Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3232203d3e20323635393432.roa
File: 3133312e3139362e3135322e302f32322d3232203d3e20323635393432.roa (raw, json)
Hash identifier: kqmbI88xXhqoCtLcBK2tR+iFtJEHBtw6TScVUk00um0=
Subject key identifier: 6C:43:E5:14:30:B4:CE:A6:27:50:6C:43:57:54:86:75:CD:D1:57:38
Certificate issuer: /CN=4936D3D33202532B27ADCD7B44359BCF8ABCBC38
Certificate serial: 6F02F6448BFCB733D60FA1C1C2F9BE9D55A417FF
Authority key identifier: 49:36:D3:D3:32:02:53:2B:27:AD:CD:7B:44:35:9B:CF:8A:BC:BC:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3232203d3e20323635393432.roa
Signing time: Wed 15 May 2024 19:06:50 +0000
ROA not before: Wed 15 May 2024 19:01:50 +0000
ROA not after: Wed 14 May 2025 19:06:50 +0000
asID: 265942
IP address blocks: 131.196.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 16 May 2024 14:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:02:f6:44:8b:fc:b7:33:d6:0f:a1:c1:c2:f9:be:9d:55:a4:17:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4936D3D33202532B27ADCD7B44359BCF8ABCBC38
Validity
Not Before: May 15 19:01:50 2024 GMT
Not After : May 14 19:06:50 2025 GMT
Subject: CN=6C43E51430B4CEA627506C4357548675CDD15738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:4d:21:29:38:6d:14:96:f2:e9:3f:c0:8d:
94:73:95:a1:53:b5:34:0d:16:85:28:a4:1f:2d:cb:
f9:e0:01:2f:ea:2b:37:4a:c4:f0:20:92:7d:45:f8:
ec:cb:ad:b4:b8:94:06:b9:ea:0f:f7:fc:6c:a3:6e:
98:fb:3a:82:04:f6:10:41:17:00:58:fd:d0:5a:b5:
09:57:fb:d2:a8:49:b0:2f:bf:8f:0a:8f:d3:d4:8e:
d7:4b:d0:55:3a:fb:0f:80:a0:f3:fc:2a:f9:ca:85:
47:a3:78:8f:e3:e3:d2:c5:f2:aa:0d:f8:75:59:cc:
6a:3d:0e:fd:98:f7:9b:d9:3b:ac:4c:0b:5c:a8:fd:
bf:7a:83:03:b4:ae:15:25:4c:5c:ea:9c:58:46:3d:
3f:d0:f2:11:90:0a:8e:d0:96:52:88:35:11:3d:85:
fe:ae:36:be:8a:15:62:75:3a:fb:61:43:98:ba:cc:
40:f5:9b:86:b5:a1:b2:ce:a2:86:b2:2b:cf:c5:01:
13:ea:2f:d2:a9:f6:da:60:8e:a8:81:85:52:13:20:
a4:ea:7c:90:bf:da:5d:56:07:55:f4:f1:3c:8b:6b:
a9:ce:a2:8d:95:f6:66:c1:8b:1d:7c:e4:63:95:ed:
f9:5c:0a:ff:38:9b:28:82:1a:7a:86:46:2b:db:11:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:43:E5:14:30:B4:CE:A6:27:50:6C:43:57:54:86:75:CD:D1:57:38
X509v3 Authority Key Identifier:
keyid:49:36:D3:D3:32:02:53:2B:27:AD:CD:7B:44:35:9B:CF:8A:BC:BC:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3232203d3e20323635393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.152.0/22
Signature Algorithm: sha256WithRSAEncryption
35:4e:f2:8f:0a:d5:2f:d5:9f:85:b0:b7:60:74:39:af:6e:31:
62:95:2d:a5:03:d6:b3:a5:0f:b9:69:a4:3c:66:31:da:8c:11:
9b:23:89:ec:63:de:65:de:c1:93:0c:5c:82:b4:77:f6:5c:f8:
3b:5c:1c:41:af:a9:12:5b:45:ae:03:60:d6:5c:bb:b2:e7:8a:
e6:52:0a:e0:47:09:c6:57:9b:a8:f5:8c:df:c7:73:76:7d:57:
6f:c7:70:f8:af:5c:ae:d5:6a:b7:dc:d8:81:e3:65:fb:ed:dd:
4c:7c:4b:f7:23:06:5c:d6:0d:b2:3c:5a:b4:57:2b:79:32:7c:
46:e2:e6:c9:e5:42:1d:86:98:af:99:e7:49:7f:b3:00:e0:7c:
b9:a7:4d:cf:9b:db:29:49:77:83:46:38:d5:26:d5:bc:92:61:
db:77:71:fa:15:cb:d7:de:b7:fe:d2:bf:08:cd:3b:70:23:10:
eb:e4:f5:c2:e1:2e:c6:75:99:c3:4e:f6:37:fc:68:44:24:72:
e8:a4:3e:bd:b8:66:54:9d:c9:16:f2:db:26:4a:36:e6:81:86:
1a:51:98:62:b0:2d:e8:b6:8c:e3:e8:3c:b7:98:be:10:96:f3:
82:ab:a3:03:de:33:d3:95:e9:b8:ba:7d:fe:06:29:35:f8:af:
ac:cf:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org