Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233322e302f32322d3233203d3e203631393130.roa
File: 3230312e38372e3233322e302f32322d3233203d3e203631393130.roa (raw, json)
Hash identifier: XkGZRVj+9cgkc5xmaXKmxBvdOaSLMmyFY+EO9fBXIOc=
Subject key identifier: 40:87:0B:B8:9A:15:2B:10:27:27:3A:6D:5D:DF:B4:A8:97:6A:C0:9A
Certificate issuer: /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial: 0425FF0303627622018739610B2CF11EF9E114F7
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233322e302f32322d3233203d3e203631393130.roa
Signing time: Wed 03 Apr 2024 21:03:43 +0000
ROA not before: Wed 03 Apr 2024 20:58:43 +0000
ROA not after: Wed 02 Apr 2025 21:03:43 +0000
asID: 61910
IP address blocks: 201.87.232.0/22 maxlen: 23
Validation: Failed, certificate revoked on Sun 22 Sep 2024 18:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:25:ff:03:03:62:76:22:01:87:39:61:0b:2c:f1:1e:f9:e1:14:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Validity
Not Before: Apr 3 20:58:43 2024 GMT
Not After : Apr 2 21:03:43 2025 GMT
Subject: CN=40870BB89A152B1027273A6D5DDFB4A8976AC09A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:ef:fa:e0:94:7e:ef:7d:bb:2d:dc:7d:1d:
dc:4c:bd:71:63:48:1a:b1:24:c7:e2:66:9f:75:d1:
2c:61:40:65:e3:c3:7f:e0:75:86:bd:c4:31:17:3c:
52:e4:4e:14:ed:01:26:6c:a7:79:1c:87:18:de:0e:
ea:55:7e:f2:09:38:ba:58:68:da:51:ca:c4:c2:af:
2e:fa:87:17:af:18:fe:cd:7b:9e:a5:c5:2c:e7:00:
a2:80:95:22:6f:53:b8:4d:1b:d3:19:72:29:e0:7f:
29:47:b9:5a:99:66:d4:85:5a:a7:b7:b5:21:00:e1:
0f:23:1f:01:df:5c:c8:b5:e8:d9:45:e9:24:b8:7e:
8e:86:6d:f9:15:c0:13:b5:ac:aa:5a:ec:09:a8:84:
69:e1:22:51:02:3e:cc:cb:2b:ef:24:ea:5f:1c:95:
fc:97:00:2e:64:89:c4:dd:5a:8f:d9:b3:27:ba:bc:
7a:08:d3:5a:58:42:83:29:a7:70:fe:8e:56:16:83:
5b:01:8c:d9:44:4c:67:71:17:60:1f:d1:f3:40:9e:
0d:ca:f8:df:a6:ff:de:65:d8:94:b8:c3:a0:9e:68:
27:1b:c2:89:57:44:82:0e:1e:3c:0b:cc:33:df:99:
49:66:a1:60:44:9e:d3:c8:74:18:f1:47:fe:d0:a5:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:87:0B:B8:9A:15:2B:10:27:27:3A:6D:5D:DF:B4:A8:97:6A:C0:9A
X509v3 Authority Key Identifier:
keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233322e302f32322d3233203d3e203631393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.87.232.0/22
Signature Algorithm: sha256WithRSAEncryption
16:10:17:f4:4d:c8:db:d3:39:96:cc:4f:4e:c4:b9:94:5a:dc:
fc:e9:b9:bf:1f:1c:b6:e6:74:f5:70:30:95:1a:e3:6c:59:a0:
8f:0a:0f:5a:0b:a4:14:c4:da:8a:b4:88:59:7e:63:a8:43:d5:
a0:0d:c1:72:d3:65:d9:24:aa:0c:9b:33:1c:33:df:3e:d3:a9:
ce:d3:89:f9:cf:91:b3:cb:0a:f0:85:59:44:8d:e9:54:e7:3a:
1f:da:6f:0e:47:c1:b5:c2:6f:1a:9d:7e:11:4a:19:5f:5c:b9:
66:6b:3e:68:cb:04:80:81:b5:92:e3:13:ad:7b:b6:25:4f:65:
6e:ef:ea:b5:fa:3d:23:29:97:64:5a:80:a3:b5:f5:b5:34:00:
55:7a:b8:9f:23:1c:ad:9c:ca:0d:c9:60:3c:30:22:c2:09:49:
e2:6b:b8:08:ff:ea:ac:dd:3a:0f:4c:28:7f:a2:be:f0:7c:12:
f4:8b:88:3e:ea:90:be:18:2a:d6:94:26:57:c8:22:5e:20:88:
11:1f:d8:e9:16:fe:2b:01:59:04:40:1a:07:af:6e:0d:0a:a5:
e3:52:69:d6:6b:8f:cb:90:48:8a:77:b8:d4:ae:d7:dc:51:17:
80:5a:f0:cb:aa:b4:17:cf:bf:99:24:12:d7:aa:3b:dd:d9:48:
90:1a:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:33 2024 by rpki-client on console-ams.rpki-client.org