Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e342e302f32332d3233203d3e203131393231.roa
File: 3230312e34392e342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier: IlkEHZtt7rodnl3/xOucpzJamrKFaO1mcZJxXhc/5FQ=
Subject key identifier: E0:CD:8A:DC:2E:5A:A4:D2:AA:14:5F:4C:17:7C:01:70:76:66:A1:10
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 4FC2A8F6751C2C140778B6C5F8BA2EF24E3AE2BD
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e342e302f32332d3233203d3e203131393231.roa
Signing time: Thu 04 Apr 2024 23:21:40 +0000
ROA not before: Thu 04 Apr 2024 23:16:40 +0000
ROA not after: Thu 03 Apr 2025 23:21:40 +0000
asID: 11921
IP address blocks: 201.49.4.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:c2:a8:f6:75:1c:2c:14:07:78:b6:c5:f8:ba:2e:f2:4e:3a:e2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Apr 4 23:16:40 2024 GMT
Not After : Apr 3 23:21:40 2025 GMT
Subject: CN=E0CD8ADC2E5AA4D2AA145F4C177C01707666A110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:bb:10:aa:81:91:17:ae:18:24:08:b0:59:
79:0e:34:25:68:cf:e4:0d:fc:95:54:b1:b6:35:fe:
f2:ea:eb:92:f1:ee:69:c0:da:93:6f:82:e5:eb:97:
06:c4:36:e4:78:06:25:23:f0:51:b9:95:f1:fa:43:
09:b1:6e:c4:2a:e9:79:15:85:eb:73:25:cf:b1:fe:
1d:af:60:8c:86:7c:8b:03:0b:5d:a5:2a:4b:57:aa:
df:f5:d4:0a:97:d1:3c:48:f6:3a:7c:f1:eb:73:aa:
48:ab:8c:6c:96:54:d0:2b:5f:a7:cb:68:bf:26:f1:
95:2b:51:b8:63:dd:a4:ea:c6:87:9e:8a:3f:c6:d0:
b2:6a:1d:d3:2a:b0:48:ce:86:9c:e6:ee:82:44:cd:
1e:c1:ba:86:8c:b5:69:24:2f:d6:fb:1b:f0:ea:40:
66:59:d4:e2:fc:53:19:48:d9:15:eb:71:6d:d6:b2:
f3:ca:f6:72:ec:18:92:28:12:a6:47:ae:75:36:ac:
a0:59:88:18:2a:5f:de:a9:1b:5a:24:ca:51:e0:66:
23:4f:6d:89:74:d6:f1:d4:ca:d9:1c:88:ee:70:da:
9d:33:25:9e:47:85:1c:87:5a:3d:ee:09:9f:de:04:
7e:90:bf:fb:bc:4e:53:d0:68:4f:a9:d1:c3:af:60:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CD:8A:DC:2E:5A:A4:D2:AA:14:5F:4C:17:7C:01:70:76:66:A1:10
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e342e302f32332d3233203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.4.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:29:43:0c:de:1a:7c:ec:73:f3:db:b1:d1:8d:9f:bc:f6:21:
19:47:80:44:54:40:6e:a0:a5:9c:a3:72:ad:23:35:fe:f3:1d:
c1:9d:70:6b:94:ee:f7:bb:f9:01:7b:f9:47:bf:d3:e3:10:f5:
e1:d7:77:61:0f:f5:b2:21:ac:1d:c1:dc:a3:47:ab:01:82:a6:
93:1a:74:7d:03:b8:ce:08:7a:70:51:25:e4:01:06:d8:1d:4c:
3b:74:b7:fa:3d:29:07:9c:95:b9:92:6d:b8:1a:46:2d:0a:07:
2e:4a:0f:b8:0a:51:d6:20:85:5c:c9:c5:f7:58:66:2d:61:f0:
ba:df:24:65:1b:bb:3a:77:a7:ab:45:a5:fe:ed:96:3e:2a:93:
19:c4:f4:dc:ba:f8:a7:56:9f:fc:42:d8:1a:83:ef:ef:bc:ce:
6b:22:dc:7c:9e:2b:de:93:ed:14:d5:a5:a5:0a:03:67:9f:78:
c3:1b:60:af:22:6f:6e:32:75:66:33:db:22:e9:df:61:4a:20:
98:ea:d0:82:b7:dc:03:cb:ca:83:0e:f0:b0:66:99:b3:fa:ba:
23:b2:ff:e5:d5:76:09:58:53:aa:14:bd:64:7f:2b:13:65:74:
a3:fa:47:33:22:fd:fa:e0:76:50:bf:5f:a4:bf:1e:70:18:f4:
98:04:a4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org