Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3234203d3e20323632333433.roa
File: 3133312e3130382e3235322e302f32322d3234203d3e20323632333433.roa (raw, json)
Hash identifier: 0x11I0pxIF0N1BLfFgyqse3KdjB7I3H3+XmnpXaF9v4=
Subject key identifier: D0:C5:7D:A8:1B:38:DE:ED:74:38:80:17:B8:14:7F:2E:20:79:F6:A6
Certificate issuer: /CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
Certificate serial: 15D981D53F189801EAC4D09E83EC6F0D8F4E975A
Authority key identifier: C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3234203d3e20323632333433.roa
Signing time: Thu 04 Jul 2024 19:39:04 +0000
ROA not before: Thu 04 Jul 2024 19:34:04 +0000
ROA not after: Thu 03 Jul 2025 19:39:04 +0000
asID: 262343
IP address blocks: 131.108.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 21:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d9:81:d5:3f:18:98:01:ea:c4:d0:9e:83:ec:6f:0d:8f:4e:97:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
Validity
Not Before: Jul 4 19:34:04 2024 GMT
Not After : Jul 3 19:39:04 2025 GMT
Subject: CN=D0C57DA81B38DEED74388017B8147F2E2079F6A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:a1:b6:5e:0b:37:db:4b:15:12:51:f2:da:
6d:d1:a8:1f:e4:ea:74:18:6e:b8:e5:0e:e9:8b:79:
ab:2b:d1:8d:79:43:fd:3f:ce:5b:5e:0c:3c:03:cd:
28:94:88:77:62:8b:29:ba:b4:fd:e8:6e:c7:94:7a:
04:26:f3:fe:6c:70:46:a9:a0:4c:b1:a6:da:96:a5:
5a:5e:b2:62:48:10:27:54:b1:eb:db:d6:db:4f:9b:
b8:bd:0e:6b:c7:44:c1:41:87:42:45:73:ce:8a:00:
ce:39:91:da:95:fa:d3:9a:39:f1:3f:62:3a:99:a0:
83:9f:27:b6:23:9e:93:b0:2e:54:5b:cb:ff:ce:4c:
c1:c6:c0:57:87:e4:c4:61:d5:dc:30:b0:e8:89:65:
e0:2c:c4:3d:52:89:01:43:e8:69:c2:03:fb:23:ec:
42:c1:b4:88:56:01:93:9b:3e:3d:0c:72:ec:f4:c1:
a3:11:46:5b:da:a4:dc:e3:77:96:7c:3c:40:f9:59:
05:a1:b2:d6:00:8b:0b:1e:72:5a:8f:c2:a5:e2:eb:
fb:18:62:b1:07:8a:3b:23:7e:ba:f7:0f:3d:9c:c2:
d1:2b:f0:9e:46:b1:d4:ad:45:6f:46:b6:49:b1:e7:
5a:08:b4:91:1b:4b:b7:9a:c8:98:e0:9c:66:b7:bb:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C5:7D:A8:1B:38:DE:ED:74:38:80:17:B8:14:7F:2E:20:79:F6:A6
X509v3 Authority Key Identifier:
keyid:C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/C3AFF141530D91097156CCAECCDD429D2C9F5738.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3234203d3e20323632333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:ab:52:ec:dc:e1:a0:35:39:b6:1f:b4:94:46:d7:b3:5e:3b:
8e:84:2d:93:85:09:4b:65:49:dc:63:c4:c1:b4:b3:2c:68:04:
8c:1a:73:a4:2f:3d:b0:64:8e:b3:4e:06:27:29:a7:13:02:38:
7a:7d:00:6f:ff:1f:69:28:08:5e:94:d7:1c:56:8f:49:2e:3d:
1d:cd:e9:ea:7e:1a:bf:49:53:b4:1f:39:49:af:f5:37:71:1f:
87:df:83:b5:e6:f5:28:d6:f7:96:9e:21:79:d9:6f:ee:87:7b:
14:1d:03:f2:34:22:67:e3:19:56:29:20:be:a8:71:4d:50:41:
b9:36:b7:89:30:0a:b9:bd:a0:49:a6:7e:42:8c:a9:f8:ff:f3:
b8:a5:58:ef:49:0c:98:60:cc:f1:9f:0c:ce:38:05:b2:90:ea:
16:09:87:cf:15:9e:b5:54:37:7a:c6:e3:6c:80:23:53:a0:62:
87:88:04:b7:8c:85:3f:cd:4b:84:f5:8b:f8:7a:e6:50:e8:dd:
3a:c8:42:31:df:5f:d6:bb:08:45:51:4d:b6:61:0c:7a:f0:b1:
b0:26:72:97:4f:f8:16:b4:f1:c6:44:df:f3:8d:a3:e1:99:8d:
b8:b1:39:dd:f3:3f:6d:0b:83:6e:19:fe:9d:23:dd:3e:17:d1:
74:e8:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 22:34:00 2024 by rpki-client on console-ams.rpki-client.org