GMT
Subject: CN=BFF6385A589FF35269724F7C3AD284C5A1D703A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:a7:6d:c9:37:f9:3a:50:f2:fc:a5:43:70:
be:d9:64:70:16:9d:93:24:38:3d:ec:78:3d:49:ab:
99:29:a5:b8:35:f6:f8:52:b1:e7:f8:01:a7:b6:b7:
bc:e7:c7:15:de:e5:89:00:9f:cf:47:a4:77:12:0a:
1f:e8:55:ca:1c:5a:37:14:25:3f:98:87:25:38:55:
e2:83:a1:ef:4b:84:1e:30:2a:40:b4:00:c6:d5:97:
69:2c:8b:c2:25:e9:66:69:20:b3:d5:74:b7:f1:43:
77:70:e2:b9:81:a1:fa:1e:25:ca:3f:75:70:38:e7:
13:a2:2e:c7:12:da:07:bd:1a:91:bb:b1:a7:0b:5c:
8c:d9:42:c8:b3:23:bc:b1:30:15:3d:bc:20:07:a6:
b7:2a:1d:0a:8e:5c:9d:64:bd:88:88:a2:96:db:22:
69:d0:c1:0e:52:9e:4c:d5:d6:81:92:fd:3f:a8:00:
dd:4e:b7:df:32:b3:c4:a9:32:92:c3:65:13:de:1d:
74:55:48:10:69:f1:5c:c7:47:ae:6f:6c:32:52:5f:
5e:bc:c5:07:db:25:f5:66:68:2a:4e:a4:57:cb:3e:
e8:04:e7:a3:8d:c3:35:95:ab:87:01:b2:6f:cf:ab:
5a:b2:3c:f2:90:a2:bb:e4:67:80:8b:ec:c0:35:fd:
f1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F6:38:5A:58:9F:F3:52:69:72:4F:7C:3A:D2:84:C5:A1:D7:03:A1
X509v3 Authority Key Identifier:
keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32312d3231203d3e20323632373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.76.96.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:c0:47:b0:a7:47:01:66:46:09:9b:3d:90:8f:a9:cf:1b:df:
22:95:7b:55:d8:c0:ae:46:8e:ed:82:24:07:66:3e:af:d4:af:
54:46:9b:32:db:12:9a:5b:9d:d1:b2:1d:9f:ca:2e:14:2d:80:
bf:03:1b:5e:ab:db:a7:7c:81:56:37:6b:73:5a:0c:83:01:aa:
c7:4b:42:f2:ff:0e:a8:4f:81:00:3a:84:b7:9c:32:a7:3b:73:
07:13:f6:c1:41:e4:87:42:68:0c:8c:72:d1:a6:1f:6b:7f:cc:
52:a8:82:8a:8d:db:90:73:90:fe:25:41:84:c4:d2:03:9c:b9:
60:80:7b:88:66:72:5f:0f:c7:ee:61:aa:75:b8:be:5d:20:0e:
3a:3b:a1:0f:aa:9c:54:0f:94:d3:d7:26:59:9a:76:4b:5f:53:
31:8a:cb:5c:a0:71:7b:e9:7c:cf:10:d5:1a:86:b3:a2:8b:e2:
74:5e:38:6c:00:03:b5:75:8a:41:e3:50:b4:0d:24:1e:88:c7:
12:78:8f:1f:81:14:24:bd:64:4d:dc:ec:b6:fe:18:00:b1:e3:
e0:4f:28:25:82:59:70:84:e2:0e:d6:be:4a:ce:af:21:47:36:
33:3b:0c:23:b2:84:ea:1d:49:15:f9:1a:ce:81:5d:5e:c3:5d:
b7:69:02:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 00:23:33 2024 by rpki-client on console-ams.rpki-client.org