Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34392e302f32342d3234203d3e20323633363334.roa
File: 3137302e38312e34392e302f32342d3234203d3e20323633363334.roa (raw, json)
Hash identifier: xpqcM60OUfp3tTHg7yFsGrnMJlzMze0WKE5RDTQIbYk=
Subject key identifier: BA:D1:36:40:7C:68:DB:C4:EC:8F:20:86:98:6E:2A:EB:B5:C4:2B:A4
Certificate issuer: /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial: 287F0AC41572E96707067A622F9B96199C30E799
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34392e302f32342d3234203d3e20323633363334.roa
Signing time: Mon 18 Nov 2024 13:46:59 +0000
ROA not before: Mon 18 Nov 2024 13:41:59 +0000
ROA not after: Mon 17 Nov 2025 13:46:59 +0000
asID: 263634
IP address blocks: 170.81.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 14:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:7f:0a:c4:15:72:e9:67:07:06:7a:62:2f:9b:96:19:9c:30:e7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
Validity
Not Before: Nov 18 13:41:59 2024 GMT
Not After : Nov 17 13:46:59 2025 GMT
Subject: CN=BAD136407C68DBC4EC8F2086986E2AEBB5C42BA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:82:05:3b:57:60:10:4a:0d:54:41:be:ef:9e:
a5:60:81:51:b3:a0:13:ff:6e:d9:72:dd:da:17:03:
10:08:a6:48:e7:cc:fd:3a:ac:03:75:97:00:f4:b3:
25:0c:dc:fc:7b:5c:eb:6c:39:a0:1f:c0:7b:1b:d2:
da:d5:c8:43:27:bf:27:98:76:bb:cf:7a:f5:c1:38:
75:01:cb:1b:c9:84:84:47:7d:4f:6f:6d:a0:bd:18:
e9:86:14:fd:06:d6:0a:aa:f3:f8:01:f8:8e:6c:3a:
6d:ef:0d:0f:a8:bb:36:79:02:9f:5e:c7:5b:81:77:
65:ab:cd:67:f0:bb:6c:13:52:e9:1a:a0:33:d9:53:
fd:60:bb:aa:e9:95:62:25:7c:f4:0f:05:5f:e5:44:
62:34:d2:92:af:a7:02:bd:dd:6f:19:74:ae:1e:57:
92:0a:fc:d1:d4:35:7d:e8:fb:34:39:d4:bf:7f:d3:
17:46:6a:0e:65:8b:af:65:59:a6:8e:04:11:90:22:
f8:d6:89:a2:9b:ce:e5:ec:d8:af:92:c2:77:c2:37:
64:c5:e0:34:16:53:c3:f5:c7:4a:02:8a:55:48:57:
ae:52:ee:47:3b:32:2f:ad:38:6d:22:ed:3d:e3:65:
15:10:d9:79:6a:58:8d:93:0b:35:b6:4e:39:6c:e9:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D1:36:40:7C:68:DB:C4:EC:8F:20:86:98:6E:2A:EB:B5:C4:2B:A4
X509v3 Authority Key Identifier:
keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34392e302f32342d3234203d3e20323633363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.49.0/24
Signature Algorithm: sha256WithRSAEncryption
35:01:5b:9e:84:a7:3f:9f:c9:28:cc:be:cf:17:8e:ac:c0:7a:
cb:33:08:c3:a8:b7:76:25:19:a6:e9:16:73:ba:05:bc:26:9f:
d7:5b:b7:8a:f4:bc:0c:0f:ea:0b:13:57:35:8b:fc:64:c4:40:
ac:b9:d3:05:88:3f:37:c5:eb:9a:a0:e9:f8:e1:cb:28:b3:4f:
25:21:e3:55:b4:27:56:b6:c8:d0:ff:0b:5a:5f:95:c7:db:ce:
45:ba:bd:45:65:d7:46:f1:46:85:1b:d1:6a:0b:12:66:f8:e3:
85:bd:8d:67:11:4f:b1:23:8f:12:3a:ec:64:77:0c:ad:ea:83:
bc:6d:6e:ac:46:d8:8a:d6:d0:7b:3c:f5:b3:d7:e9:0b:31:e6:
e8:75:52:33:7e:b0:9c:c0:d4:54:3d:3e:9b:bd:0a:b9:07:33:
cb:4f:b2:83:6f:61:1a:80:5b:bd:ce:be:2c:7c:44:0c:af:e2:
14:b6:3b:9f:78:9d:7d:24:75:4b:dd:3c:ca:0f:64:dc:c9:36:
37:bd:e7:34:81:67:46:fb:ee:36:29:bf:dc:c1:77:42:f1:08:
79:e0:78:57:6f:4d:f5:30:6e:9b:8c:cd:55:7e:92:39:4c:49:
dc:8f:34:82:1d:52:38:81:27:7c:e4:d1:49:a7:ab:6d:4f:00:
c9:ff:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:20:36 2024 by rpki-client on console-fra.rpki-client.org