Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/3133382e39392e37302e302f32332d3233203d3e20323634313630.roa
File: 3133382e39392e37302e302f32332d3233203d3e20323634313630.roa (raw, json)
Hash identifier: BatR1SeggrGQX+zDi3Mwhjk4IlMJZMnqNIjJtmUNKhw=
Subject key identifier: A9:EC:AD:96:19:E1:33:55:73:CA:46:49:CE:85:2B:84:AA:C3:92:3B
Certificate issuer: /CN=D80B6511B8BED418F67049DBA7A902EA0E950AD0
Certificate serial: 3DB97AD0EE999DD1BE0DE58D047E7CB6F8D8A182
Authority key identifier: D8:0B:65:11:B8:BE:D4:18:F6:70:49:DB:A7:A9:02:EA:0E:95:0A:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/3133382e39392e37302e302f32332d3233203d3e20323634313630.roa
Signing time: Thu 04 Apr 2024 18:39:53 +0000
ROA not before: Thu 04 Apr 2024 18:34:53 +0000
ROA not after: Thu 03 Apr 2025 18:39:53 +0000
asID: 264160
IP address blocks: 138.99.70.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 12 Nov 2024 20:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b9:7a:d0:ee:99:9d:d1:be:0d:e5:8d:04:7e:7c:b6:f8:d8:a1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D80B6511B8BED418F67049DBA7A902EA0E950AD0
Validity
Not Before: Apr 4 18:34:53 2024 GMT
Not After : Apr 3 18:39:53 2025 GMT
Subject: CN=A9ECAD9619E1335573CA4649CE852B84AAC3923B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:8c:1a:dd:88:a7:b0:ca:d2:9f:5c:3e:c7:
ef:fc:5e:5a:d8:72:c4:1e:11:bd:71:01:35:93:ef:
fe:8b:85:40:71:33:34:b3:eb:5d:2f:09:1b:a5:17:
2d:05:75:09:73:1a:8a:75:e2:1c:ed:f0:4c:06:4b:
e8:6b:5a:ed:66:d7:6b:67:b4:7f:22:75:28:b1:48:
ed:6e:9a:8b:e0:d2:7b:ad:f5:f2:23:57:4f:b4:89:
95:ab:b4:53:3f:84:6e:f9:98:12:76:e8:e2:68:22:
e6:3f:a7:c9:09:4e:75:8a:ca:f4:07:d5:45:80:4b:
de:32:50:34:fc:9c:9c:5e:a4:0a:ec:8a:7f:fd:d7:
f4:c1:6d:86:04:1f:ec:c4:eb:1d:a9:9a:e4:41:54:
50:a6:0b:8b:3f:b3:07:ed:37:c0:62:ec:82:9f:57:
e2:09:26:c7:12:54:0c:65:c0:90:78:73:12:23:de:
b6:24:ff:40:d0:5b:ae:50:cd:7f:83:95:48:63:1a:
b9:cf:c5:3f:87:e8:38:90:41:44:b5:f9:c8:64:50:
75:7c:d4:b2:c7:81:84:f2:25:a7:95:a4:6b:6e:85:
88:53:8f:91:1c:d6:e3:1d:83:70:59:b6:7a:ae:c8:
b5:9f:62:88:4d:5a:92:44:60:a5:29:2e:83:a1:0a:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EC:AD:96:19:E1:33:55:73:CA:46:49:CE:85:2B:84:AA:C3:92:3B
X509v3 Authority Key Identifier:
keyid:D8:0B:65:11:B8:BE:D4:18:F6:70:49:DB:A7:A9:02:EA:0E:95:0A:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/3133382e39392e37302e302f32332d3233203d3e20323634313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.70.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:da:d8:b8:3d:04:74:92:fd:0d:94:b3:6f:75:5a:0a:22:81:
a2:57:af:0a:82:34:47:b0:6c:83:1c:ba:5e:b2:29:98:ce:ab:
cd:3d:f1:1f:d1:bf:b5:1f:93:28:90:6a:76:c1:6d:62:53:06:
28:a3:04:3c:8c:2b:7f:53:a2:68:65:13:78:82:dc:6e:64:bf:
e5:ec:43:32:6c:06:74:85:c3:8e:7d:6a:12:a6:87:e7:0f:ce:
d4:d1:6e:94:fa:3a:1d:98:02:6a:11:fb:6b:00:f1:ea:9f:61:
37:02:5f:16:18:e9:3e:07:bf:1e:03:03:30:b3:b6:ef:66:0c:
0a:bb:4b:7e:21:dc:16:3d:ea:25:72:1c:68:ec:30:4c:b0:81:
f9:38:8a:76:82:35:3a:4d:b1:0e:0c:7c:78:2d:b9:8b:cb:12:
90:7f:7c:b8:da:e0:e8:f1:61:e0:0d:82:d7:27:b4:e8:10:83:
0f:ba:fc:90:1d:3d:6e:83:4b:82:45:73:48:ff:2f:8f:a2:71:
71:4b:b2:53:5c:8b:dd:22:f1:6c:59:66:e6:b3:e5:74:bb:96:
61:e7:27:50:6f:b8:89:52:4c:82:be:a1:80:20:c1:84:fb:ac:
fa:58:70:ab:29:63:ba:00:6c:da:0f:82:b2:e0:42:af:88:c4:
57:ad:bd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 23:40:50 2024 by rpki-client on console-ams.rpki-client.org