Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33342e302f32332d3233203d3e20323634323437.roa
File: 3133382e3131382e33342e302f32332d3233203d3e20323634323437.roa (raw, json)
Hash identifier: k26LLzhAG+hg0d9bl7S+ly+j/pHOwFYEH1q0ef0duNg=
Subject key identifier: E8:8F:7A:62:C4:46:8E:67:13:69:0C:53:1A:F3:57:AF:A5:28:94:1C
Certificate issuer: /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial: 6FF668B552FD703B07871A0103A233D4AA6A77C3
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33342e302f32332d3233203d3e20323634323437.roa
Signing time: Wed 03 Apr 2024 18:31:19 +0000
ROA not before: Wed 03 Apr 2024 18:26:19 +0000
ROA not after: Wed 02 Apr 2025 18:31:19 +0000
asID: 264247
IP address blocks: 138.118.34.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f6:68:b5:52:fd:70:3b:07:87:1a:01:03:a2:33:d4:aa:6a:77:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Validity
Not Before: Apr 3 18:26:19 2024 GMT
Not After : Apr 2 18:31:19 2025 GMT
Subject: CN=E88F7A62C4468E6713690C531AF357AFA528941C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:e5:87:c3:d0:ea:bb:d6:3f:32:c7:d4:fa:
51:04:84:35:17:2e:7c:73:2a:f0:b6:cc:b1:34:69:
bb:21:20:fe:13:3c:c1:2a:5c:c8:8e:4d:ff:c7:7d:
1a:e8:30:28:44:be:40:0e:fb:d8:34:8c:fc:3e:4b:
be:d3:b4:c1:10:b8:8d:91:e5:79:2c:47:bf:f2:8a:
fc:02:3b:b4:a2:7a:6c:a4:7d:79:61:73:bd:84:3d:
ae:56:66:67:1a:8b:ac:97:95:1a:4c:fc:af:1c:8e:
72:87:f6:38:81:45:9b:25:9a:0c:c9:73:70:29:a7:
c3:86:9e:71:e3:ed:dd:16:56:9d:ae:96:f2:b5:3b:
28:78:a1:a3:ae:b1:b2:ae:5d:de:ec:5c:8e:fb:05:
42:ec:12:84:d9:57:60:51:67:52:1c:70:f8:8d:aa:
75:80:fa:54:04:4e:e8:3a:d7:de:68:a4:4d:7e:d1:
26:1b:c6:a6:c4:6e:ca:df:83:ee:f7:d8:e4:f3:1f:
f5:64:e0:74:11:a0:94:31:09:17:83:d6:c3:c9:6f:
ac:3a:a1:55:73:49:1e:45:16:aa:2d:5c:c4:89:59:
ce:f0:e6:33:4e:00:8c:b5:b7:49:68:5f:b0:34:10:
64:29:4b:08:6f:00:41:d1:b7:8a:10:44:33:6e:02:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8F:7A:62:C4:46:8E:67:13:69:0C:53:1A:F3:57:AF:A5:28:94:1C
X509v3 Authority Key Identifier:
keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33342e302f32332d3233203d3e20323634323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.34.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:34:5b:83:d2:c2:2d:88:e2:63:0e:42:d8:d7:7d:1e:68:01:
25:35:f1:6b:41:8c:5f:cc:26:00:24:3e:5d:cc:dd:e9:7e:02:
eb:33:a1:04:12:6f:58:63:31:a7:1b:99:2e:6c:33:bf:79:36:
77:cc:04:2e:15:bc:5f:a7:83:ab:ef:6f:43:c6:5b:06:58:da:
d6:5e:67:21:95:6b:1d:f4:86:2d:e1:2e:6b:07:ab:98:02:bc:
c5:d9:8f:66:31:cb:9e:46:88:53:c1:f3:bc:aa:e8:41:29:e8:
96:e1:dc:0d:e5:73:eb:4b:e1:29:3c:0d:c7:2f:02:5b:9b:5b:
2a:ec:c1:16:ad:1b:92:e1:a3:cd:5d:2a:b2:ab:f7:bd:62:ba:
fb:8a:79:5a:e1:aa:b8:d5:c6:fa:ba:98:ef:73:c3:ef:c4:c2:
30:34:3e:ff:8b:cc:bf:3c:37:f4:08:f5:0a:44:5f:25:47:f9:
7c:3a:78:9a:c7:25:85:7e:1e:fd:38:8b:ba:ad:33:8c:ec:3b:
d3:63:e8:65:69:dc:76:2f:25:f5:44:e0:d8:a3:76:b5:2a:e9:
29:0f:77:f4:dc:bf:6e:b7:a6:57:53:4f:37:76:67:f2:a0:ee:
c6:5e:6e:c5:eb:6a:4b:71:44:7f:57:8f:77:77:79:4c:54:02:
14:f1:09:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:13 2025 by rpki-client