Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132322e302f32342d3234203d3e203237373135.roa
File: 3137372e36372e3132322e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier: DS2Q2r1ZatvfsuzIh986SOyySn4en2BXHLOUuw2M3zE=
Subject key identifier: 52:53:1E:FD:AA:FF:C4:B1:D1:35:AA:0A:7A:21:38:C9:49:2B:82:4E
Certificate issuer: /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial: 048A15B4F5717C9C95789C6CC48043F5D4542A00
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132322e302f32342d3234203d3e203237373135.roa
Signing time: Wed 08 Nov 2023 17:22:20 +0000
ROA not before: Wed 08 Nov 2023 17:17:20 +0000
ROA not after: Wed 06 Nov 2024 17:22:20 +0000
asID: 27715
IP address blocks: 177.67.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 15:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:8a:15:b4:f5:71:7c:9c:95:78:9c:6c:c4:80:43:f5:d4:54:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Validity
Not Before: Nov 8 17:17:20 2023 GMT
Not After : Nov 6 17:22:20 2024 GMT
Subject: CN=52531EFDAAFFC4B1D135AA0A7A2138C9492B824E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:47:2d:9b:7e:57:17:54:2f:44:18:4e:5a:
d5:77:ea:f5:f3:20:d8:ef:a5:9e:94:d9:d7:98:49:
5e:96:22:2b:ad:cc:62:e9:fc:26:c6:16:17:a5:65:
9c:ee:48:05:7b:9d:eb:a2:99:74:92:ca:c2:c0:25:
ca:5d:1b:8b:8c:ab:8f:8c:77:15:a0:5c:df:05:65:
e1:df:4c:4b:a4:f9:1b:b5:b1:b0:88:44:a4:b4:54:
58:c9:88:c8:0c:e2:c0:50:f7:06:5e:27:ce:20:06:
06:94:4d:50:4d:0f:cc:37:37:dd:ed:a8:29:73:4d:
c7:f4:fa:21:39:f4:d4:b7:60:4b:27:8d:12:f5:3e:
09:72:f9:1c:a9:2e:08:e2:8a:94:19:e2:4b:27:dd:
34:f4:76:62:94:ad:00:5b:7d:dc:91:d9:38:49:2c:
cf:27:35:af:3c:95:4c:c5:89:30:2e:ad:17:98:47:
db:0c:a0:8f:52:de:ce:0b:ad:61:95:d5:56:b4:19:
c3:38:f5:47:fd:80:04:6b:a8:04:a9:44:5b:63:e5:
ca:18:99:f8:0b:43:41:7a:3c:2b:39:9f:bf:52:ac:
3e:ff:aa:11:ef:bb:0d:33:05:49:08:a3:87:6c:37:
e0:0c:73:48:fc:43:6b:9e:94:7c:30:f4:26:05:99:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:53:1E:FD:AA:FF:C4:B1:D1:35:AA:0A:7A:21:38:C9:49:2B:82:4E
X509v3 Authority Key Identifier:
keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132322e302f32342d3234203d3e203237373135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.122.0/24
Signature Algorithm: sha256WithRSAEncryption
39:cc:ed:40:bc:a9:06:d1:d2:a5:f0:30:be:be:31:51:0c:d7:
0a:fc:68:ba:07:aa:6b:95:95:78:9d:07:d9:00:1d:fb:01:5e:
9f:5f:b3:6d:b7:55:ae:8f:63:e4:6e:4a:aa:a4:9f:df:64:a3:
04:cc:69:c1:fb:1c:e9:c8:de:04:2a:30:91:4a:ff:fe:28:fe:
c0:cb:bd:f1:e2:f2:dd:40:a6:eb:5b:3f:17:0b:af:6b:23:df:
05:ba:9b:aa:8b:6a:e8:d8:28:15:00:38:4f:e8:c7:5e:98:fb:
fc:6a:ac:5a:74:63:80:2b:22:23:c7:61:e8:ba:64:46:20:6c:
dd:33:b0:35:7b:9c:ae:d4:eb:5c:8d:fd:9c:ed:74:bd:73:9e:
22:31:af:1f:c9:c8:d4:2f:7c:ed:aa:8e:9d:49:86:a1:88:86:
cf:67:d9:56:bf:33:90:e2:b1:28:5c:66:e1:30:46:7c:39:ba:
2d:e7:06:92:62:c4:34:7c:a2:92:e7:c8:0a:60:4f:5c:f0:f2:
ca:c7:be:da:d2:f8:72:c7:0e:63:eb:49:c0:cc:c7:56:d2:62:
e8:66:25:a4:6f:78:00:28:5c:af:40:51:d4:8a:e0:e1:90:16:
b7:dc:a8:49:69:4f:68:bb:f4:91:0d:16:e8:5c:f8:6c:e6:fe:
9c:a0:13:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 19:25:28 2024 by rpki-client on console-ams.rpki-client.org