Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34312e302f32342d3234203d3e20323639353730.roa
File: 34352e3138392e34312e302f32342d3234203d3e20323639353730.roa (raw, json)
Hash identifier: IgXIvPyExyrGPQ2wW8Di9rgNeFcPzdgdkU13eBkSYgQ=
Subject key identifier: 70:94:B6:76:C4:00:BA:95:1E:D5:48:40:BD:BF:59:01:63:DA:3F:80
Certificate issuer: /CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
Certificate serial: 196CFD799A57A23726AE21F99ABBC3ADCFE22131
Authority key identifier: 13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34312e302f32342d3234203d3e20323639353730.roa
Signing time: Tue 23 Apr 2024 13:18:12 +0000
ROA not before: Tue 23 Apr 2024 13:13:12 +0000
ROA not after: Tue 22 Apr 2025 13:18:12 +0000
asID: 269570
IP address blocks: 45.189.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:6c:fd:79:9a:57:a2:37:26:ae:21:f9:9a:bb:c3:ad:cf:e2:21:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
Validity
Not Before: Apr 23 13:13:12 2024 GMT
Not After : Apr 22 13:18:12 2025 GMT
Subject: CN=7094B676C400BA951ED54840BDBF590163DA3F80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:97:6c:ea:c6:d0:0c:2b:11:67:85:5e:b3:
70:4d:d2:f7:c7:71:d9:75:d3:72:da:54:21:64:e2:
8a:12:af:08:d4:73:cd:11:92:d3:21:34:64:dd:c5:
c8:c2:51:d7:94:41:fa:b3:73:4b:d1:28:e9:7c:fd:
0c:7e:8e:8b:04:60:ee:67:34:57:04:c7:e4:57:fc:
3d:90:62:e4:8e:20:13:c0:5f:89:cc:b0:1a:71:65:
2d:c3:35:85:ff:f6:cb:1d:27:c3:5d:c0:1c:a1:5f:
c7:2b:be:3b:0a:70:e9:9a:d2:44:6e:85:30:85:03:
3a:5e:d1:ca:50:85:63:ba:92:cc:8a:b3:3a:3f:fc:
2e:de:81:60:aa:07:23:e2:46:49:0c:0a:e2:49:1a:
52:a3:f6:2c:bf:38:59:b5:76:c1:5e:2e:a6:48:f6:
0a:73:4c:42:5f:30:fd:35:82:19:3d:a5:84:72:fb:
04:c2:aa:7a:aa:65:b2:94:cd:c0:29:5d:ff:0e:64:
73:ff:f9:37:81:57:34:61:10:69:57:65:2d:24:76:
d4:e5:97:63:c8:81:02:c5:58:fb:5b:e3:a4:3a:0a:
63:95:08:6a:9d:85:06:2c:34:1d:94:f8:31:bf:f6:
0e:8d:7c:85:09:20:6c:7e:37:9a:e6:a5:b6:5d:b9:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:94:B6:76:C4:00:BA:95:1E:D5:48:40:BD:BF:59:01:63:DA:3F:80
X509v3 Authority Key Identifier:
keyid:13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34312e302f32342d3234203d3e20323639353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b9:95:0a:af:a6:4d:0e:1c:97:06:dd:83:c4:8d:58:35:ca:
85:49:13:40:8b:6e:c4:c0:15:96:68:0a:3e:9f:4c:5f:4f:df:
de:2d:91:78:94:79:d2:a1:d6:31:e5:df:5d:63:42:be:87:0c:
80:fe:4f:c6:12:1d:94:97:fb:8d:fc:57:2b:6d:84:a9:63:ff:
00:d1:75:de:8d:47:42:08:37:b0:b6:ab:2d:88:01:43:84:76:
d0:83:e9:a8:a9:ae:e0:46:0a:d5:f1:36:ea:09:ce:ca:c0:30:
eb:3e:d6:1d:25:98:24:79:fb:1e:3c:f3:43:25:83:f2:83:85:
67:a0:40:55:55:b2:2a:2b:97:43:56:3a:4f:58:2d:a5:55:4a:
7e:69:5a:94:18:a8:32:ff:f6:61:3b:fe:b8:ee:a9:4c:66:f0:
27:a2:5d:d7:34:25:bb:f5:f4:72:21:47:91:c1:4f:fa:d4:31:
1e:c2:44:95:97:15:72:ea:05:40:43:39:be:50:46:0c:4d:42:
08:28:45:be:1c:c4:eb:40:84:fa:cd:f4:ff:59:fa:7a:a9:36:
b5:c3:5c:f3:5f:cd:0f:98:6b:20:60:76:0a:d7:b0:28:31:98:
7e:cb:e2:67:46:28:3d:a0:d0:8c:77:e4:65:58:a8:c0:3c:c0:
50:71:b5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org