Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34342e302f32332d3233203d3e20323632333639.roa
File: 3133382e302e34342e302f32332d3233203d3e20323632333639.roa (raw, json)
Hash identifier: uqwDJ94QsYyShvn/C2snpAkLQcooxTMbqhl6v855JPk=
Subject key identifier: CE:A0:77:D5:A4:10:56:C6:02:3C:12:7E:68:72:D3:06:0B:67:DC:CE
Certificate issuer: /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial: 20648021450988A8CE1CD4E81D5DE9AB1EB400AA
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34342e302f32332d3233203d3e20323632333639.roa
Signing time: Wed 03 Apr 2024 18:33:00 +0000
ROA not before: Wed 03 Apr 2024 18:28:00 +0000
ROA not after: Wed 02 Apr 2025 18:33:00 +0000
asID: 262369
IP address blocks: 138.0.44.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:64:80:21:45:09:88:a8:ce:1c:d4:e8:1d:5d:e9:ab:1e:b4:00:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
Validity
Not Before: Apr 3 18:28:00 2024 GMT
Not After : Apr 2 18:33:00 2025 GMT
Subject: CN=CEA077D5A41056C6023C127E6872D3060B67DCCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:3b:30:fa:35:bd:f1:1b:0b:40:48:e8:3f:
ab:2e:0a:b0:92:52:e7:a9:16:fd:27:20:05:33:8c:
ae:b5:ff:2e:49:7c:b2:48:a5:86:f1:14:ea:45:24:
73:fc:34:90:ba:77:9c:62:2b:2f:34:fc:11:27:2c:
51:0d:13:d3:06:07:61:fe:cb:96:42:a3:60:5a:a1:
b0:07:2e:59:48:dc:a5:9a:5a:13:2b:9c:2b:64:8a:
ad:b6:12:54:11:0d:69:c4:c8:f1:04:e5:38:c3:c7:
14:30:a4:81:5a:4d:e8:38:f6:f4:b8:ac:ca:4e:a3:
da:7a:cb:e8:09:75:f9:2f:b5:48:9b:40:21:ab:1e:
40:07:27:d5:a0:5d:14:7b:3f:19:17:fa:f2:f1:a3:
0f:77:cf:ee:12:01:d8:97:f1:57:ab:e0:9e:e4:b0:
e7:97:e2:0a:3a:86:a8:df:00:a9:e5:ff:e7:ec:c0:
87:b9:55:4e:0a:64:dc:fb:44:2c:54:fe:b5:17:4f:
20:9a:56:6b:fa:8d:79:5f:e3:3c:ec:19:45:8c:7c:
c3:6e:a3:2f:32:53:1e:79:3f:ae:9e:06:7a:c6:7b:
e4:10:e1:25:13:d0:0b:c6:0c:b3:68:a2:30:9e:d0:
06:7f:2e:5b:ef:32:b1:8c:bf:aa:29:0e:eb:d7:ec:
a5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A0:77:D5:A4:10:56:C6:02:3C:12:7E:68:72:D3:06:0B:67:DC:CE
X509v3 Authority Key Identifier:
keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34342e302f32332d3233203d3e20323632333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.44.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:6f:bb:42:e2:5a:3f:dd:ab:d2:8d:5d:6e:76:1f:50:6a:a3:
0a:d5:f6:e2:8a:62:80:23:05:ec:17:ba:c5:5d:2e:19:d7:f2:
20:71:50:91:de:b7:54:85:49:6d:57:74:0d:b8:69:ac:bf:54:
65:b6:47:c1:e7:3a:9c:14:ca:46:1f:b3:5f:e3:97:ff:c7:f5:
db:94:2c:10:b3:b8:5a:bf:26:4b:47:9a:dd:4a:17:19:76:f7:
a6:dc:2f:bf:c5:8f:99:a0:1f:ed:b0:ad:e5:20:85:ab:94:10:
1c:93:5f:98:8d:09:35:5f:2b:c0:23:ed:fc:a3:60:53:48:00:
d3:9c:d8:97:0c:b5:1e:c3:6f:71:07:13:aa:84:3c:0a:10:ca:
47:44:5c:e6:d0:71:03:c8:ab:fa:e2:09:13:40:37:58:7f:c9:
37:30:69:af:6e:9a:28:46:df:29:94:dc:fb:74:f0:65:6d:97:
0f:93:86:39:16:f5:b1:8b:a0:04:20:4d:8e:a1:3b:d0:8d:90:
25:31:74:e6:bb:f8:23:a6:ab:1f:06:19:0a:ae:73:dd:81:9e:
03:ae:ed:99:16:1f:cd:95:66:61:64:68:cd:e2:9b:1e:22:27:
d8:f0:4e:c1:f9:34:a2:13:ea:7d:b8:ea:80:9b:e6:7c:a4:0f:
fb:7a:f6:13
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIGSAIUUJiKjOHNToHV3pqx60AKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y0NkExMzIzNDgxNDNFN0I2MEQ1NEFDNTk5QkU3NDg2
OEIwMDgyOTAeFw0yNDA0MDMxODI4MDBaFw0yNTA0MDIxODMzMDBaMDMxMTAvBgNV
BAMTKENFQTA3N0Q1QTQxMDU2QzYwMjNDMTI3RTY4NzJEMzA2MEI2N0RDQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKcDsw+jW98RsLQEjoP6suCrCS
UuepFv0nIAUzjK61/y5JfLJIpYbxFOpFJHP8NJC6d5xiKy80/BEnLFENE9MGB2H+
y5ZCo2BaobAHLllI3KWaWhMrnCtkiq22ElQRDWnEyPEE5TjDxxQwpIFaTeg49vS4
rMpOo9p6y+gJdfkvtUibQCGrHkAHJ9WgXRR7PxkX+vLxow93z+4SAdiX8Ver4J7k
sOeX4go6hqjfAKnl/+fswIe5VU4KZNz7RCxU/rUXTyCaVmv6jXlf4zzsGUWMfMNu
oy8yUx55P66eBnrGe+QQ4SUT0AvGDLNoojCe0AZ/LlvvMrGMv6opDuvX7KVhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUzqB31aQQVsYCPBJ+aHLTBgtn3M4wHwYDVR0j
BBgwFoAUz0ahMjSBQ+e2DVSsWZvnSGiwCCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWFyYWZGZ25SYVk1TGlhWE5HYVZpdWlGU3RWd0dvS1dqMUs1N3I1dzJ3
dXIvMS9DRjQ2QTEzMjM0ODE0M0U3QjYwRDU0QUM1OTlCRTc0ODY4QjAwODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGNDZBMTMyMzQ4MTQzRTdC
NjBENTRBQzU5OUJFNzQ4NjhCMDA4MjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhcmFmRmduUmFZNUxpYVhOR2FWaXVpRlN0VndHb0tXajFLNTdyNXcyd3VyLzEv
MzEzMzM4MmUzMDJlMzQzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjMz
MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAYoALDANBgkqhkiG9w0BAQsFAAOCAQEAP2+7QuJaP92r
0o1dbnYfUGqjCtX24opigCMF7Be6xV0uGdfyIHFQkd63VIVJbVd0DbhprL9UZbZH
wec6nBTKRh+zX+OX/8f125QsELO4Wr8mS0ea3UoXGXb3ptwvv8WPmaAf7bCt5SCF
q5QQHJNfmI0JNV8rwCPt/KNgU0gA05zYlwy1HsNvcQcTqoQ8ChDKR0Rc5tBxA8ir
+uIJE0A3WH/JNzBpr26aKEbfKZTc+3TwZW2XD5OGORb1sYugBCBNjqE70I2QJTF0
5rv4I6arHwYZCq5z3YGeA67tmRYfzZVmYWRozeKbHiIn2PBOwfk0ohPqfbjqgJvm
fKQP+3r2Ew==
-----END CERTIFICATE-----
Generated at Tue Nov 12 21:17:14 2024 by rpki-client on console-ams.rpki-client.org