Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3131382e302f32342d3234203d3e203237373135.roa
File: 3137372e36372e3131382e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier: a1gfEm6v13wmfYeYwdY7d3XwsL6lTpH4+OcXqKrmi3E=
Subject key identifier: 3A:9A:AB:AA:F7:60:AF:44:20:7A:38:0D:BC:09:2F:9C:64:E6:1D:25
Certificate issuer: /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial: 5B5E4969BDBBE99F18775B458CA2AEFDB075A4A9
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3131382e302f32342d3234203d3e203237373135.roa
Signing time: Wed 08 Nov 2023 17:22:10 +0000
ROA not before: Wed 08 Nov 2023 17:17:10 +0000
ROA not after: Wed 06 Nov 2024 17:22:10 +0000
asID: 27715
IP address blocks: 177.67.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 15:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5e:49:69:bd:bb:e9:9f:18:77:5b:45:8c:a2:ae:fd:b0:75:a4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Validity
Not Before: Nov 8 17:17:10 2023 GMT
Not After : Nov 6 17:22:10 2024 GMT
Subject: CN=3A9AABAAF760AF44207A380DBC092F9C64E61D25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:12:85:59:23:08:ef:95:27:e4:1f:9e:a5:
ce:e4:76:d0:d0:2a:1f:66:04:1f:7c:bb:32:6d:9d:
37:e9:2b:47:1d:7b:08:ed:5a:54:13:5c:1a:b3:ae:
be:97:0c:fc:fa:1e:e5:d7:98:4c:f8:4a:08:de:66:
39:be:5f:c5:a8:d1:45:68:70:a6:f4:67:f7:12:7f:
78:fa:44:83:ae:51:ae:61:d8:8d:89:38:06:d2:ad:
ac:22:cd:cc:2e:8b:05:ec:1f:00:f5:6a:2a:cb:06:
66:25:06:70:a6:e7:4a:af:a6:09:73:70:f4:0c:10:
11:a4:67:d3:3d:1e:83:71:d7:bb:12:de:e5:28:09:
79:57:a2:d7:34:f1:8d:d1:ed:b6:ea:2c:bf:75:28:
fc:2e:36:9f:56:fc:49:c0:6e:c4:25:f7:08:10:74:
a8:1d:b8:1f:eb:88:4a:a4:2b:0f:cf:7e:4b:b2:59:
06:c1:5a:a1:35:3b:79:58:94:96:ea:bf:61:52:11:
30:db:70:4c:98:7a:80:01:51:d0:be:70:cd:91:c3:
90:29:d5:69:66:19:91:ae:ff:0e:b1:a3:00:f3:1d:
39:50:7a:36:fa:38:eb:79:45:d9:49:68:54:06:db:
11:a0:74:81:40:87:ad:b6:6e:ee:da:02:66:da:b8:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9A:AB:AA:F7:60:AF:44:20:7A:38:0D:BC:09:2F:9C:64:E6:1D:25
X509v3 Authority Key Identifier:
keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3131382e302f32342d3234203d3e203237373135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.118.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b6:39:a7:3e:98:9c:45:2d:18:5e:ab:c2:4c:ee:fe:cb:64:
95:f5:eb:86:b5:fa:4d:38:b3:4e:44:9b:35:c6:d8:ef:a3:b7:
4c:26:e4:bd:77:da:57:99:ae:1c:23:c2:a4:d3:23:4e:c3:aa:
fa:b6:3c:68:86:04:3f:3f:71:9a:8c:80:29:ce:3e:56:d5:f7:
01:36:89:af:84:c8:78:2b:b8:d2:a7:af:c5:37:83:9e:99:ab:
4d:59:61:71:b4:f9:69:f9:be:74:0e:30:5e:53:68:af:dd:b0:
7e:47:b3:d3:f4:cd:4d:2a:5d:cf:5b:d6:03:b6:3a:8d:66:6c:
84:24:88:d4:b0:2a:95:82:92:73:e5:83:8b:b7:11:9a:fa:41:
3a:7d:68:e6:45:ec:13:a3:c9:6d:1f:b4:3b:65:73:47:3e:4a:
4b:1f:20:19:5c:3d:45:ee:ff:e7:31:a2:8d:11:8d:b8:f2:8e:
37:c2:b9:39:a7:12:c8:26:20:1d:a6:79:c8:63:7a:97:fa:2b:
32:4e:18:35:a6:89:96:5b:2b:39:23:0d:b1:2c:dc:bf:13:7f:
41:1a:f3:ca:4b:35:c6:a1:b3:dc:85:a8:3b:4d:75:21:13:84:
8c:b4:e5:19:a0:d9:66:39:d7:1c:82:96:bb:f0:fb:0b:12:0c:
db:af:2c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 20:33:37 2024 by rpki-client on console-fra.rpki-client.org