Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233332e302f32342d3234203d3e203631393130.roa
File: 3230312e38372e3233332e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier: t+YWj0rpmU4hWL4ZXiHiGvlXdRn/6FLmYZDhTAu/F2A=
Subject key identifier: 21:4C:5D:64:4C:6F:4F:34:CD:8F:A0:98:8D:93:3D:8C:24:E0:B5:AE
Certificate issuer: /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial: 167ADC91F029D0F271656E20A4024CFACEEB2A87
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233332e302f32342d3234203d3e203631393130.roa
Signing time: Wed 03 Apr 2024 21:03:44 +0000
ROA not before: Wed 03 Apr 2024 20:58:44 +0000
ROA not after: Wed 02 Apr 2025 21:03:44 +0000
asID: 61910
IP address blocks: 201.87.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Sep 2024 18:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:7a:dc:91:f0:29:d0:f2:71:65:6e:20:a4:02:4c:fa:ce:eb:2a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Validity
Not Before: Apr 3 20:58:44 2024 GMT
Not After : Apr 2 21:03:44 2025 GMT
Subject: CN=214C5D644C6F4F34CD8FA0988D933D8C24E0B5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c8:44:7d:e2:d3:51:86:86:eb:c5:ea:38:04:
c0:d4:62:b5:be:ba:f2:3c:77:7b:51:b8:9b:4e:46:
10:7e:1b:66:c0:75:4d:56:4c:7a:2b:be:2d:fe:b3:
c1:e7:11:a9:ac:ae:3d:3f:63:0a:bd:d6:47:5e:b9:
6a:78:dd:e8:bb:93:df:54:c8:52:f6:0b:a4:3c:61:
c8:8f:f2:9c:5f:01:05:6d:9c:0f:75:af:d9:09:2f:
fb:dc:6f:ad:ab:03:83:ad:2c:a8:15:47:df:f8:b1:
d5:72:c7:fb:3d:53:89:1f:bb:0d:2a:97:0b:07:bb:
31:fa:89:8d:4b:41:84:57:49:6c:3a:be:78:dd:9d:
03:10:ef:b1:f2:04:d7:3d:ce:44:09:55:3a:74:22:
fd:db:1d:3c:44:e1:aa:5c:a0:5d:65:1d:32:2c:cf:
77:b7:cc:68:de:54:fc:7e:ea:20:b5:12:65:11:7b:
f7:c2:fd:18:32:2d:7d:1f:64:5a:62:e1:2c:81:1b:
80:f0:d4:73:ca:02:d1:e1:68:f2:95:fd:24:3c:0a:
c4:21:71:5e:7f:03:fc:d0:d0:3b:9b:4d:9a:f5:a7:
31:6b:0d:1a:1f:f2:f9:3b:c8:a9:27:00:7e:7f:58:
38:3e:fe:5c:78:8d:9e:59:c6:94:2e:c7:a1:b9:8d:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:5D:64:4C:6F:4F:34:CD:8F:A0:98:8D:93:3D:8C:24:E0:B5:AE
X509v3 Authority Key Identifier:
keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233332e302f32342d3234203d3e203631393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.87.233.0/24
Signature Algorithm: sha256WithRSAEncryption
93:3e:4f:fd:8b:bb:ac:8c:78:79:30:90:b7:e6:a7:ba:79:2e:
42:f9:9f:19:2a:fa:bf:e8:3b:12:df:62:85:bf:be:14:8e:b0:
af:d1:49:60:9b:ae:8f:ec:5f:1c:42:71:a8:04:19:60:1b:e7:
97:cf:75:94:15:56:6a:ab:01:71:9b:5f:b4:89:fd:56:c3:8d:
06:65:62:58:4b:a7:d6:45:79:ee:3c:01:a0:a9:ef:bc:cd:2a:
73:2d:db:d5:1e:74:c8:be:1f:19:67:ea:d2:0e:af:a3:14:2f:
a7:33:27:94:7b:af:42:98:2f:c6:b6:0f:22:2a:b8:da:f5:3b:
fd:e8:3d:31:64:47:75:83:4d:61:6b:c4:44:d5:b2:2c:59:15:
57:e4:ae:92:73:3f:49:1f:c6:5a:59:5b:44:84:a6:52:f7:90:
66:56:15:1c:a3:b5:62:17:aa:33:1e:06:8e:97:28:d0:6d:64:
50:5f:4f:1b:15:11:53:d3:10:fc:76:49:fb:6a:25:7e:c0:fb:
af:76:0a:d1:12:8f:55:fd:c7:44:cc:12:77:ce:5d:97:97:b7:
2f:8b:f9:05:6c:cb:98:47:09:b7:08:4f:70:0f:b3:7c:a3:eb:
11:a1:77:c7:48:81:39:11:1e:47:d0:90:ff:e0:11:19:41:6a:
0b:b8:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:33 2024 by rpki-client on console-ams.rpki-client.org