Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132302e302f32342d3234203d3e203237373135.roa
File: 3137372e36372e3132302e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier: 37n4rmpYGntU6nWWdVH73MarPXCw2qH5BoowsJaqnbs=
Subject key identifier: 33:53:63:78:45:58:88:AC:8F:36:F4:40:51:E7:FD:95:4B:A3:E7:A7
Certificate issuer: /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial: 12D538DAA87A3D9F1D6CF00F858CC9D4B746ED8E
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132302e302f32342d3234203d3e203237373135.roa
Signing time: Wed 08 Nov 2023 17:22:15 +0000
ROA not before: Wed 08 Nov 2023 17:17:15 +0000
ROA not after: Wed 06 Nov 2024 17:22:15 +0000
asID: 27715
IP address blocks: 177.67.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 15:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d5:38:da:a8:7a:3d:9f:1d:6c:f0:0f:85:8c:c9:d4:b7:46:ed:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Validity
Not Before: Nov 8 17:17:15 2023 GMT
Not After : Nov 6 17:22:15 2024 GMT
Subject: CN=33536378455888AC8F36F44051E7FD954BA3E7A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:fc:95:3f:8e:76:d6:2a:72:7e:6a:83:fa:
ea:19:8e:79:60:80:f8:8a:3c:55:18:25:12:38:b3:
93:b8:e8:1a:51:98:00:5d:af:3e:10:61:5b:2c:31:
81:d6:89:bc:62:39:ef:dd:a6:98:9c:3e:ef:58:bf:
5a:de:20:73:65:26:86:c5:91:04:19:91:f0:60:88:
ca:6b:69:ce:bf:27:e7:5e:84:96:c6:30:bc:c8:32:
e4:3d:57:2d:35:60:c3:bc:2f:2d:5c:5f:1f:c9:7d:
29:74:d0:77:3a:36:cc:e7:da:eb:0f:90:8c:73:d8:
44:eb:fd:1f:21:5e:59:dd:79:77:8c:ef:3e:13:50:
92:77:95:bf:f5:42:fa:08:04:df:a1:a5:03:a7:71:
6d:0c:ef:14:7d:77:4e:02:17:61:68:05:63:3a:34:
7f:71:ef:c8:9b:27:72:b6:ab:8b:3a:d9:23:6b:d8:
70:27:e3:ef:48:08:4f:cb:a9:76:15:f7:b3:98:c7:
98:e1:07:1a:9a:f8:6c:49:48:fa:e6:5d:dc:46:7f:
69:93:c7:0d:1d:2b:17:7d:de:1e:7b:2c:5b:78:a7:
9a:fa:82:57:d5:8f:96:da:4c:8f:73:a9:2d:08:79:
76:22:28:b6:bf:2e:0a:eb:5f:11:ba:78:73:27:6f:
b1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:53:63:78:45:58:88:AC:8F:36:F4:40:51:E7:FD:95:4B:A3:E7:A7
X509v3 Authority Key Identifier:
keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132302e302f32342d3234203d3e203237373135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.120.0/24
Signature Algorithm: sha256WithRSAEncryption
76:2b:ec:23:32:3f:1d:34:68:d7:8a:3f:ff:b1:a1:36:92:a1:
46:20:c5:51:fe:d4:11:4c:4c:cd:73:10:b1:8a:d4:30:7c:19:
a8:a2:bc:31:71:5f:41:83:25:66:4f:2e:f5:b2:85:8a:46:76:
be:90:ce:a6:6c:59:4a:02:db:03:33:fe:f3:2c:6c:dd:b0:82:
10:4e:dc:35:69:77:9f:f4:4c:2b:36:98:a1:b8:65:f3:5a:8e:
d0:96:fc:55:0a:ef:c3:f1:72:e0:2f:3d:e6:5e:21:a2:b5:42:
c9:9a:e5:03:31:1d:a1:7c:47:70:01:a0:40:22:6c:92:da:2e:
fd:d1:27:ab:7c:11:88:e5:95:8e:7c:02:d4:f2:ef:b3:3a:89:
fa:de:ef:bd:1a:a6:4f:ae:63:6f:07:a7:59:ee:bc:6c:7a:61:
2b:d9:86:f1:df:4c:56:62:7e:27:82:c2:10:ad:c5:49:18:81:
bc:35:a3:49:5d:60:26:00:a5:27:73:d2:64:8b:b6:23:48:89:
08:2a:e3:1f:cb:26:17:0c:56:25:f1:9d:8d:8e:23:69:6f:c0:
e8:ea:3f:2a:7b:eb:00:e5:e5:d8:1f:e0:15:cd:03:ac:d6:ad:
8e:cb:b5:ff:67:c6:c8:0b:f1:74:70:46:4d:b6:ea:02:a2:a7:
70:e0:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 19:25:28 2024 by rpki-client on console-ams.rpki-client.org