Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34302e302f32332d3233203d3e20323633303836.roa
File: 3133382e39392e34302e302f32332d3233203d3e20323633303836.roa (raw, json)
Hash identifier: 55qFh0QzXtYCndAIFEcX57+e0db7cphjlsDhGQcgj6w=
Subject key identifier: 54:56:1E:60:CA:C3:31:E3:67:CC:EA:8E:17:F3:5D:91:44:AC:D6:B8
Certificate issuer: /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial: 3A8C2C2E16F7F9D3DFDE8CAAAA36CDADC833C76F
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34302e302f32332d3233203d3e20323633303836.roa
Signing time: Thu 04 Apr 2024 15:03:05 +0000
ROA not before: Thu 04 Apr 2024 14:58:05 +0000
ROA not after: Thu 03 Apr 2025 15:03:05 +0000
asID: 263086
IP address blocks: 138.99.40.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 19 Sep 2024 17:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:8c:2c:2e:16:f7:f9:d3:df:de:8c:aa:aa:36:cd:ad:c8:33:c7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
Validity
Not Before: Apr 4 14:58:05 2024 GMT
Not After : Apr 3 15:03:05 2025 GMT
Subject: CN=54561E60CAC331E367CCEA8E17F35D9144ACD6B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:5f:1f:b9:7d:26:cc:63:80:4e:e0:7e:67:
b8:f2:2c:dd:4c:e8:00:ac:59:77:2e:55:44:8a:a3:
4d:5d:25:45:4b:af:a6:30:2b:71:84:7d:d4:fb:a9:
50:85:d2:55:f7:70:37:db:f6:4e:32:19:74:e4:ed:
01:cf:4c:3c:fc:46:47:ab:0b:fe:7a:f6:a0:d1:6c:
0b:3b:c2:8a:ed:e2:db:31:b5:07:d1:3f:d4:3a:65:
88:9b:12:7c:9e:1b:8e:33:6f:b1:ef:e0:6f:28:61:
ed:49:94:53:ab:74:d6:28:c5:ef:b3:1a:38:47:06:
67:e0:96:78:d3:50:19:71:ca:c5:00:21:3f:e2:3e:
2d:a2:a4:ca:e9:fd:fe:54:30:84:d4:c4:cd:9a:dd:
2b:f4:9b:55:c6:66:ee:6d:ba:db:07:92:e2:b9:d8:
65:b4:7a:3f:1d:3c:07:27:bc:24:8d:81:91:b6:f5:
f2:b0:6a:34:e6:26:d8:7c:a0:97:a9:b0:93:5e:68:
51:06:63:51:99:a2:f6:8d:27:4e:a8:7e:55:36:a5:
a5:66:a5:dd:a1:ba:62:e3:69:e7:e2:e2:8c:4c:a3:
81:2b:38:a7:32:bf:3a:53:e7:22:a3:7b:c3:d6:b1:
44:2d:74:10:88:7e:b0:b1:d9:3a:de:72:a4:0a:31:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:56:1E:60:CA:C3:31:E3:67:CC:EA:8E:17:F3:5D:91:44:AC:D6:B8
X509v3 Authority Key Identifier:
keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34302e302f32332d3233203d3e20323633303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.40.0/23
Signature Algorithm: sha256WithRSAEncryption
56:b0:7f:2d:09:01:e2:d4:c7:54:1f:04:f7:25:3e:55:f2:dd:
e8:3a:7e:93:86:62:9f:2b:cb:bd:06:27:a9:61:96:a8:70:51:
95:74:5b:f7:66:52:7f:56:31:b3:67:f5:1a:10:44:56:a7:fe:
e9:4f:1e:6e:07:b9:83:73:fa:8c:d5:e2:d8:a4:74:bd:c2:05:
55:5d:e4:57:01:d7:40:40:2d:65:31:e2:0d:cb:3d:57:19:fd:
0d:85:6d:af:66:01:07:b0:91:6c:0c:ec:a3:9b:21:f9:c3:ab:
20:e9:88:61:e6:19:d9:74:56:17:c4:d2:55:3f:dc:2d:c8:47:
48:29:dc:a6:d7:a9:c1:ad:5c:43:d3:c6:71:63:ff:08:82:d7:
fc:99:ab:87:76:a5:b7:d5:58:cc:27:1b:cf:82:b9:b4:47:33:
c0:8b:68:39:f1:ac:74:01:50:f0:c4:2c:90:19:c0:42:fa:3c:
44:8f:02:42:53:7e:f1:0e:1b:23:b9:75:35:e1:06:84:36:4a:
21:b3:c2:c3:fe:d3:d3:bd:2e:a2:2a:40:a7:d7:20:30:e9:87:
9c:eb:04:9d:cf:ad:f8:c4:c2:7c:cc:9b:3e:09:86:21:ca:1c:
d4:76:8d:e7:70:b0:30:21:e4:3b:c0:b3:59:30:bb:03:fc:94:
22:72:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:35:30 2024 by rpki-client on console-fra.rpki-client.org