Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3232203d3e20323639303733.roa
File: 3230372e3234382e32382e302f32322d3232203d3e20323639303733.roa (raw, json)
Hash identifier: aX9u33HDtNFds6FO8+cGad2GIs8vjgsNyIN163jRbjE=
Subject key identifier: 8A:A5:17:3A:5D:AE:6C:B2:58:D6:50:5E:28:E9:CC:9D:68:31:53:19
Certificate issuer: /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial: 563A186DEA82A622A4938165FB73537AC716F08E
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3232203d3e20323639303733.roa
Signing time: Tue 22 Oct 2024 14:21:50 +0000
ROA not before: Tue 22 Oct 2024 14:16:50 +0000
ROA not after: Tue 21 Oct 2025 14:21:50 +0000
asID: 269073
IP address blocks: 207.248.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 24 Oct 2024 13:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:3a:18:6d:ea:82:a6:22:a4:93:81:65:fb:73:53:7a:c7:16:f0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Validity
Not Before: Oct 22 14:16:50 2024 GMT
Not After : Oct 21 14:21:50 2025 GMT
Subject: CN=8AA5173A5DAE6CB258D6505E28E9CC9D68315319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:88:7e:54:a3:25:37:bb:ce:4a:55:83:04:
ed:ee:74:a6:bd:15:d2:98:ba:d8:a2:ef:d2:00:0c:
ea:01:4d:ae:be:fe:67:50:9b:18:a8:d7:47:e7:97:
36:23:82:a5:f1:5f:c4:e1:11:92:25:dc:6f:7d:df:
a8:7b:59:17:7c:fc:0a:d8:85:1f:48:e7:f5:89:ac:
1d:6b:8a:02:2f:ff:4e:b4:f5:dd:80:b1:8a:d3:23:
95:87:53:6a:10:84:63:73:39:4a:fc:b0:1d:bc:4e:
f2:26:46:6e:89:23:a6:ab:0e:54:0b:94:d8:5c:af:
8b:a9:fa:57:dc:cc:c3:e2:0d:c8:c2:5c:1d:89:da:
e0:84:87:2c:9c:91:3d:16:0a:e5:7c:8c:f0:4a:c4:
8b:0e:2b:ed:93:15:93:b5:21:df:c6:ae:67:83:4f:
95:cf:2c:fa:65:57:ff:8b:b2:78:6e:98:34:c5:55:
6e:c9:57:f7:26:76:0a:99:29:df:29:0f:50:7a:70:
1c:2f:d9:72:08:8d:a0:b9:ea:fe:09:d4:9e:3d:bd:
db:bd:6d:c7:f0:10:31:47:d3:87:d6:61:1a:0d:f8:
de:a1:ee:07:eb:76:16:58:50:b5:d6:6c:a4:af:0f:
91:98:97:f7:aa:53:7f:a6:46:76:29:d1:cc:3c:5a:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:17:3A:5D:AE:6C:B2:58:D6:50:5E:28:E9:CC:9D:68:31:53:19
X509v3 Authority Key Identifier:
keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3232203d3e20323639303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:c7:f1:4e:8f:00:77:65:23:eb:d6:5b:d4:d5:09:01:4c:2b:
e1:94:40:da:c2:b1:3a:11:d4:b5:d4:94:a4:92:8e:49:e9:67:
65:9c:b6:e1:68:1b:ca:87:41:57:20:21:3c:a4:ff:09:2e:d9:
67:50:f5:e4:51:a5:98:29:87:59:1d:a1:28:af:89:86:19:b0:
03:a5:a0:39:9a:3a:a4:fc:67:5b:f5:85:38:b9:f8:ec:e3:f2:
8f:a3:06:53:07:e6:dd:e5:6d:dc:54:eb:68:02:fb:d9:56:1a:
b7:04:ad:64:21:ce:63:4a:21:26:f2:92:1e:42:fe:44:8d:7b:
1d:00:17:6b:d7:2f:dd:8a:6e:97:cc:27:28:0d:90:5d:4e:86:
86:f0:99:2a:33:4d:88:43:d8:ac:18:e6:c7:17:33:7a:1b:9f:
49:49:78:96:cd:5f:12:93:24:d2:2b:a1:15:f4:63:be:a7:15:
20:0c:09:d3:ef:0e:c6:c3:4c:4f:d8:9d:c5:01:00:32:13:07:
3d:fa:c0:47:95:32:30:68:db:d6:ae:e9:e0:33:73:0c:d9:ce:
cf:a2:2f:d2:d8:c2:54:a2:2f:da:46:f4:24:e4:36:6e:0f:6c:
62:69:8b:81:98:bd:4c:91:c3:72:b8:3b:9c:fa:15:d4:2f:95:
d7:29:14:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 16:00:43 2024 by rpki-client on console-ams.rpki-client.org