Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134342e302f32322d3234203d3e20323730373034.roa
File: 3138392e3132372e3134342e302f32322d3234203d3e20323730373034.roa (raw, json)
Hash identifier: 0c/bWaGx43+4JTh1GJD5DztdiSf0gP6DXQWnEflseng=
Subject key identifier: 4E:63:F8:18:49:8A:EC:4B:EA:D3:B1:27:85:6F:28:80:16:80:D9:AB
Certificate issuer: /CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
Certificate serial: 5F21245959DFADA251D1DD9C30BD37705C6980C6
Authority key identifier: 4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134342e302f32322d3234203d3e20323730373034.roa
Signing time: Mon 18 Nov 2024 13:27:00 +0000
ROA not before: Mon 18 Nov 2024 13:22:00 +0000
ROA not after: Mon 17 Nov 2025 13:27:00 +0000
asID: 270704
IP address blocks: 189.127.144.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 14:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:21:24:59:59:df:ad:a2:51:d1:dd:9c:30:bd:37:70:5c:69:80:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
Validity
Not Before: Nov 18 13:22:00 2024 GMT
Not After : Nov 17 13:27:00 2025 GMT
Subject: CN=4E63F818498AEC4BEAD3B127856F28801680D9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:ce:24:54:76:4d:ac:be:b1:7f:f4:1b:df:
07:5e:4f:11:9a:e3:bc:71:e2:e4:ec:68:06:60:81:
c3:45:b9:94:6d:3e:dc:22:57:01:56:30:87:bf:b2:
3f:ec:c1:cc:20:65:b1:02:1d:8a:ba:7a:90:3d:37:
68:d3:85:5e:21:f5:9b:72:74:1d:c9:10:d8:e3:b3:
20:1d:ee:9e:c4:be:00:dc:74:f8:a7:2a:7b:d5:92:
ba:50:df:b1:ea:c8:97:db:21:08:d2:37:29:f2:a2:
7a:e8:d6:8d:9e:ac:6d:45:48:02:47:27:7c:cd:8f:
8b:23:31:80:0f:15:ab:38:30:aa:65:26:dc:9f:94:
2e:6f:d6:40:2d:56:f7:1a:de:85:0d:44:1e:62:b9:
03:09:17:69:ee:3a:75:32:46:ef:8c:99:e2:6c:29:
0b:bf:8c:56:32:0a:16:d1:40:66:16:8d:7a:0f:8d:
6f:62:cc:ee:d3:5e:82:bd:29:90:b7:4f:d8:8a:b6:
b9:9e:d1:78:00:3f:ce:d9:28:c0:22:09:14:3e:aa:
37:aa:98:4f:a0:92:f5:b4:c2:56:3b:6f:39:f7:bb:
d3:e7:61:fa:47:06:11:32:63:9d:28:c1:29:2a:17:
b5:c1:8e:e2:11:e1:ac:9d:05:d9:21:a7:36:70:dc:
d0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:63:F8:18:49:8A:EC:4B:EA:D3:B1:27:85:6F:28:80:16:80:D9:AB
X509v3 Authority Key Identifier:
keyid:4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134342e302f32322d3234203d3e20323730373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.144.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:f3:d7:66:48:62:41:e7:32:1e:3a:a2:83:09:a7:bb:4b:8f:
6c:30:ed:c7:48:18:99:ed:4e:a1:57:ef:a0:f6:26:81:04:c7:
8e:23:f1:18:7a:5c:ae:82:1b:4d:af:3f:95:90:32:bc:1f:38:
6f:32:e6:97:b4:36:d3:fd:25:ef:65:cc:34:7c:b8:58:2d:69:
7f:39:d4:69:ad:75:80:5a:36:e6:84:c1:3d:29:d7:4e:34:22:
57:c2:1a:12:c1:22:57:95:6c:3c:88:63:97:f9:f5:47:6d:45:
4f:98:73:01:5a:9e:56:92:7c:01:12:e7:b1:04:aa:3e:42:36:
7c:92:f7:1a:e6:03:e1:fb:35:9f:b8:42:9d:7c:c2:24:f9:19:
3b:a7:5f:95:77:d9:d1:b3:a6:4f:26:a6:4b:ad:75:b9:bd:6a:
81:5f:fb:9c:11:42:0d:f7:05:f9:19:a9:55:21:90:e7:f3:72:
e6:28:d7:91:af:ac:a1:56:22:76:4e:57:0b:ba:18:dd:77:ea:
ab:a5:7c:27:91:a9:ec:a0:08:f6:88:3d:bb:69:91:0f:e2:e7:
00:2d:eb:2b:8d:83:93:54:5a:8c:41:0a:09:ee:52:2f:64:ce:
10:a2:a4:b2:2f:e8:85:d5:ab:07:68:2e:5c:95:2a:56:72:8e:
23:bd:c1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 18:41:01 2024 by rpki-client on console-fra.rpki-client.org