Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3232203d3e20323633383430.roa
File: 3133382e3138352e3132342e302f32322d3232203d3e20323633383430.roa (raw, json)
Hash identifier: GiBawAchSIydbeL7Ly2+9aPH06Et2VujDn0nJnU5zaE=
Subject key identifier: C3:15:D5:DD:D7:E3:94:E8:81:3B:A7:66:3A:CA:6F:84:B5:66:7C:D1
Certificate issuer: /CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
Certificate serial: 248D81AC792FD6E05ECE6ED41B6E5FAB0D2F5704
Authority key identifier: B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3232203d3e20323633383430.roa
Signing time: Tue 28 May 2024 14:40:17 +0000
ROA not before: Tue 28 May 2024 14:35:17 +0000
ROA not after: Tue 27 May 2025 14:40:17 +0000
asID: 263840
IP address blocks: 138.185.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 18 Jun 2024 14:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8d:81:ac:79:2f:d6:e0:5e:ce:6e:d4:1b:6e:5f:ab:0d:2f:57:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
Validity
Not Before: May 28 14:35:17 2024 GMT
Not After : May 27 14:40:17 2025 GMT
Subject: CN=C315D5DDD7E394E8813BA7663ACA6F84B5667CD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:f6:f1:f4:09:92:f6:12:48:14:e3:94:93:
bb:8a:03:44:05:58:8d:9d:bc:c5:a8:a4:0f:f7:5d:
2e:8e:91:1b:2f:14:41:b3:f3:b9:bd:4a:dc:33:8b:
d3:58:cc:81:80:0e:35:60:e2:ee:c3:87:8e:38:86:
e2:72:be:d1:36:3b:5e:cd:89:ee:ad:9b:5c:49:1a:
1a:39:e0:3b:2b:69:1c:4e:9b:15:46:3d:a3:ac:79:
62:16:dc:60:48:31:d9:d0:cc:25:a5:18:07:da:40:
56:c2:25:16:e8:a9:c5:b1:52:92:a2:20:c8:91:e3:
d1:8f:73:9c:bb:c1:f9:2f:d9:de:ac:82:a1:25:17:
99:85:34:30:12:81:f7:0e:a3:23:85:91:90:94:37:
90:1f:b8:27:97:61:aa:d3:0c:1d:c0:16:b7:dc:f1:
a0:dc:2b:70:e8:f6:d3:54:73:78:34:5d:f3:85:79:
02:7e:1a:07:28:a7:1d:4c:e4:73:12:a1:5d:ca:20:
98:ea:e7:ef:86:f7:50:61:56:27:86:48:ff:c6:ed:
b7:40:da:81:89:68:d5:47:9a:8a:2a:3d:1b:53:ec:
0c:06:40:e5:27:97:3f:96:75:4b:29:58:a4:b3:a2:
10:fe:a7:ce:57:51:e1:16:25:7c:d2:9f:dc:93:20:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:15:D5:DD:D7:E3:94:E8:81:3B:A7:66:3A:CA:6F:84:B5:66:7C:D1
X509v3 Authority Key Identifier:
keyid:B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3232203d3e20323633383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.124.0/22
Signature Algorithm: sha256WithRSAEncryption
71:7d:f8:00:3c:60:93:6e:5f:14:1e:54:2d:8f:29:c8:11:12:
77:32:cc:d2:1c:b9:d8:cf:cd:16:82:e6:cd:d6:b6:94:5c:49:
f8:03:52:ec:f1:36:c5:16:83:87:19:43:5e:28:4b:38:1f:25:
f8:a6:42:bb:9c:1c:76:cb:98:c3:d8:98:6c:a8:3e:e0:2e:cd:
c3:dd:b0:d5:fb:d1:d5:d6:cb:ed:0d:ff:d1:89:09:61:55:7d:
9b:12:48:9f:95:61:5c:38:d4:a5:79:33:13:df:a1:5e:9a:02:
3d:7a:1f:8c:2d:5a:2a:0d:50:bc:e3:e6:66:88:e6:cc:e5:92:
9f:d7:56:89:be:1f:63:6e:3f:da:eb:5d:21:8c:b1:d3:d6:63:
96:48:cc:6e:cc:d7:35:ee:bc:fd:6e:00:a1:5e:23:64:80:b5:
00:37:3b:49:ae:24:cc:f1:aa:a1:34:46:66:59:4e:f6:0e:ad:
22:32:54:01:ac:f2:85:b4:b5:fb:f3:ac:ce:7e:8e:e4:1f:aa:
cf:18:f6:3f:cb:5d:27:6b:58:fd:83:b7:b5:63:a9:7d:75:1d:
eb:2a:0a:83:b7:7b:50:08:06:a4:58:8f:11:a6:b6:1f:14:67:
ed:5b:9b:65:fd:c0:8a:e0:8f:e7:d7:56:c7:9d:f4:f2:6e:4f:
a2:d6:d0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 17:55:48 2024 by rpki-client on console-fra.rpki-client.org