Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/3133382e35392e34352e302f32342d3234203d3e20323634353935.roa
File: 3133382e35392e34352e302f32342d3234203d3e20323634353935.roa (raw, json)
Hash identifier: wFtlNFc7N0isjcZFF/WII2sHOdkdyxs2nxQd+tQHSfY=
Subject key identifier: DF:95:1F:CE:C9:36:BE:C9:7E:DC:DF:43:AC:91:CD:D4:F1:94:B4:DD
Certificate issuer: /CN=C7CDE00B8FAF822929EE8184DED9A4F02250D9CB
Certificate serial: 38070A0296EB8540ECEBE267985367FBA3FA7604
Authority key identifier: C7:CD:E0:0B:8F:AF:82:29:29:EE:81:84:DE:D9:A4:F0:22:50:D9:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CDE00B8FAF822929EE8184DED9A4F02250D9CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/3133382e35392e34352e302f32342d3234203d3e20323634353935.roa
Signing time: Fri 05 Apr 2024 04:35:40 +0000
ROA not before: Fri 05 Apr 2024 04:30:40 +0000
ROA not after: Fri 04 Apr 2025 04:35:40 +0000
asID: 264595
IP address blocks: 138.59.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jun 2024 23:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:07:0a:02:96:eb:85:40:ec:eb:e2:67:98:53:67:fb:a3:fa:76:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7CDE00B8FAF822929EE8184DED9A4F02250D9CB
Validity
Not Before: Apr 5 04:30:40 2024 GMT
Not After : Apr 4 04:35:40 2025 GMT
Subject: CN=DF951FCEC936BEC97EDCDF43AC91CDD4F194B4DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:2c:a8:7f:44:7f:a8:ff:30:10:13:17:c4:
e9:b2:1d:21:9e:c7:00:fb:87:b2:7c:62:a7:55:fc:
1e:85:fe:7d:e8:88:2c:ea:0f:d5:e8:af:8e:56:ca:
e2:65:80:7c:89:3e:51:2b:06:2e:61:32:86:98:fe:
1d:fd:6e:69:be:37:93:c0:d6:8e:c2:c4:83:37:90:
3b:fd:51:0d:75:c6:64:bf:18:ee:ab:5c:f5:55:0e:
17:91:4d:97:57:22:3b:49:6f:4f:cb:e7:a1:e4:1c:
26:d9:03:25:60:1a:1a:83:68:50:0c:57:c0:3f:49:
fa:52:8b:bb:fc:4d:1d:57:1c:59:37:4c:41:94:30:
56:13:11:80:19:ce:b9:1d:50:03:1f:c3:f8:2e:39:
27:32:a8:f0:3a:de:04:a4:95:e0:18:b1:c8:43:8e:
a8:3f:a1:34:ec:46:69:2e:46:cf:bc:36:07:01:cd:
1b:2b:0f:83:d9:96:a4:52:f4:91:47:18:f0:4e:82:
fc:f0:1a:cb:a1:95:5b:bd:5f:84:4b:69:7c:63:d2:
7a:73:78:60:a1:2b:d2:9d:63:2b:2c:73:c2:56:f6:
23:78:d1:61:b9:fe:e0:e9:f6:89:f0:08:39:bf:82:
ad:78:51:2d:ba:73:bc:a1:1e:f9:d2:0a:b1:27:e6:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:95:1F:CE:C9:36:BE:C9:7E:DC:DF:43:AC:91:CD:D4:F1:94:B4:DD
X509v3 Authority Key Identifier:
keyid:C7:CD:E0:0B:8F:AF:82:29:29:EE:81:84:DE:D9:A4:F0:22:50:D9:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/C7CDE00B8FAF822929EE8184DED9A4F02250D9CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CDE00B8FAF822929EE8184DED9A4F02250D9CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/3133382e35392e34352e302f32342d3234203d3e20323634353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.45.0/24
Signature Algorithm: sha256WithRSAEncryption
04:df:0b:ab:de:da:d3:c3:1e:8f:34:08:2d:e3:e0:cb:d7:36:
d5:10:ab:eb:73:6a:bd:8e:0e:d0:61:32:99:7a:f1:03:0e:ec:
19:fb:d5:c7:ee:62:60:a8:59:23:15:5b:85:f2:6e:3f:f4:0c:
7b:c1:61:92:e9:7d:cf:ce:e4:ed:8b:f5:57:cd:a9:ed:b7:a7:
60:f2:f0:80:7f:1b:47:84:65:7b:7c:61:43:07:83:45:dc:b4:
42:18:e0:2e:83:8d:5b:d6:33:5e:10:80:1d:47:ae:08:6a:90:
5f:14:1a:f1:7b:63:c6:6e:fe:21:e8:a5:21:49:60:ec:14:ae:
fa:4f:d5:bd:d1:c5:c8:7a:44:b4:41:6e:4e:96:ee:14:14:76:
24:6f:64:17:17:62:07:99:13:0c:27:86:57:e9:29:fb:de:55:
e8:a4:3f:8f:54:1b:ba:b6:db:5c:f6:c0:c9:78:31:64:43:1d:
bc:bb:ac:3f:47:34:f4:12:f2:b6:f5:42:ab:bc:16:ca:92:68:
64:c9:be:d3:5a:1b:92:9f:bf:25:ca:2b:a5:7a:a1:f7:84:e3:
2e:27:53:cc:3f:ea:9f:c1:eb:10:bb:fc:51:ba:ea:97:46:ad:
e4:3f:67:22:fb:07:51:f7:c3:58:77:46:d4:08:54:6c:b9:28:
c7:c6:be:2d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOAcKApbrhUDs6+JnmFNn+6P6dgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdDREUwMEI4RkFGODIyOTI5RUU4MTg0REVEOUE0RjAy
MjUwRDlDQjAeFw0yNDA0MDUwNDMwNDBaFw0yNTA0MDQwNDM1NDBaMDMxMTAvBgNV
BAMTKERGOTUxRkNFQzkzNkJFQzk3RURDREY0M0FDOTFDREQ0RjE5NEI0REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiCyof0R/qP8wEBMXxOmyHSGe
xwD7h7J8YqdV/B6F/n3oiCzqD9Xor45WyuJlgHyJPlErBi5hMoaY/h39bmm+N5PA
1o7CxIM3kDv9UQ11xmS/GO6rXPVVDheRTZdXIjtJb0/L56HkHCbZAyVgGhqDaFAM
V8A/SfpSi7v8TR1XHFk3TEGUMFYTEYAZzrkdUAMfw/guOScyqPA63gSkleAYschD
jqg/oTTsRmkuRs+8NgcBzRsrD4PZlqRS9JFHGPBOgvzwGsuhlVu9X4RLaXxj0npz
eGChK9KdYyssc8JW9iN40WG5/uDp9onwCDm/gq14US26c7yhHvnSCrEn5vMXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU35Ufzsk2vsl+3N9DrJHN1PGUtN0wHwYDVR0j
BBgwFoAUx83gC4+vgikp7oGE3tmk8CJQ2cswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVQzOU5TV2laZzNlQXJLRzdYWUtBcFFUV2E2QmdMNURvamR5YmFqR3RG
VXkvMS9DN0NERTAwQjhGQUY4MjI5MjlFRTgxODRERUQ5QTRGMDIyNTBEOUNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3Q0RFMDBCOEZBRjgyMjky
OUVFODE4NERFRDlBNEYwMjI1MEQ5Q0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VUMzlOU1dpWmczZUFyS0c3WFlLQXBRVFdhNkJnTDVEb2pkeWJhakd0RlV5LzEv
MzEzMzM4MmUzNTM5MmUzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzUzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAijstMA0GCSqGSIb3DQEBCwUAA4IBAQAE3wur3trT
wx6PNAgt4+DL1zbVEKvrc2q9jg7QYTKZevEDDuwZ+9XH7mJgqFkjFVuF8m4/9Ax7
wWGS6X3PzuTti/VXzantt6dg8vCAfxtHhGV7fGFDB4NF3LRCGOAug41b1jNeEIAd
R64IapBfFBrxe2PGbv4h6KUhSWDsFK76T9W90cXIekS0QW5Olu4UFHYkb2QXF2IH
mRMMJ4ZX6Sn73lXopD+PVBu6tttc9sDJeDFkQx28u6w/RzT0EvK29UKrvBbKkmhk
yb7TWhuSn78lyiuleqH3hOMuJ1PMP+qfwesQu/xRuuqXRq3kP2ci+wdR98NYd0bU
CFRsuSjHxr4t
-----END CERTIFICATE-----
Generated at Sat Jun 8 23:59:26 2024 by rpki-client on console-fra.rpki-client.org