Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32362e302f32342d3234203d3e203532383635.roa
File: 3136382e3232382e32362e302f32342d3234203d3e203532383635.roa (raw, json)
Hash identifier: updKMb6wnBV4dnTodehXb6VvvaVOkkWf0PW0J6xqa0c=
Subject key identifier: 21:37:3F:C5:18:9A:EA:C2:4A:B2:61:D1:57:CE:1F:47:93:CD:70:32
Certificate issuer: /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial: 5A87ADE58816CCBB91F1B7154C7A949F5CC5D0CD
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32362e302f32342d3234203d3e203532383635.roa
Signing time: Thu 18 Apr 2024 18:01:28 +0000
ROA not before: Thu 18 Apr 2024 17:56:28 +0000
ROA not after: Thu 17 Apr 2025 18:01:28 +0000
asID: 52865
IP address blocks: 168.228.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:87:ad:e5:88:16:cc:bb:91:f1:b7:15:4c:7a:94:9f:5c:c5:d0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Validity
Not Before: Apr 18 17:56:28 2024 GMT
Not After : Apr 17 18:01:28 2025 GMT
Subject: CN=21373FC5189AEAC24AB261D157CE1F4793CD7032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:3b:fb:cd:e2:7a:50:e6:bc:3b:39:97:5b:
85:d6:89:1a:94:4c:36:bb:46:6f:8e:a4:78:10:dd:
c1:28:1b:2a:a9:bd:9b:a1:a7:da:39:31:12:08:4a:
6d:13:da:d0:4d:3a:23:b6:2a:14:5c:ec:1d:05:d3:
09:19:3d:c3:21:8d:b9:df:a9:ed:0f:64:59:28:3a:
5a:52:71:2b:3a:f1:ed:48:dc:59:1b:59:aa:32:9d:
5d:b5:c8:50:33:83:ec:ce:fe:38:1a:a6:ab:0b:3e:
31:8e:a9:33:8f:c6:17:30:cd:ce:77:28:6f:ef:10:
9c:a8:27:c6:f7:b2:a1:07:1b:66:31:7b:cd:18:f7:
fa:52:fb:6a:2f:6e:07:01:91:1a:d8:f0:09:6a:8c:
78:c1:a2:47:1a:a8:71:8c:b5:40:54:a9:54:a0:2d:
ef:a3:d9:11:7a:15:82:ee:39:58:66:a0:99:0f:25:
46:0d:c1:4e:29:cd:4f:6e:2c:b4:1d:95:55:d2:f5:
f7:1f:66:e2:af:3f:26:bc:da:e2:61:06:5e:48:e8:
04:ac:51:c9:2a:bc:91:93:bc:b1:45:64:e3:fb:fc:
81:19:50:6d:a5:7c:c3:12:69:e4:d3:6d:77:d2:b1:
2f:35:94:de:e4:9a:d4:b0:21:72:61:32:09:eb:69:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:37:3F:C5:18:9A:EA:C2:4A:B2:61:D1:57:CE:1F:47:93:CD:70:32
X509v3 Authority Key Identifier:
keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32362e302f32342d3234203d3e203532383635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.26.0/24
Signature Algorithm: sha256WithRSAEncryption
11:60:60:23:2f:30:53:31:b6:c8:17:d1:ab:f2:38:4b:99:b3:
66:9a:f7:d6:76:cf:f8:e4:cb:7f:1c:b4:ce:39:ca:15:de:ee:
51:c4:55:66:5d:0a:e7:6e:54:71:04:84:d4:71:bd:3a:57:39:
c7:3c:2b:d3:ff:41:13:60:6b:03:3d:fa:8e:38:28:1b:01:42:
fd:0d:b0:df:7c:e1:a7:06:5f:d4:4d:cb:96:fa:9e:64:50:92:
97:d8:e0:03:0d:fd:74:a8:57:63:98:f1:f1:d2:c7:fe:ee:b2:
7e:ad:96:1c:69:fd:d6:bd:02:99:19:9f:b5:a3:27:9e:60:75:
5a:57:8f:6e:00:d9:09:30:58:aa:7b:ab:3c:36:6e:17:72:3e:
68:eb:69:fc:b8:94:52:00:2e:cc:8a:d8:19:fd:6b:b8:7f:e2:
bb:ec:4b:3b:6a:20:5d:89:00:61:3f:ec:c2:5c:4e:9e:46:bd:
51:6b:c3:3e:25:ee:2e:c0:de:53:13:e1:08:b9:9a:b0:e9:c5:
64:81:e8:5d:4e:9f:47:53:76:b1:9b:ac:57:d1:b5:47:e0:8a:
06:a0:21:ff:7d:d8:4c:b4:96:a4:93:ef:c7:d7:c9:64:1c:50:
5b:75:f6:e7:11:e4:ba:a2:99:c5:f8:b1:eb:72:f4:98:23:af:
e3:b1:08:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org