Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32332d3233203d3e203238313832.roa
File: 3137302e3233312e3133322e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier: bNgVWFcPvZOZzN5MTVgjPnrALkhydBNQAI5Z7pK8m0Y=
Subject key identifier: 4B:56:81:D7:D2:26:5E:78:82:F4:48:99:20:62:80:A8:DA:A3:7B:44
Certificate issuer: /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial: 4B1F6FAE24A160A1FEA0264A99995716F3CAEBBC
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32332d3233203d3e203238313832.roa
Signing time: Wed 17 Apr 2024 11:39:48 +0000
ROA not before: Wed 17 Apr 2024 11:34:48 +0000
ROA not after: Wed 16 Apr 2025 11:39:48 +0000
asID: 28182
IP address blocks: 170.231.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 17 Apr 2024 15:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:1f:6f:ae:24:a1:60:a1:fe:a0:26:4a:99:99:57:16:f3:ca:eb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Validity
Not Before: Apr 17 11:34:48 2024 GMT
Not After : Apr 16 11:39:48 2025 GMT
Subject: CN=4B5681D7D2265E7882F44899206280A8DAA37B44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:66:a3:99:d6:b1:a5:b6:6f:37:04:9d:1f:
f7:8d:f1:c9:71:3e:5d:aa:cd:6c:34:c7:09:66:99:
4f:71:07:c8:db:b4:19:13:7d:a6:65:0d:c2:b3:2d:
ad:eb:c7:0b:fc:86:07:71:55:db:5d:0a:fd:2c:64:
f6:bf:a3:ef:de:d6:83:09:58:fc:d1:8a:3b:45:83:
ce:b2:a0:d3:6b:7f:f9:23:da:24:19:9b:33:cb:cf:
d5:e1:f8:0b:c5:10:ba:50:81:f2:6c:3d:c5:d9:2f:
51:c6:30:cf:d4:eb:13:cd:17:2b:af:96:b2:0e:c4:
e0:50:2e:b7:a2:0d:ae:dd:f3:77:16:e7:e7:03:93:
59:a8:0c:fd:3b:44:93:35:50:9e:06:3c:c6:11:7f:
fd:07:eb:11:c1:65:f1:64:77:9b:d9:80:d3:c3:08:
e1:f8:0b:e8:fe:2a:34:93:20:39:f0:5d:84:f0:aa:
b5:1c:29:91:2d:60:32:e4:af:8e:f9:12:ff:2e:7e:
ea:05:29:e1:2e:9b:97:b0:f6:cb:f9:cd:23:7e:31:
ca:ae:96:81:7a:5e:98:a8:97:5e:fa:00:00:0d:80:
c0:1f:d2:8d:42:44:f5:86:2e:f9:8b:6a:87:8e:c8:
5a:93:fd:ea:b9:34:59:f1:2c:5e:fa:fe:8a:72:1e:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:56:81:D7:D2:26:5E:78:82:F4:48:99:20:62:80:A8:DA:A3:7B:44
X509v3 Authority Key Identifier:
keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32332d3233203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.132.0/23
Signature Algorithm: sha256WithRSAEncryption
91:71:a0:fe:36:3f:ed:13:52:d8:45:7d:3c:96:90:46:03:c7:
8d:b3:12:d6:35:fc:bf:c3:d1:fe:0c:81:5b:aa:0b:ee:b6:72:
56:b1:c4:2e:58:5e:a2:86:46:17:f8:49:72:03:7e:6b:76:2c:
a0:4f:98:25:d4:8a:ac:82:ff:09:7c:e7:5c:cb:80:fe:12:66:
b1:ac:60:6c:bb:9e:20:cc:63:5b:15:30:c8:cb:22:6d:bd:51:
49:90:9a:cc:12:9d:09:82:ee:a0:1b:bf:98:a1:26:e3:14:6a:
33:f1:24:a1:47:78:fa:18:37:44:40:95:b5:b1:f6:69:19:00:
4f:b8:93:3f:b2:25:cc:86:b4:24:79:45:ac:c2:0f:5f:9e:4f:
ac:2b:bc:23:ee:a6:3e:ba:60:f3:d8:42:bf:e8:13:91:46:ae:
87:83:9a:72:10:24:6a:f7:0b:ae:5b:dc:9a:02:43:8b:5c:a0:
c5:e5:ce:81:50:4f:9d:a3:b1:5a:03:5f:0e:78:70:81:12:e1:
d5:02:1b:07:6e:37:50:90:6d:b1:af:ff:6d:5a:9c:e2:57:cd:
87:1a:3d:e6:8f:91:f8:25:58:62:5b:e6:91:7d:35:e3:3d:5a:
0b:ef:80:37:72:8e:2a:a2:62:2a:0f:93:40:38:96:70:d6:b4:
9b:aa:80:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org