Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3138392e38342e38382e302f32312d3234203d3e203238333636.roa
File: 3138392e38342e38382e302f32312d3234203d3e203238333636.roa (raw, json)
Hash identifier: /y9nxzpupq2pl2JaxTv4cmZ80hWciqUAAUuRMtKvNk4=
Subject key identifier: 36:ED:3D:AC:F4:AE:6F:C0:9C:D5:DF:D6:DE:CC:6B:27:7E:09:07:F0
Certificate issuer: /CN=1031D5671A47D195D84CA481A448830A4ADFCE7E
Certificate serial: 41D3B2B5547EE299297BF783A1C06BACDDB4188A
Authority key identifier: 10:31:D5:67:1A:47:D1:95:D8:4C:A4:81:A4:48:83:0A:4A:DF:CE:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3138392e38342e38382e302f32312d3234203d3e203238333636.roa
Signing time: Tue 23 Jul 2024 23:21:54 +0000
ROA not before: Tue 23 Jul 2024 23:16:54 +0000
ROA not after: Tue 22 Jul 2025 23:21:54 +0000
asID: 28366
IP address blocks: 189.84.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jul 2024 13:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d3:b2:b5:54:7e:e2:99:29:7b:f7:83:a1:c0:6b:ac:dd:b4:18:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1031D5671A47D195D84CA481A448830A4ADFCE7E
Validity
Not Before: Jul 23 23:16:54 2024 GMT
Not After : Jul 22 23:21:54 2025 GMT
Subject: CN=36ED3DACF4AE6FC09CD5DFD6DECC6B277E0907F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:8e:27:38:f4:b0:54:e2:60:95:ae:e8:09:
5d:6e:8c:08:b9:a3:24:e6:73:ae:63:4f:46:ba:f4:
ac:11:a5:a7:c4:82:29:e1:d1:6a:c5:35:75:7e:39:
e1:c9:6f:1d:b3:dd:08:7b:9e:8d:a7:d0:16:25:a9:
00:6c:ce:5b:c0:10:28:37:44:aa:e9:0b:dd:90:01:
ed:cc:61:a8:26:db:8c:e9:a6:2c:20:32:7b:e0:3d:
ca:2e:84:7e:d5:c4:8f:fd:ce:54:ea:2d:c1:b9:73:
f7:a3:f3:a0:1d:a9:83:ba:ce:f3:ac:04:77:20:de:
ed:ee:be:65:e0:cd:13:e5:24:8d:6e:bd:46:32:8d:
32:bc:a7:95:7d:fe:93:0b:17:a0:31:7a:d5:16:a8:
55:b5:84:5b:0c:0f:11:d0:ea:80:e5:50:b3:d8:d0:
83:89:78:ce:a7:99:91:88:ab:0d:fe:6a:ca:e2:36:
21:3e:cd:14:26:87:01:05:eb:f6:b8:2d:e1:3c:37:
10:11:c3:4f:47:08:06:3d:9f:2a:75:98:63:f1:5e:
db:81:1e:58:1b:b9:6e:b1:a7:2f:ed:02:3b:2b:6b:
9f:14:00:58:cc:77:fb:de:80:15:e6:22:b1:5b:d4:
33:60:d8:bb:e2:5a:32:df:e1:93:b8:9b:48:13:f7:
7e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:ED:3D:AC:F4:AE:6F:C0:9C:D5:DF:D6:DE:CC:6B:27:7E:09:07:F0
X509v3 Authority Key Identifier:
keyid:10:31:D5:67:1A:47:D1:95:D8:4C:A4:81:A4:48:83:0A:4A:DF:CE:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/1031D5671A47D195D84CA481A448830A4ADFCE7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3138392e38342e38382e302f32312d3234203d3e203238333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.84.88.0/21
Signature Algorithm: sha256WithRSAEncryption
00:a3:8c:2b:b8:9e:5e:e2:03:27:ca:c0:24:63:b5:0b:3a:68:
7c:b1:1a:d8:d1:65:93:ec:71:35:69:d1:b6:ad:b1:8c:26:87:
9f:be:27:ff:db:09:9f:b5:65:30:47:a4:ab:ab:4c:f1:4e:19:
16:f4:c1:6f:2a:b9:40:77:1b:4f:14:61:39:d7:01:22:db:31:
08:32:9a:95:15:7d:9d:8e:98:5b:58:ca:4f:88:9a:c1:71:8c:
e4:9e:7c:78:eb:1c:68:97:00:39:1d:a3:d1:6f:2a:77:76:c6:
02:3b:9e:9c:cf:bf:ad:2d:0f:25:2e:1a:c0:61:8c:2b:89:8e:
c4:b0:9e:d6:ad:41:7f:a0:6a:6d:ee:16:2f:c2:50:03:0c:ce:
b0:49:36:f3:91:cf:f3:af:a1:1b:50:10:76:a1:6c:a5:66:33:
66:05:0f:01:fa:41:d2:1a:84:19:ed:d8:34:97:93:7e:9b:33:
cb:00:0f:05:b3:ad:bc:fc:7a:b2:09:f9:c5:fe:d8:34:ab:6b:
77:8d:c8:33:71:58:43:d1:fd:1e:df:32:21:3e:85:43:d3:c6:
14:e6:e1:b9:6b:83:c8:d8:75:7a:48:d0:4d:d1:59:f1:68:66:
c7:8f:b1:15:fb:1f:15:3d:cf:ca:6f:59:5d:28:01:47:54:c9:
6f:e4:19:84
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQdOytVR+4pkpe/eDocBrrN20GIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAzMUQ1NjcxQTQ3RDE5NUQ4NENBNDgxQTQ0ODgzMEE0
QURGQ0U3RTAeFw0yNDA3MjMyMzE2NTRaFw0yNTA3MjIyMzIxNTRaMDMxMTAvBgNV
BAMTKDM2RUQzREFDRjRBRTZGQzA5Q0Q1REZENkRFQ0M2QjI3N0UwOTA3RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaNY4nOPSwVOJgla7oCV1ujAi5
oyTmc65jT0a69KwRpafEginh0WrFNXV+OeHJbx2z3Qh7no2n0BYlqQBszlvAECg3
RKrpC92QAe3MYagm24zppiwgMnvgPcouhH7VxI/9zlTqLcG5c/ej86AdqYO6zvOs
BHcg3u3uvmXgzRPlJI1uvUYyjTK8p5V9/pMLF6AxetUWqFW1hFsMDxHQ6oDlULPY
0IOJeM6nmZGIqw3+asriNiE+zRQmhwEF6/a4LeE8NxARw09HCAY9nyp1mGPxXtuB
HlgbuW6xpy/tAjsra58UAFjMd/vegBXmIrFb1DNg2LviWjLf4ZO4m0gT937/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUNu09rPSub8Cc1d/W3sxrJ34JB/AwHwYDVR0j
BBgwFoAUEDHVZxpH0ZXYTKSBpEiDCkrfzn4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJicGMxdmQzbWlWZ250dVdMb2NRTUQ1YnhYRWhxaW9hZmlneTZ0TFpi
MkIvMC8xMDMxRDU2NzFBNDdEMTk1RDg0Q0E0ODFBNDQ4ODMwQTRBREZDRTdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwMzFENTY3MUE0N0QxOTVE
ODRDQTQ4MUE0NDg4MzBBNEFERkNFN0UuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliYnBjMXZkM21pVmdudHVXTG9jUU1ENWJ4WEVocWlvYWZpZ3k2dExaYjJCLzAv
MzEzODM5MmUzODM0MmUzODM4MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODMz
MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA71UWDANBgkqhkiG9w0BAQsFAAOCAQEAAKOMK7ieXuID
J8rAJGO1CzpofLEa2NFlk+xxNWnRtq2xjCaHn74n/9sJn7VlMEekq6tM8U4ZFvTB
byq5QHcbTxRhOdcBItsxCDKalRV9nY6YW1jKT4iawXGM5J58eOscaJcAOR2j0W8q
d3bGAjuenM+/rS0PJS4awGGMK4mOxLCe1q1Bf6Bqbe4WL8JQAwzOsEk285HP86+h
G1AQdqFspWYzZgUPAfpB0hqEGe3YNJeTfpszywAPBbOtvPx6sgn5xf7YNKtrd43I
M3FYQ9H9Ht8yIT6FQ9PGFObhuWuDyNh1ekjQTdFZ8Whmx4+xFfsfFT3Pym9ZXSgB
R1TJb+QZhA==
-----END CERTIFICATE-----
Generated at Wed Jul 24 19:37:42 2024 by rpki-client on console-ams.rpki-client.org