Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e32312e302f32342d3234203d3e203131393231.roa
File: 3230312e34392e32312e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier: m4U4lhlqGOUqFzbsd/HtmTE7Cbd1U5gjUo+8oeBAvlo=
Subject key identifier: F7:F4:36:09:62:7D:FD:2F:08:70:C9:11:A9:CF:47:36:A1:7B:04:01
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 59AEBEAF2ACFDCBEFA5F7FB267401C66C4FF3109
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e32312e302f32342d3234203d3e203131393231.roa
Signing time: Thu 04 Apr 2024 23:21:40 +0000
ROA not before: Thu 04 Apr 2024 23:16:40 +0000
ROA not after: Thu 03 Apr 2025 23:21:40 +0000
asID: 11921
IP address blocks: 201.49.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ae:be:af:2a:cf:dc:be:fa:5f:7f:b2:67:40:1c:66:c4:ff:31:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Apr 4 23:16:40 2024 GMT
Not After : Apr 3 23:21:40 2025 GMT
Subject: CN=F7F43609627DFD2F0870C911A9CF4736A17B0401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:65:a4:b2:3b:ac:2a:61:9c:4f:20:1f:7d:
68:76:93:4e:1d:1c:5b:4a:73:4e:59:d6:65:a6:64:
1a:7e:8f:87:2d:e0:4a:23:4d:f6:c6:8a:c8:08:f9:
e5:f2:14:0a:bc:a7:4a:97:fc:82:04:01:2d:22:de:
09:6c:a2:b4:cd:e1:47:54:14:0a:66:3c:b7:17:10:
e7:c6:bb:92:52:30:c4:cb:12:48:f2:35:79:1f:8a:
60:a3:47:2e:5c:2e:d6:e5:a8:f3:a0:77:aa:e3:b4:
88:18:c9:f2:07:22:57:1a:1c:b8:ff:cb:76:b2:0d:
c4:f9:7a:1a:d8:c4:e6:63:e4:00:aa:41:d3:f6:0a:
30:e7:09:76:ca:ec:a5:de:83:52:75:67:43:15:81:
96:58:63:81:f6:0c:a6:d4:58:a5:a7:82:03:87:d2:
55:45:f6:cb:fe:83:ac:e2:88:d5:2e:5a:85:eb:99:
1d:ef:0e:f7:f5:92:f8:56:e2:17:d7:07:bf:6c:6b:
41:3f:fe:69:81:28:06:59:2f:34:2f:7f:5c:64:5a:
fb:1d:fe:9c:a6:0f:d6:a4:df:c7:57:14:70:2c:32:
12:11:d8:89:d0:da:ba:7a:df:63:5c:85:d7:df:67:
71:b9:71:b9:37:ca:ad:a5:fc:b7:45:37:b0:b6:4f:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F4:36:09:62:7D:FD:2F:08:70:C9:11:A9:CF:47:36:A1:7B:04:01
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e32312e302f32342d3234203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.21.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1c:75:49:6a:37:c2:82:aa:b0:1e:ba:87:25:00:da:5b:53:
35:13:06:f5:04:0a:7d:80:c8:7c:e7:1c:6d:a9:86:d6:82:41:
78:17:77:74:a6:e2:ed:55:d1:7b:0a:a8:fe:30:27:31:21:eb:
3e:6a:81:5b:d0:4b:c2:66:c6:f6:79:1b:e9:ed:28:93:1b:62:
d7:be:46:83:41:05:c0:66:f9:53:fe:08:c8:39:bb:14:46:29:
21:93:02:b8:34:83:60:d1:7c:f0:63:de:f0:96:8f:ee:cc:a4:
17:7e:69:4c:69:09:b8:70:35:dc:da:2a:0e:91:49:5c:b1:9b:
a5:79:00:86:5f:30:41:83:02:9d:89:73:ae:c8:50:05:e0:a4:
23:26:81:bf:bd:ae:b3:3a:e6:27:c3:28:22:e3:88:20:8e:0d:
9f:53:ba:0a:03:f7:04:0b:f4:7d:62:f5:c5:6a:f5:a2:26:49:
4f:6c:8d:a9:0d:47:0d:da:4b:5f:ed:92:9d:ee:f9:69:6f:45:
9d:a0:0c:28:61:5e:c6:6d:da:29:db:d4:d6:9f:f5:a5:6b:9e:
c0:7b:71:4b:ec:bc:eb:0d:f1:53:71:66:57:7c:b1:ff:93:77:
39:ce:3f:c8:1f:9c:0e:81:e8:48:89:0f:6f:fa:df:d0:ed:1c:
75:f6:fd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org