Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e382e302f32342d3234203d3e203238313832.roa
File: 3138392e38392e382e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier: zWTpSAAsM4n43M2b7xduLwEyCfRM6N+noi/0XBEEbyU=
Subject key identifier: 3C:C9:68:12:09:22:A7:BF:75:BA:B1:74:C8:B4:05:E0:4F:C6:D1:B1
Certificate issuer: /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial: 2C3E4AE96BFA9386DEE809328C7B72242852C575
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e382e302f32342d3234203d3e203238313832.roa
Signing time: Wed 17 Apr 2024 11:39:53 +0000
ROA not before: Wed 17 Apr 2024 11:34:53 +0000
ROA not after: Wed 16 Apr 2025 11:39:53 +0000
asID: 28182
IP address blocks: 189.89.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 15:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:3e:4a:e9:6b:fa:93:86:de:e8:09:32:8c:7b:72:24:28:52:c5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Validity
Not Before: Apr 17 11:34:53 2024 GMT
Not After : Apr 16 11:39:53 2025 GMT
Subject: CN=3CC968120922A7BF75BAB174C8B405E04FC6D1B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:5c:a6:27:f3:17:a7:ee:40:47:53:b3:c0:
01:8e:8d:03:f3:4b:85:77:a5:f3:94:eb:ae:f0:c5:
a3:53:d2:9e:8a:2e:3a:53:b7:48:40:57:d2:5c:ad:
fc:62:7c:0b:89:4c:00:8c:1a:1d:74:06:b1:83:71:
b3:5f:49:4c:94:24:79:0a:3a:2b:61:c4:c0:80:66:
71:3f:5e:50:a3:4c:c7:29:ea:0e:2f:61:56:08:02:
48:4a:42:17:12:47:77:3f:09:05:4e:29:9e:a2:24:
e6:99:ab:cb:5b:89:92:ad:f7:cd:07:be:d5:1d:55:
d5:b9:d2:3a:ed:bb:87:bf:06:58:8a:70:45:15:2e:
20:d8:e7:20:22:8f:15:77:f1:88:53:b7:f6:52:76:
d3:b6:49:e0:42:34:a0:bd:ad:a7:a1:5a:08:3c:c1:
65:a8:9b:bc:d1:62:a8:78:f6:89:b6:39:14:61:6d:
bb:e4:cb:33:ad:dc:a3:7d:9d:f0:16:da:6e:a4:96:
29:17:c2:59:f7:d0:3d:44:61:14:a7:f2:2f:03:47:
e4:10:be:fe:fc:ae:ff:a1:ba:a5:bc:3a:07:f2:d6:
27:fb:b4:10:f8:cf:a9:74:02:a2:6d:d0:f8:c1:b7:
62:84:e7:de:fd:a1:57:15:f7:46:7d:9f:4b:ae:58:
b0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C9:68:12:09:22:A7:BF:75:BA:B1:74:C8:B4:05:E0:4F:C6:D1:B1
X509v3 Authority Key Identifier:
keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e382e302f32342d3234203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.8.0/24
Signature Algorithm: sha256WithRSAEncryption
43:df:c3:d5:d9:bf:75:19:4c:36:5a:13:99:1c:eb:f0:ad:02:
4e:a5:b3:ef:86:72:64:67:0a:47:e7:59:30:68:5e:4d:28:f8:
ae:b2:0f:65:08:4f:fc:27:0d:06:a0:18:45:0e:7f:36:b8:8b:
c9:be:ff:8d:41:36:ca:4c:4d:7c:b2:d9:70:ae:4e:9a:20:4e:
78:d8:ab:a2:4c:86:31:21:f5:f1:59:1f:e3:c2:a4:50:de:8d:
70:63:3f:21:b6:45:a6:36:0d:97:0b:53:11:d2:71:ad:ad:35:
12:4f:b8:9d:07:9a:f1:74:2d:ec:f0:3b:40:c5:05:c8:b7:88:
eb:d9:db:57:e0:31:f2:57:f8:67:5e:d4:75:c8:7e:b4:67:cc:
2f:98:36:ba:ca:06:2a:a7:e3:ec:01:09:7f:0a:1f:c9:23:77:
e1:04:09:ea:a5:d4:f1:b1:fd:37:c0:7e:77:9f:33:10:a9:75:
2a:c0:6c:19:3b:25:76:7a:80:31:72:72:32:07:de:c6:f7:2f:
3e:5c:fa:a8:45:9c:55:7c:43:e4:98:07:23:a9:de:16:4a:fd:
3f:c1:6c:82:d2:18:5d:1d:2d:b8:62:ca:49:7e:91:a3:17:92:
b3:9d:18:7b:80:ea:ac:08:20:e4:8a:2f:c7:33:23:e3:1c:c4:
e2:a9:57:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org