Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34342e302f32342d3234203d3e20323632333639.roa
File: 3133382e302e34342e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier: 1XxHRI6/dhgIvUycXyp8HH1Ygqf0R8RJcNtdmn/atU0=
Subject key identifier: E6:0B:21:77:BC:61:95:EA:17:EF:CE:5A:E5:A2:50:AC:3A:4F:E3:DB
Certificate issuer: /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial: 1F77F6015425CB75F75BE9D60390407E7D24C071
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34342e302f32342d3234203d3e20323632333639.roa
Signing time: Wed 03 Apr 2024 18:33:00 +0000
ROA not before: Wed 03 Apr 2024 18:28:00 +0000
ROA not after: Wed 02 Apr 2025 18:33:00 +0000
asID: 262369
IP address blocks: 138.0.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:77:f6:01:54:25:cb:75:f7:5b:e9:d6:03:90:40:7e:7d:24:c0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
Validity
Not Before: Apr 3 18:28:00 2024 GMT
Not After : Apr 2 18:33:00 2025 GMT
Subject: CN=E60B2177BC6195EA17EFCE5AE5A250AC3A4FE3DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:21:ce:f9:eb:1c:e7:1e:c0:de:8d:d9:39:f7:
c0:27:0a:a5:e5:ae:84:45:66:30:e2:6b:df:95:56:
b5:38:b5:67:e5:93:c8:24:80:0c:e8:58:4e:ba:bd:
18:f0:b4:ea:28:ba:f6:e7:c1:5e:5b:04:9b:78:3c:
01:08:ed:7b:8a:fc:c0:02:23:ac:d7:be:40:8b:0a:
84:d7:12:45:40:6e:4a:0f:fb:32:75:cb:97:fc:61:
52:70:44:69:64:4e:c2:25:58:2e:dd:7b:f2:ea:74:
ea:4c:1a:ad:cf:33:d3:a5:da:fc:2e:16:38:4c:db:
0b:49:c0:af:0b:04:35:48:df:c9:a3:b0:22:b8:cb:
4e:1a:f2:1f:71:b5:9c:45:40:0e:88:c7:fa:5d:86:
e3:5b:62:42:e0:0a:27:7d:20:30:76:a2:c9:0a:6d:
54:d6:4a:1a:ad:78:29:30:94:87:4f:6a:47:20:47:
68:65:a6:b7:3b:7f:45:ff:3a:89:36:a4:85:2d:b2:
d0:60:c8:e9:87:4a:76:16:3e:be:f1:8a:10:bc:c4:
1c:26:ce:4b:df:95:49:c4:27:bd:c1:97:ee:66:78:
f4:47:96:09:47:47:b7:d7:fa:da:79:a5:2b:f9:f4:
0f:a9:ab:23:fc:54:e6:57:c6:d6:33:15:1e:61:27:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0B:21:77:BC:61:95:EA:17:EF:CE:5A:E5:A2:50:AC:3A:4F:E3:DB
X509v3 Authority Key Identifier:
keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34342e302f32342d3234203d3e20323632333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.44.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:5b:61:7b:b3:04:9d:18:74:7a:ee:11:b1:c4:1d:20:01:9a:
31:3a:40:34:f5:a5:04:a8:b3:96:dd:7e:e2:c5:db:06:2f:48:
1c:e0:80:83:af:2c:5f:c5:84:8d:81:50:e7:1e:c1:7c:02:7d:
12:d5:34:d7:30:3b:75:20:02:f6:c0:e6:02:88:62:c6:c7:c7:
98:39:95:0b:86:6e:2e:9c:a4:7a:09:cc:92:dc:36:1c:01:90:
4a:31:ad:7f:0a:3b:d6:3a:d7:ca:7a:97:cf:80:6a:e4:1c:9a:
b4:a7:95:53:ef:5d:f4:54:e9:fc:62:e3:ff:b9:d1:52:a3:27:
b2:7b:bd:b6:f5:b6:ab:34:24:64:c5:73:02:a6:34:de:c7:e7:
e7:df:6f:07:a8:72:4e:ee:f3:24:88:65:cd:ac:63:46:6d:ea:
eb:f4:03:c0:9f:f8:1b:3c:0a:ea:c1:da:78:62:c6:5c:ff:cb:
d5:81:2d:0e:23:bc:fc:e4:5f:2c:4f:33:c0:dd:a2:c6:ed:6a:
9a:02:95:1c:10:c4:e5:64:e1:48:9d:8f:7a:ab:62:46:7a:e0:
ac:84:92:d8:63:a1:17:a2:bc:05:c0:a1:31:a9:3c:e9:48:57:
cb:4f:fc:ad:78:8f:12:a7:f7:38:a6:52:1a:77:b3:f4:88:f2:
20:02:e0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 21:17:14 2024 by rpki-client on console-ams.rpki-client.org