Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e36382e302f32342d3234203d3e20323632333639.roa
File: 3134332e3133372e36382e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier: jxB8qqh2HVIb2NW6yp7+HPVFPNJkllHnCQeYQiuimfU=
Subject key identifier: 28:5F:25:C2:FF:9C:EF:86:96:01:C9:04:D6:D7:20:6B:FE:87:73:92
Certificate issuer: /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial: 5538FE8788624E4F8AD53BA0BDEAADD1EFD12EC0
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e36382e302f32342d3234203d3e20323632333639.roa
Signing time: Wed 03 Apr 2024 18:33:01 +0000
ROA not before: Wed 03 Apr 2024 18:28:01 +0000
ROA not after: Wed 02 Apr 2025 18:33:01 +0000
asID: 262369
IP address blocks: 143.137.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:38:fe:87:88:62:4e:4f:8a:d5:3b:a0:bd:ea:ad:d1:ef:d1:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
Validity
Not Before: Apr 3 18:28:01 2024 GMT
Not After : Apr 2 18:33:01 2025 GMT
Subject: CN=285F25C2FF9CEF869601C904D6D7206BFE877392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:5c:91:46:35:4e:d9:de:ab:4b:b5:89:7b:
ad:8e:9f:81:4c:0e:6c:09:96:1b:31:c2:5d:20:83:
ac:1b:63:f0:20:0a:16:09:05:09:29:5d:2d:e5:24:
f5:c5:38:bf:24:d1:ea:06:04:3e:6e:e8:86:b5:82:
a0:62:17:c2:3c:29:6d:30:6a:e9:fa:7a:20:10:b0:
ac:8d:c6:70:f7:42:16:1d:13:49:ce:ed:82:95:97:
4e:e0:03:a8:3a:eb:99:7a:f0:2f:bd:9c:8a:1e:21:
04:83:03:9b:8e:26:23:d8:c8:92:0b:bd:5c:f9:3b:
7b:4d:f1:71:c1:bd:10:2e:61:02:b2:6c:f0:5d:0e:
53:af:b4:ff:89:a3:75:bb:fe:e9:5a:d8:f6:39:36:
60:27:6f:9c:78:40:f0:79:88:1e:dc:61:20:83:69:
3d:2f:f6:ec:ee:f0:fa:5e:6d:8f:ae:86:44:43:d1:
46:c3:01:4c:14:f8:bc:ce:4b:51:b9:f4:82:87:18:
0a:16:95:f8:4c:fe:f5:a1:63:fd:65:d6:e2:0f:bb:
b7:c3:f5:1f:ab:3a:0f:f6:89:e7:f8:b9:c2:cc:3f:
33:89:97:0e:60:b1:21:6b:cf:b5:50:a9:49:06:4e:
52:5e:3b:c6:cb:8f:d0:23:17:19:13:0a:10:fa:39:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5F:25:C2:FF:9C:EF:86:96:01:C9:04:D6:D7:20:6B:FE:87:73:92
X509v3 Authority Key Identifier:
keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e36382e302f32342d3234203d3e20323632333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.68.0/24
Signature Algorithm: sha256WithRSAEncryption
69:97:7b:22:c2:c0:a9:6a:8b:87:34:bc:1c:d4:1d:5d:76:67:
72:f6:6e:14:f6:db:eb:5b:9a:4a:14:11:8b:9c:1c:c7:cf:ef:
b5:69:44:ab:75:9a:20:c3:98:3b:ae:e6:54:87:e1:92:19:d9:
9b:8a:04:36:2b:6f:c5:61:c7:79:6e:74:06:75:c2:d8:40:0f:
20:42:79:9f:7d:c6:64:c3:84:d4:7d:cb:d4:5d:67:a3:ad:55:
b9:12:82:92:48:c4:3e:c5:25:cd:33:2c:f6:db:86:bb:b1:78:
b3:d0:1d:95:30:35:51:f9:6a:ed:1d:79:b0:df:d7:bd:9c:ee:
2d:46:46:98:81:ba:2f:fd:95:93:1f:43:cd:dd:40:f4:01:07:
85:4a:a9:21:f1:1d:2d:e8:f4:0d:56:f5:be:ce:1a:43:01:92:
cc:ce:f8:49:f5:3b:27:c8:51:a0:d0:fb:ba:7a:3b:f1:2a:00:
02:f7:2d:8c:0a:51:44:9a:d4:4d:89:e2:41:2a:18:cb:6d:42:
e9:71:e2:72:7d:55:1d:50:5c:5b:9f:60:ab:04:ad:57:fc:b4:
4d:16:f1:c3:bf:f1:21:0e:5e:76:23:f8:9e:e9:99:f9:63:35:
62:01:f0:c7:35:a3:78:54:7e:27:31:58:44:5e:f9:ab:17:db:
7e:69:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 19:39:13 2024 by rpki-client on console-fra.rpki-client.org