Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/3139322e3134352e3232312e302f32342d3332203d3e20323731323936.roa
File: 3139322e3134352e3232312e302f32342d3332203d3e20323731323936.roa (raw, json)
Hash identifier: iNO/YxsMF00k70aEJ5clpjHCtbDpOWHDv4WdRyAk4uc=
Subject key identifier: 6D:D2:98:FB:67:34:A0:7B:7D:FE:EF:74:26:73:60:59:9B:46:8B:DA
Certificate issuer: /CN=29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258
Certificate serial: 2129ACBA8ED9BB6A7EE1257B22B6A97C21A79C68
Authority key identifier: 29:E0:C1:C6:BE:F4:7B:9A:CA:2A:F1:3B:8A:C8:F7:4F:E4:D4:A2:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/3139322e3134352e3232312e302f32342d3332203d3e20323731323936.roa
Signing time: Fri 16 Aug 2024 15:12:34 +0000
ROA not before: Fri 16 Aug 2024 15:07:34 +0000
ROA not after: Fri 15 Aug 2025 15:12:34 +0000
asID: 271296
IP address blocks: 192.145.221.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sat 17 Aug 2024 00:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:29:ac:ba:8e:d9:bb:6a:7e:e1:25:7b:22:b6:a9:7c:21:a7:9c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258
Validity
Not Before: Aug 16 15:07:34 2024 GMT
Not After : Aug 15 15:12:34 2025 GMT
Subject: CN=6DD298FB6734A07B7DFEEF74267360599B468BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:52:81:79:4b:de:d6:f3:6e:e6:82:ec:fd:
96:7b:42:82:7e:0e:03:7e:f4:ea:8d:95:cb:98:7d:
34:57:c6:77:b6:27:82:62:d7:ca:16:ed:7b:0b:e1:
19:c0:ef:1b:91:b7:33:d8:2a:74:9c:8f:72:03:f7:
d3:f4:23:09:55:ef:78:7f:d0:e5:75:17:ad:69:c0:
77:d2:e3:c4:44:21:e8:5b:ad:e2:e7:78:e8:79:d6:
cb:b2:26:52:69:0a:06:09:1e:65:47:22:1c:73:de:
4b:74:0c:06:31:84:25:b7:3d:96:7c:b1:a7:8e:6d:
46:de:7e:92:6d:6b:88:66:1b:56:36:08:28:67:a6:
5c:00:f5:65:84:39:2b:c2:2b:75:fd:25:77:c2:38:
1b:00:a5:08:ba:58:72:77:0b:84:dc:61:3f:48:3b:
72:53:6e:a3:9f:55:c3:49:79:0e:c7:e6:a8:a9:8b:
3f:d6:c2:b9:d2:4b:c6:7c:5d:e4:a2:ac:37:f4:63:
9a:7d:bc:a1:26:7e:e4:f0:0d:f5:32:9f:9a:17:93:
a1:2a:fd:c4:49:20:9a:2d:3a:64:df:df:f2:71:fc:
48:e6:5e:a4:ef:37:8b:72:05:d8:1d:32:76:fc:18:
58:8a:09:79:dd:ec:af:62:c1:b8:55:6a:33:12:18:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D2:98:FB:67:34:A0:7B:7D:FE:EF:74:26:73:60:59:9B:46:8B:DA
X509v3 Authority Key Identifier:
keyid:29:E0:C1:C6:BE:F4:7B:9A:CA:2A:F1:3B:8A:C8:F7:4F:E4:D4:A2:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/3139322e3134352e3232312e302f32342d3332203d3e20323731323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:db:f2:ce:7a:61:57:e6:57:47:b2:59:9b:b8:48:0c:04:b6:
12:61:1d:4a:30:93:ed:42:4f:a5:7e:be:31:45:97:5f:d2:72:
b6:0a:64:f9:8a:e5:77:13:2a:67:9d:3a:35:cb:d9:c3:a9:f5:
89:e2:f4:7f:e2:ed:68:87:d0:5f:33:50:db:7e:af:c3:b1:09:
c9:6f:82:d6:1c:90:74:d9:c8:02:2a:5a:92:29:16:9d:93:b8:
36:3a:8e:ee:34:14:a1:c3:f6:09:21:02:14:03:84:13:f9:18:
4a:70:be:b8:ba:17:6c:88:75:d0:c7:26:16:ea:cb:fb:4e:3a:
34:d5:5f:24:60:0e:22:1d:98:ff:a4:92:ac:63:7d:a0:32:f9:
33:31:9d:16:ce:7a:5e:f2:ab:8f:7d:e3:13:4f:af:91:a7:01:
cf:ee:01:59:64:31:0a:56:04:a3:9c:8b:40:dd:fc:d8:b6:f8:
6c:6d:7c:5f:73:2a:06:9d:2f:6a:78:6d:87:55:38:b1:ad:f1:
c2:8a:6a:12:1c:dd:a9:57:a2:79:fd:3e:2a:1d:4c:ea:05:fc:
ad:cf:08:fe:f5:8f:01:15:c2:31:dc:9e:21:30:ee:a2:24:6c:
d1:1b:f3:e0:b3:69:b0:42:41:61:70:34:a6:0a:a0:32:49:97:
c1:4a:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 02:54:54 2024 by rpki-client on console-fra.rpki-client.org