Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137322e302f32342d3234203d3e203237373135.roa
File: 3133382e3132322e3137322e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier: Z2vYLNiH/JABHXwfXqry8H8e/HRgaN05lyaxn2QgdF8=
Subject key identifier: A7:40:3D:EE:5F:7A:64:2F:12:A1:4F:C5:EE:65:90:C9:40:BD:DC:A2
Certificate issuer: /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial: 7960231B1967860650F01BCB277458C313CB6DEF
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137322e302f32342d3234203d3e203237373135.roa
Signing time: Mon 13 Nov 2023 12:46:17 +0000
ROA not before: Mon 13 Nov 2023 12:41:17 +0000
ROA not after: Mon 11 Nov 2024 12:46:17 +0000
asID: 27715
IP address blocks: 138.122.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 15:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:60:23:1b:19:67:86:06:50:f0:1b:cb:27:74:58:c3:13:cb:6d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Validity
Not Before: Nov 13 12:41:17 2023 GMT
Not After : Nov 11 12:46:17 2024 GMT
Subject: CN=A7403DEE5F7A642F12A14FC5EE6590C940BDDCA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:d7:34:e4:79:d5:94:41:a6:64:ca:8d:fc:
2b:e6:d3:fd:71:f6:a8:c0:f7:92:61:79:c6:83:33:
4f:75:96:73:5e:37:38:a2:54:16:af:12:bd:4f:00:
30:c7:1c:ca:a3:74:8f:73:96:17:0d:24:4e:84:6f:
bf:ce:b1:f4:68:1f:6b:fb:b6:c6:f1:25:5e:48:3d:
5c:d3:b2:3e:7e:e1:42:4b:9d:11:92:ef:31:31:2c:
ee:1e:6d:ae:59:d1:05:df:62:45:0d:02:1d:73:ac:
5b:97:7b:ff:1c:8e:cc:0d:c1:cb:a7:d4:64:f9:a5:
50:d6:49:a0:f5:4f:47:9c:74:bf:56:d2:16:02:71:
2b:ba:db:fa:d0:68:73:33:d1:13:f1:d6:e8:63:00:
48:92:cb:b1:1d:32:de:11:ca:b1:2b:c6:41:54:84:
5b:78:72:a4:08:b4:e2:6e:bd:48:f9:3a:3a:1f:54:
1b:4a:fd:48:a4:0a:fa:6f:3a:af:a5:5e:47:93:a6:
c1:29:a3:d5:d5:5b:ac:5c:f6:61:52:1a:db:4a:af:
ac:f3:1d:a2:48:e8:89:3f:a3:0a:d7:f3:65:23:eb:
10:df:20:10:4e:3e:27:f1:e3:0b:1f:8b:da:9d:b0:
3d:9c:64:89:ac:25:f7:04:2a:cf:6a:d1:de:2e:5f:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:40:3D:EE:5F:7A:64:2F:12:A1:4F:C5:EE:65:90:C9:40:BD:DC:A2
X509v3 Authority Key Identifier:
keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137322e302f32342d3234203d3e203237373135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.172.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c3:5a:db:5a:2e:65:b6:80:9e:e8:13:4e:27:15:68:7c:51:
64:0f:be:1d:74:cd:c2:31:15:fa:36:aa:af:2a:2c:99:9b:10:
2c:30:28:30:df:f9:a8:55:06:8a:05:cd:18:92:f1:95:e3:f0:
ab:da:19:1e:6c:3d:88:fc:2e:fc:07:38:fd:13:cd:32:68:66:
c5:bf:ee:4e:ef:ac:1c:d2:ef:04:2b:27:e5:c1:61:db:73:f7:
cc:30:7e:10:28:e5:a5:f8:34:80:d9:57:3d:32:96:b4:fc:3e:
16:d8:47:a6:9c:ed:8e:74:8b:2c:df:29:6a:54:98:2c:64:e5:
d9:06:a0:59:ba:e9:d4:1f:05:a7:09:e0:fb:67:06:ef:07:89:
cd:bb:63:d0:c5:e3:a6:e5:32:c0:54:74:cb:d9:09:22:63:3b:
75:92:90:13:2f:8e:3b:2d:9d:8e:2a:55:47:cb:b2:4d:3f:fa:
fb:8d:80:77:ae:6e:46:60:ca:b6:98:c7:49:a8:e3:2f:41:67:
1d:99:19:39:f6:05:48:f4:0c:d4:6b:e3:6a:38:0c:9b:e2:ec:
9d:20:ac:63:8a:0a:20:20:1d:6c:22:1a:7b:87:55:c3:d2:31:
8c:16:40:4d:ef:0b:dd:d8:e6:a8:42:9d:6a:e4:ae:70:dc:71:
c8:58:ca:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 19:25:28 2024 by rpki-client on console-ams.rpki-client.org