Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/3132382e3230312e3139362e302f32322d3232203d3e20323635383937.roa
File: 3132382e3230312e3139362e302f32322d3232203d3e20323635383937.roa (raw, json)
Hash identifier: 81xecfTni37Pj9QjiNkM9frpaPeQaUXPx+umtkfuE/Y=
Subject key identifier: 9D:B1:40:70:D0:02:A3:97:86:74:10:42:82:11:F3:99:E3:2A:EC:77
Certificate issuer: /CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
Certificate serial: 2448101D2E67FC714173B33C9EF82C0A29E3D18D
Authority key identifier: 5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/3132382e3230312e3139362e302f32322d3232203d3e20323635383937.roa
Signing time: Wed 03 Apr 2024 19:16:18 +0000
ROA not before: Wed 03 Apr 2024 19:11:18 +0000
ROA not after: Wed 02 Apr 2025 19:16:18 +0000
asID: 265897
IP address blocks: 128.201.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 23 Jul 2024 21:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:48:10:1d:2e:67:fc:71:41:73:b3:3c:9e:f8:2c:0a:29:e3:d1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
Validity
Not Before: Apr 3 19:11:18 2024 GMT
Not After : Apr 2 19:16:18 2025 GMT
Subject: CN=9DB14070D002A397867410428211F399E32AEC77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:62:34:2a:24:c5:b5:d5:a9:b8:85:6b:0e:
d5:f3:d5:d3:7d:d3:f0:4d:ef:13:3a:d6:12:de:67:
44:a3:6b:6b:f2:6f:b8:70:05:e1:96:09:50:a2:60:
1d:fc:8e:7e:3b:7b:50:07:77:ae:60:73:12:86:b4:
88:0a:1a:dd:f9:39:e9:49:f1:16:7c:7c:99:13:f2:
50:7c:bf:fe:a3:62:71:28:bb:b0:89:1e:30:03:55:
17:55:4e:fc:1f:32:5e:18:a0:c7:6f:7b:c4:b3:85:
55:8b:7e:2c:c8:b2:5d:79:d6:64:38:36:01:1b:c7:
ed:63:99:9a:e4:63:35:e9:48:d1:d4:02:cf:13:62:
b4:88:ed:5a:bf:49:b5:5c:6b:06:9c:9a:6b:26:14:
8d:8c:60:d1:70:89:f6:bb:90:be:8e:e4:e8:bb:ce:
43:15:c1:d9:83:4c:ed:fa:ff:30:7c:ee:6e:b6:b2:
e4:49:c5:a7:81:c0:f3:0b:b1:e8:2f:d6:c9:09:fd:
79:35:39:76:27:8b:b7:99:55:10:a9:b4:cc:b9:ed:
49:00:75:35:74:f8:3e:db:14:3b:40:2a:39:96:26:
3b:3f:13:6c:74:24:7b:5f:dd:5a:60:be:f1:25:e2:
18:74:af:fb:76:0c:95:d1:dd:8b:83:09:29:e8:15:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B1:40:70:D0:02:A3:97:86:74:10:42:82:11:F3:99:E3:2A:EC:77
X509v3 Authority Key Identifier:
keyid:5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/3132382e3230312e3139362e302f32322d3232203d3e20323635383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.196.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:4a:b0:b3:e7:a9:46:b1:16:54:c6:17:ec:f5:71:05:2d:68:
61:17:de:25:70:3a:88:d6:4b:0f:2f:f1:77:67:2c:ba:ab:b0:
9a:b2:83:09:6a:d3:ff:c9:ab:e9:df:c3:a8:2b:86:5c:61:36:
1b:86:ab:8e:fc:31:6b:4e:c2:e4:0a:03:9c:69:d8:c4:bb:21:
d7:fe:b4:ab:be:35:5c:41:5f:10:e6:9d:45:ef:40:ce:24:34:
f7:b4:31:2a:65:ab:a3:43:42:2b:17:c6:54:dc:81:5e:99:7a:
3b:e5:05:82:8d:c9:af:f3:76:61:4b:bf:1e:b6:bb:bb:ce:82:
49:b4:e5:ec:f8:3d:10:4b:64:8e:72:58:20:98:a9:c1:7c:de:
d0:14:af:74:18:38:df:4b:de:00:d0:cc:e7:e5:5d:29:36:df:
28:a3:0e:39:bc:03:0a:30:fd:3c:a0:90:15:a2:bf:7f:f3:7b:
85:c2:a5:e5:b2:db:c4:f3:33:4f:00:ca:e3:fd:d1:bc:a9:f2:
fa:b0:c1:d4:82:c2:0f:ce:9a:3f:00:08:0e:d1:85:73:6a:87:
3c:1f:e3:fd:49:62:a0:3f:8e:67:71:e6:9e:12:87:a0:1e:4d:
50:d5:61:cd:9e:77:a3:28:f6:28:49:d6:52:21:ee:2b:59:52:
e9:56:bb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 22:49:39 2024 by rpki-client on console-ams.rpki-client.org