Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32342d3234203d3e203238313832.roa
File: 3137302e3233312e3133322e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier: flmJED5U+ElT+kwVUSbvGEucy7VojWn+1LAKUXkxaIo=
Subject key identifier: A5:67:86:94:C9:AE:54:BB:E1:84:F9:08:33:A7:5B:7A:10:62:AC:C0
Certificate issuer: /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial: 6AF8DDF01D81593867E7A7C945A574089783D206
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32342d3234203d3e203238313832.roa
Signing time: Wed 17 Apr 2024 11:39:49 +0000
ROA not before: Wed 17 Apr 2024 11:34:49 +0000
ROA not after: Wed 16 Apr 2025 11:39:49 +0000
asID: 28182
IP address blocks: 170.231.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 15:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f8:dd:f0:1d:81:59:38:67:e7:a7:c9:45:a5:74:08:97:83:d2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Validity
Not Before: Apr 17 11:34:49 2024 GMT
Not After : Apr 16 11:39:49 2025 GMT
Subject: CN=A5678694C9AE54BBE184F90833A75B7A1062ACC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:a2:b4:97:83:cb:5a:7b:c0:8a:5e:a4:cc:
d4:78:e8:11:0a:07:e8:43:d2:83:cd:80:fd:1a:c8:
ad:af:bc:7c:00:35:05:f0:c1:e5:39:b0:88:b2:eb:
6f:0f:3c:bb:7e:a3:cb:d6:54:45:0a:ab:6b:de:41:
bf:23:c8:bc:6e:9a:25:cb:26:53:79:a0:af:a9:34:
88:98:f0:b8:8e:10:02:7e:e2:fc:17:2e:b2:aa:8e:
af:9f:21:c4:62:f2:a1:a0:21:3d:0d:9b:2b:41:c6:
86:a8:7a:b9:5f:e5:c1:e6:9a:20:e8:da:d9:6c:fc:
35:5e:de:95:0b:78:88:87:3f:fd:43:84:50:c4:fe:
e7:1f:cb:e3:08:6e:af:e8:fc:0f:7d:b8:b7:f9:f9:
cd:bd:ab:50:c7:39:9f:de:4e:0d:c6:68:db:90:d7:
c3:6f:3d:e8:36:83:78:15:5e:3f:cc:40:1b:7b:be:
b2:f4:66:aa:3c:29:00:d1:1c:92:34:2a:5e:88:8a:
d6:58:38:4d:b6:a7:f2:6f:7e:cd:db:d0:92:3e:51:
7a:61:58:60:99:bf:82:8f:c4:09:34:d1:ec:95:68:
f2:61:49:ce:88:30:c0:75:af:b9:bd:c4:1d:f2:ba:
fb:cd:40:a6:eb:20:c8:a3:e7:a7:08:ee:f4:d1:87:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:67:86:94:C9:AE:54:BB:E1:84:F9:08:33:A7:5B:7A:10:62:AC:C0
X509v3 Authority Key Identifier:
keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32342d3234203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.132.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:24:9f:87:b6:6e:05:b7:98:31:50:b0:5f:91:68:23:44:27:
0e:59:df:df:42:3d:29:30:73:1c:0c:f8:3c:90:11:be:c3:06:
0c:49:2b:99:56:32:61:e8:76:95:b9:ed:3d:bb:19:14:f5:bf:
96:f7:3b:1b:0d:f1:7d:5b:43:68:2a:7b:44:ae:11:06:16:a1:
bd:1e:99:a6:fc:ee:a6:55:19:26:17:1a:77:5b:4a:e4:d4:f3:
db:6c:68:00:e0:3d:b1:4a:6e:c0:f7:76:2d:1f:2b:c0:2f:7c:
15:d3:94:de:13:9e:64:10:12:9f:15:f1:53:4c:1d:a9:36:d0:
3b:a7:20:e9:71:fd:9c:1c:7f:a4:af:ec:51:8a:d2:7d:d4:00:
96:b1:a5:89:f3:47:bd:a9:5c:da:b0:f4:b8:d5:e3:68:60:a6:
e5:4c:5f:8b:5b:85:7f:1c:e6:72:75:56:7b:67:8a:91:2b:ad:
50:99:42:ec:62:6b:57:77:c5:c8:a4:85:cc:42:49:51:56:ca:
e4:23:47:db:e2:17:34:36:3b:05:d9:53:30:48:4c:27:c6:07:
9e:ed:4d:d5:1e:ab:5a:b3:a9:31:28:fb:23:97:b2:e2:2b:bf:
4e:8c:61:06:19:d1:54:68:93:12:e1:3d:ea:14:45:4a:90:f8:
9b:33:64:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org