Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34362e302f32332d3233203d3e20323632333639.roa
File: 3133382e302e34362e302f32332d3233203d3e20323632333639.roa (raw, json)
Hash identifier: PwPhso+8jcIJM402qowefC/KHwDjk/kqk4nYrio8WOs=
Subject key identifier: 91:5F:CB:DD:FD:A6:9D:81:DF:4F:7E:21:4F:9B:67:CE:3B:5C:89:C5
Certificate issuer: /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial: 4B3450EB1705C84928BC734206DE7C8BF2583DE7
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34362e302f32332d3233203d3e20323632333639.roa
Signing time: Wed 03 Apr 2024 18:33:00 +0000
ROA not before: Wed 03 Apr 2024 18:28:00 +0000
ROA not after: Wed 02 Apr 2025 18:33:00 +0000
asID: 262369
IP address blocks: 138.0.46.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:34:50:eb:17:05:c8:49:28:bc:73:42:06:de:7c:8b:f2:58:3d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
Validity
Not Before: Apr 3 18:28:00 2024 GMT
Not After : Apr 2 18:33:00 2025 GMT
Subject: CN=915FCBDDFDA69D81DF4F7E214F9B67CE3B5C89C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:dc:6f:fb:69:a2:16:e6:54:70:8e:59:38:
8c:29:af:b6:cc:a0:a5:9e:56:50:aa:f0:88:4d:c5:
6f:6c:06:d4:06:b1:58:1f:c1:91:c1:43:cc:56:72:
18:68:c1:cf:e4:ed:f5:28:10:0f:d9:ff:c6:c9:52:
af:0b:3f:63:9c:79:65:d0:07:8f:bf:b5:bd:53:67:
47:19:6e:69:14:51:be:a0:c6:b0:d4:e2:5b:ef:41:
4d:b4:f4:4d:ff:d0:53:17:a2:e8:ea:98:bf:dd:17:
cb:d5:3f:49:d4:ca:19:f3:31:f7:f8:7b:d8:21:15:
b0:c1:f2:c1:59:9d:91:65:95:6e:a3:a0:d7:54:47:
35:c9:ca:77:ca:13:71:5b:36:07:61:16:5b:b8:05:
b0:f0:50:f3:41:58:63:2a:b6:84:6d:25:de:66:47:
b9:38:3d:45:89:58:44:ed:64:5b:81:33:c2:8e:26:
f3:c9:04:52:76:55:a9:58:5b:95:8d:5f:5d:61:90:
ab:0e:35:36:fd:9b:6d:47:4d:0e:94:fb:81:47:3a:
dc:ca:9f:de:41:2e:5e:30:54:81:31:ad:e0:49:8f:
6f:91:95:19:ba:2b:c5:f2:f4:c3:e0:ae:6e:74:31:
b8:9d:5d:19:d3:c5:2d:b0:e6:66:81:f0:f2:c8:0e:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:CB:DD:FD:A6:9D:81:DF:4F:7E:21:4F:9B:67:CE:3B:5C:89:C5
X509v3 Authority Key Identifier:
keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34362e302f32332d3233203d3e20323632333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.46.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:16:b2:15:ad:ca:2f:fc:58:23:dc:ff:4d:e2:ad:f0:5d:0f:
4a:81:ff:43:7d:2f:6c:2e:db:7c:1f:7d:b0:76:34:24:03:8c:
1d:b1:38:5c:6d:f8:94:88:ba:69:2f:5c:b4:5a:45:d5:00:75:
99:4a:e3:6d:a6:ec:35:cf:a7:10:bb:bb:77:4b:86:97:ce:00:
c5:d8:db:14:eb:6e:a8:7e:d7:ff:be:ce:3b:1f:61:f3:7b:33:
df:f3:6a:f6:49:ea:8f:9d:ff:6a:68:5c:b8:dc:d8:3e:9a:bf:
49:32:30:0b:07:b5:60:72:70:7d:9d:74:ff:40:9b:13:27:9c:
3a:9d:40:9b:7e:a3:ad:d4:7a:1f:ec:03:ff:d3:81:c2:ec:db:
47:b3:6a:89:6e:8c:27:79:ca:6f:0b:0e:a8:12:97:e9:1e:f0:
16:ea:21:68:18:2a:b3:d1:56:67:55:7c:2c:32:12:3e:68:a7:
71:b6:4d:48:c4:d1:a8:0c:24:06:83:6f:e8:03:97:d4:c1:3b:
fd:87:b8:b4:02:bd:9c:39:d7:97:a3:5e:54:75:db:02:c5:6b:
ef:cf:c0:60:7f:09:fc:ff:82:6c:57:b8:71:89:2e:b0:c0:e6:
b7:70:ce:8e:30:5b:f4:c1:2c:bf:d7:cf:bd:69:6c:61:49:2f:
21:82:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 21:17:14 2024 by rpki-client on console-ams.rpki-client.org