Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131322e302f32342d3234203d3e20323633363334.roa
File: 3137392e3132352e3131322e302f32342d3234203d3e20323633363334.roa (raw, json)
Hash identifier: 0YtASmGva6X6mXo8CoZWISrOQbjxW1b9Uwrt3XK5F8U=
Subject key identifier: 9E:71:07:AB:AF:F5:38:75:82:2A:C0:44:00:D7:29:58:82:13:CC:FA
Certificate issuer: /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial: 462F6AC46F0460D112456D7C4BF47F5995B1CF50
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131322e302f32342d3234203d3e20323633363334.roa
Signing time: Mon 18 Nov 2024 13:47:04 +0000
ROA not before: Mon 18 Nov 2024 13:42:04 +0000
ROA not after: Mon 17 Nov 2025 13:47:04 +0000
asID: 263634
IP address blocks: 179.125.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:2f:6a:c4:6f:04:60:d1:12:45:6d:7c:4b:f4:7f:59:95:b1:cf:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
Validity
Not Before: Nov 18 13:42:04 2024 GMT
Not After : Nov 17 13:47:04 2025 GMT
Subject: CN=9E7107ABAFF53875822AC04400D729588213CCFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:c6:20:85:96:d4:4a:01:c7:1a:fd:bd:70:
9f:82:00:21:75:09:14:2b:5a:c7:d0:81:34:69:08:
dc:78:69:01:8e:7f:78:2c:aa:9e:08:6d:2d:1e:f2:
a7:1d:5d:fc:6e:a8:12:a7:cd:b3:b1:7c:77:7c:ee:
16:ce:6c:f1:a9:6e:7f:cc:4a:0b:ae:2b:05:c8:33:
14:95:5c:23:b3:5a:ee:76:de:f3:b2:2c:ce:8e:79:
f9:f7:ae:57:21:56:1f:b2:bb:a3:08:c4:35:4a:b8:
bd:88:33:96:b8:e4:ea:32:7d:37:58:ca:9f:37:13:
bc:6b:f2:c5:b8:7e:b0:79:61:da:fd:c7:17:6e:42:
fb:f8:ae:85:68:72:c1:ab:e0:25:24:24:c4:ee:fe:
e5:37:c2:21:6e:54:1e:22:60:be:5d:24:41:cb:9a:
1b:94:14:c5:9c:7f:6a:d5:c6:ba:18:92:c6:f4:db:
02:08:42:87:9d:1d:6d:5e:a5:5c:ee:bc:b7:38:0b:
8c:a5:ff:c0:0e:51:8b:da:b6:36:75:af:18:c1:5b:
78:38:8a:63:f1:4b:d6:98:c0:64:d8:31:ea:01:86:
88:db:08:08:2f:25:21:bf:85:f6:f4:1f:04:ad:68:
e8:7e:d7:1d:45:77:62:2b:4e:a7:11:35:2e:8c:c3:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:71:07:AB:AF:F5:38:75:82:2A:C0:44:00:D7:29:58:82:13:CC:FA
X509v3 Authority Key Identifier:
keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131322e302f32342d3234203d3e20323633363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.125.112.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0a:e7:ea:5a:fd:4d:57:e0:14:b7:64:d8:fd:cf:da:51:05:
91:b0:95:b5:3a:15:ad:7a:84:2e:b9:f6:62:63:90:5f:a7:16:
5d:f3:aa:68:e0:a2:05:51:5d:60:a4:93:10:93:e1:15:ea:3a:
3d:db:9b:0f:38:23:89:fe:bd:a0:3a:2d:24:74:ca:53:1d:26:
26:04:c9:b1:2d:83:af:b9:9c:5d:46:8d:d0:fd:d1:1f:2e:56:
72:0a:c5:52:d2:64:e9:de:e5:bc:0a:93:12:70:56:f1:42:c6:
79:28:3d:de:e1:b0:c9:73:4e:2f:0a:98:86:92:2f:d5:04:64:
0b:50:c8:a8:62:7f:cb:d3:44:6a:81:f1:bd:29:a2:35:dc:a9:
51:f4:18:46:f9:43:ef:5c:48:01:a1:f7:c1:3c:c6:9a:58:72:
25:7b:65:58:3f:91:4f:3d:2f:36:ff:9b:d7:61:40:48:0c:1d:
77:73:60:11:91:28:63:5c:b0:9b:72:92:6d:3a:ab:d8:c1:90:
74:ad:bd:a3:12:3f:a6:cd:ac:63:ea:6c:95:e7:d4:b7:e5:7a:
19:94:aa:68:a8:89:99:37:fa:d9:1d:7e:dd:52:60:70:eb:ca:
da:13:5e:5d:c4:25:41:b8:14:e2:24:7d:4e:e5:9e:2a:7d:8c:
a3:f6:80:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:20:36 2024 by rpki-client on console-fra.rpki-client.org