Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32302d3234203d3e203533303532.roa
File: 3138372e38342e33322e302f32302d3234203d3e203533303532.roa (raw, json)
Hash identifier: cu9bsbMCn7vAFwPxRwXcGaRJ0III090yBz940ea1twM=
Subject key identifier: 0F:43:71:B9:F7:05:17:41:82:A2:22:05:86:25:48:7B:65:DE:61:75
Certificate issuer: /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial: 4F9A18B04F4310DEEBCF0050B08DA10F061A96E5
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32302d3234203d3e203533303532.roa
Signing time: Tue 06 Aug 2024 17:28:01 +0000
ROA not before: Tue 06 Aug 2024 17:23:01 +0000
ROA not after: Tue 05 Aug 2025 17:28:01 +0000
asID: 53052
IP address blocks: 187.84.32.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:9a:18:b0:4f:43:10:de:eb:cf:00:50:b0:8d:a1:0f:06:1a:96:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Validity
Not Before: Aug 6 17:23:01 2024 GMT
Not After : Aug 5 17:28:01 2025 GMT
Subject: CN=0F4371B9F705174182A222058625487B65DE6175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:cf:46:85:27:a3:fd:1a:49:a5:c0:d5:69:
b9:eb:66:53:d4:00:12:b8:c1:73:e8:a6:92:cd:76:
e4:e5:6f:33:62:c3:e1:f0:36:f9:92:2e:d1:eb:ae:
a8:d4:83:b4:fa:dc:27:f2:ad:7e:68:31:7b:23:f7:
8b:49:2b:b8:bc:2c:4b:9d:2a:10:9f:3e:9e:30:67:
ad:34:25:eb:cf:62:e3:77:f8:e0:a6:35:8d:1f:a1:
60:a2:6c:a7:0b:19:2c:5e:69:21:65:87:73:dd:f4:
56:27:b2:e0:3b:c9:dd:3a:e7:41:dc:f4:92:8b:12:
49:84:90:1b:0e:ca:92:32:4b:f6:4b:b5:c1:81:78:
97:7d:5a:21:61:80:10:d7:7c:1a:c2:ff:82:14:7a:
1f:f3:cc:e3:38:87:73:e7:c2:70:f4:82:e7:97:93:
bd:25:8d:f6:f8:f1:00:63:47:13:a0:5b:d4:97:03:
19:3d:02:0b:d4:0e:20:0c:66:22:21:0a:11:68:77:
53:12:01:64:90:f6:f9:7b:b5:93:06:c5:66:e4:15:
e0:6f:fe:98:18:ee:03:9a:38:1d:50:3b:02:85:90:
b2:90:27:42:dc:ec:8d:26:20:f2:2a:fb:a0:1e:28:
2c:fa:3b:b3:b0:28:10:61:b0:2a:b4:2d:b3:ae:a5:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:43:71:B9:F7:05:17:41:82:A2:22:05:86:25:48:7B:65:DE:61:75
X509v3 Authority Key Identifier:
keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32302d3234203d3e203533303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.84.32.0/20
Signature Algorithm: sha256WithRSAEncryption
75:07:08:84:bb:49:29:dc:ca:1f:48:8c:9c:47:db:06:5f:da:
74:15:8b:2d:95:57:f9:bb:11:18:f3:ca:85:e2:bd:49:aa:e5:
be:8c:1b:b6:a9:1f:a4:36:7b:38:f3:ca:ca:9b:68:56:3c:f3:
58:dd:bf:74:6f:58:f0:f1:e0:c8:4f:b2:41:53:2a:26:0a:b9:
72:41:cf:dd:41:fb:0b:55:2a:6c:c0:b0:d1:cf:28:84:b0:2d:
61:70:27:77:fc:48:e0:fd:c9:d6:fe:f8:a7:e5:c3:d1:12:29:
b3:d6:4d:b4:50:78:d5:a5:2a:09:bd:9e:1c:17:ae:0e:0c:4f:
48:bb:b2:9a:86:21:89:6e:4f:bd:f4:9d:ac:26:9b:92:06:c2:
1e:91:66:4f:f6:fc:6c:ff:5c:d8:9b:8f:d9:5e:77:56:07:e4:
e1:eb:5b:16:88:5f:96:8d:6c:80:a1:a8:10:23:e6:4b:a8:91:
08:75:25:1a:bd:20:73:19:9f:69:de:b8:83:17:ec:dc:48:06:
b5:b1:ad:17:74:e4:1e:fc:c6:5c:04:7e:34:28:33:39:94:1b:
f2:92:cd:bc:45:c7:a6:ad:5a:4e:f0:59:b7:67:6f:a5:61:04:
ef:82:c1:e3:c7:6d:10:0a:f9:0b:10:26:4e:e1:5c:3e:47:c9:
b4:f3:c7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 20:13:07 2024 by rpki-client on console-ams.rpki-client.org