Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34322e302f32332d3233203d3e20323633303836.roa
File: 3133382e39392e34322e302f32332d3233203d3e20323633303836.roa (raw, json)
Hash identifier: 3rkKeCG4HrjzL9w9XrKszicrZvA/rkV+k26oy9pRdEk=
Subject key identifier: 69:E2:A7:E5:EF:C2:E8:FA:70:38:7C:4C:B8:DE:0D:AA:52:55:D0:45
Certificate issuer: /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial: 0D1C0C4EC6C02F7111FCA61348B0D17613E4DF0E
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34322e302f32332d3233203d3e20323633303836.roa
Signing time: Thu 04 Apr 2024 15:03:05 +0000
ROA not before: Thu 04 Apr 2024 14:58:05 +0000
ROA not after: Thu 03 Apr 2025 15:03:05 +0000
asID: 263086
IP address blocks: 138.99.42.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 19 Sep 2024 17:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:1c:0c:4e:c6:c0:2f:71:11:fc:a6:13:48:b0:d1:76:13:e4:df:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
Validity
Not Before: Apr 4 14:58:05 2024 GMT
Not After : Apr 3 15:03:05 2025 GMT
Subject: CN=69E2A7E5EFC2E8FA70387C4CB8DE0DAA5255D045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:42:7c:f6:a2:57:03:30:42:02:a7:57:d8:
8d:69:51:00:c1:89:bf:af:3d:26:31:cd:52:ff:bf:
ba:65:cc:47:ff:0b:2a:75:f2:5a:81:07:3c:4d:d9:
c8:9d:2e:5d:d5:7a:ee:2b:c9:27:2b:08:49:a6:01:
0f:1f:ec:0b:3d:e5:e3:d3:73:09:3d:a4:b9:14:5e:
16:b3:e8:eb:4d:e6:f9:ec:30:d6:9d:8f:26:7f:c0:
31:66:0e:4e:7e:20:31:60:04:66:bd:9b:c3:11:36:
e8:ad:f9:0a:e5:17:8e:5c:b6:fc:90:80:c1:c6:3e:
cf:71:4b:b1:7a:5a:83:c4:26:1d:dd:de:57:58:99:
66:22:d1:5b:32:23:49:1c:0c:c3:bd:84:20:d4:7f:
fc:72:b3:b6:a1:62:e6:6d:ce:eb:d8:fb:87:1e:b5:
bd:6b:3f:1a:04:33:9a:de:26:a0:fd:34:4f:38:2a:
b7:d6:e6:5d:4c:e3:26:5b:41:a5:8b:01:18:15:b4:
8c:88:79:a8:b6:c0:59:bf:71:2f:2d:72:f9:f5:8d:
2c:05:73:e5:6d:4b:61:42:ed:e1:d1:8c:04:81:83:
9f:f3:5b:f5:bd:7c:bd:5d:5d:d6:6b:4c:8d:76:9e:
f7:fc:65:9e:52:5a:38:51:bf:c3:54:1a:b2:c2:c5:
df:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E2:A7:E5:EF:C2:E8:FA:70:38:7C:4C:B8:DE:0D:AA:52:55:D0:45
X509v3 Authority Key Identifier:
keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34322e302f32332d3233203d3e20323633303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.42.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:d3:5c:0a:28:46:64:e6:c7:47:66:e1:80:b8:73:5f:1d:74:
46:5a:06:fd:1a:68:d1:0e:d5:ec:41:26:6d:6d:af:dd:6d:70:
90:43:d4:9b:8c:d7:01:34:5a:ee:97:bf:e4:99:dc:a4:d1:b9:
1f:72:ad:a3:c7:88:44:37:cb:06:bc:bd:2a:68:2b:b5:e7:a1:
94:d5:c1:0d:b3:a5:9a:c6:94:55:73:6b:e0:33:d0:40:2e:70:
f6:a9:27:df:fa:d5:e2:6d:7c:ef:ec:21:4d:64:4d:34:5a:cb:
61:6f:fe:b3:aa:92:a4:a9:81:58:28:99:43:70:6a:ad:20:ff:
e3:67:08:3b:4a:9b:8f:fc:4a:cb:8e:f9:88:f5:79:68:19:6f:
30:2c:eb:34:3e:a8:63:30:82:4a:0d:50:bf:d8:49:f0:eb:f7:
3f:96:5a:9d:75:62:65:3c:fc:7e:64:60:39:ae:b5:0d:a9:f2:
ac:5e:85:cd:de:7b:47:4b:bc:f0:4e:eb:bd:9f:5f:ef:be:80:
bb:0b:be:72:02:14:4b:1b:aa:86:9e:fe:7e:ed:22:eb:c1:3a:
00:ed:3e:20:1b:a9:44:e6:be:77:55:49:ce:18:00:fe:c1:10:
e3:af:b2:5d:f0:c3:00:23:aa:d6:7c:c9:76:6f:0a:f7:5c:41:
ad:35:87:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 00:00:37 2024 by rpki-client on console-ams.rpki-client.org