Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3235302e302f32342d3234203d3e20323632343738.roa
File: 3137372e34372e3235302e302f32342d3234203d3e20323632343738.roa (raw, json)
Hash identifier: +oLk9u650hWuk4T56pqRQyVvbWVKsVjHiINJuiQIHdM=
Subject key identifier: 32:C1:7D:A1:14:05:FF:72:A4:A5:F0:BB:88:C0:38:80:A2:83:8B:3D
Certificate issuer: /CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
Certificate serial: 3FBC8AC348BA28C90227D4930321C21555B9D528
Authority key identifier: 83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3235302e302f32342d3234203d3e20323632343738.roa
Signing time: Tue 28 Nov 2023 14:07:23 +0000
ROA not before: Tue 28 Nov 2023 14:02:23 +0000
ROA not after: Tue 26 Nov 2024 14:07:23 +0000
asID: 262478
IP address blocks: 177.47.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 13:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:bc:8a:c3:48:ba:28:c9:02:27:d4:93:03:21:c2:15:55:b9:d5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
Validity
Not Before: Nov 28 14:02:23 2023 GMT
Not After : Nov 26 14:07:23 2024 GMT
Subject: CN=32C17DA11405FF72A4A5F0BB88C03880A2838B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:e5:a0:5e:76:01:0d:76:e7:6a:14:e8:b8:
71:f6:07:60:19:de:3a:f0:a2:23:b4:fc:98:59:4c:
17:fb:9f:1f:a5:93:d6:1b:e3:e8:b0:9e:c2:66:58:
70:80:75:b7:f4:dd:16:ec:55:e8:dd:82:30:94:d9:
b5:18:2e:29:9e:fd:26:9d:b7:b1:44:4d:96:96:f6:
07:17:08:80:14:e8:4c:46:ef:ff:6d:5d:ba:50:7c:
0f:62:48:96:2f:e6:50:09:de:1a:b4:85:82:bc:c9:
8f:1b:3e:9c:74:8f:4b:39:13:dc:e6:35:af:a3:de:
4f:d1:11:7d:0b:a7:d8:3c:49:74:03:1b:a7:67:de:
01:82:09:ba:90:a3:82:58:31:07:e5:eb:21:72:83:
ee:91:c6:70:56:ce:5f:52:33:ef:f8:c0:82:8f:d0:
dc:a0:7a:2a:14:7d:67:bf:7d:79:b4:d0:19:ed:78:
56:b4:f2:ce:04:18:2a:61:b0:6b:b9:df:91:f0:4d:
d1:88:46:63:39:27:2d:61:21:e2:e8:8e:a7:9a:cf:
09:e9:d4:e1:ae:d0:67:99:fd:65:5c:7a:a7:d5:53:
a4:d1:33:e2:d0:5a:7c:52:2d:f9:dd:ab:71:4e:9c:
7c:5f:55:03:51:7c:b1:a3:e2:10:83:37:5c:93:79:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C1:7D:A1:14:05:FF:72:A4:A5:F0:BB:88:C0:38:80:A2:83:8B:3D
X509v3 Authority Key Identifier:
keyid:83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3235302e302f32342d3234203d3e20323632343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.47.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:db:64:08:7c:3c:ad:3b:1c:4f:93:71:aa:98:fd:01:19:a0:
66:44:0f:89:bd:ea:68:4f:19:b9:f4:a1:4c:70:6e:04:5f:14:
db:9d:9f:b2:9a:da:32:da:e8:f3:ab:d2:dd:87:14:44:fa:c5:
4d:0e:9c:a7:cc:39:cd:cc:0d:a8:13:73:52:d9:2b:ad:09:b3:
d1:68:65:45:26:97:a0:75:f8:06:c5:20:7e:4c:76:a4:8a:ee:
3d:85:5e:4d:05:ae:32:7b:b5:11:ae:f1:84:fc:b6:62:8b:b0:
a3:82:d9:27:a0:5e:9a:8e:40:91:2a:2c:82:df:78:bf:5e:f9:
a4:b5:03:98:fd:cb:cd:42:21:72:53:5c:e9:f6:77:95:16:11:
67:08:74:43:de:70:32:81:e4:d6:43:a9:2d:77:a8:2f:94:00:
f6:c9:18:e1:4d:20:09:96:94:50:db:14:52:1c:b0:c0:2e:c5:
ee:5c:17:22:bc:8a:56:f7:02:4d:96:80:2d:87:49:77:a1:aa:
73:79:a4:64:18:ae:05:b3:7d:a3:e7:25:07:c2:56:d0:dd:3f:
a4:a9:d1:71:5f:a3:44:08:77:cd:6a:ea:3e:e3:80:e0:ad:7b:
25:07:fc:00:c9:19:8b:b0:b1:d1:28:54:ac:8c:38:4c:31:4f:
a3:ff:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 17:42:51 2024 by rpki-client on console-fra.rpki-client.org