Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3332203d3e20323633353138.roa
File: 3136382e3139372e38342e302f32322d3332203d3e20323633353138.roa (raw, json)
Hash identifier: USf0afVJvcBiXyRUCg2ddnS6dkTdJ78Bwbx+4y2OPXI=
Subject key identifier: 88:DC:A5:95:B3:23:00:A1:C2:F4:A2:AF:05:A5:20:29:17:41:0B:3A
Certificate issuer: /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial: 0E63F25EC3AA785942CDF10BF12DACB9A7A3FBE3
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3332203d3e20323633353138.roa
Signing time: Tue 05 Nov 2024 10:26:42 +0000
ROA not before: Tue 05 Nov 2024 10:21:42 +0000
ROA not after: Tue 04 Nov 2025 10:26:42 +0000
asID: 263518
IP address blocks: 168.197.84.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 09 Dec 2024 12:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:63:f2:5e:c3:aa:78:59:42:cd:f1:0b:f1:2d:ac:b9:a7:a3:fb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Validity
Not Before: Nov 5 10:21:42 2024 GMT
Not After : Nov 4 10:26:42 2025 GMT
Subject: CN=88DCA595B32300A1C2F4A2AF05A5202917410B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:14:db:aa:20:2b:d5:f6:e8:51:6c:ec:9d:
95:7e:d8:45:17:70:ea:5e:e5:d4:3b:b2:05:2d:b4:
ca:a5:df:c4:a6:24:d9:0d:4d:20:be:b2:d2:38:4f:
73:e7:e1:5e:64:b2:d2:44:49:60:78:50:87:9c:79:
f0:df:8e:b1:6d:e1:25:9f:4e:33:45:cb:b5:1f:8a:
29:34:40:f2:a6:d8:52:85:f2:8b:ab:90:58:bb:86:
3c:48:04:61:06:7f:3b:7e:ae:26:b7:c3:55:fb:69:
bf:67:23:0d:0d:27:dc:c8:c4:1b:ed:9a:0f:37:ce:
a9:da:2a:1c:cc:ca:8c:90:41:f9:13:28:31:f9:3c:
a7:a6:3a:c2:f7:63:94:f3:2f:ac:ce:b5:3e:a3:5d:
85:f7:df:44:87:2e:ce:55:ea:73:02:1b:a0:36:2b:
8f:43:2b:e9:24:9b:b2:c2:ab:7b:55:50:09:ad:de:
b8:8d:32:57:c3:ce:1a:5c:c7:46:69:5f:f0:1f:48:
90:0f:e4:a9:f3:6a:11:05:7b:6b:c3:5a:89:c0:f5:
f1:e4:f9:0f:b8:7a:e1:60:7e:3f:ca:26:72:df:3b:
1a:8a:14:2a:52:fa:d0:c0:1a:00:5c:ff:e6:82:58:
20:a8:6d:b1:cd:91:59:57:b6:69:6e:8e:4b:76:49:
cd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DC:A5:95:B3:23:00:A1:C2:F4:A2:AF:05:A5:20:29:17:41:0B:3A
X509v3 Authority Key Identifier:
keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3332203d3e20323633353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.84.0/22
Signature Algorithm: sha256WithRSAEncryption
92:e9:88:a3:a9:b6:73:74:87:71:84:1b:02:69:38:b9:95:63:
ed:e9:4f:9a:11:55:68:35:6a:75:c2:86:63:72:47:84:cf:27:
15:b3:29:6c:c8:b0:f7:58:03:94:37:72:22:fd:bd:5c:a5:3e:
95:07:2f:49:48:60:1d:30:56:4c:c4:03:3f:41:d5:77:47:65:
82:3c:07:15:73:d2:dd:66:d2:94:83:5a:38:92:42:9f:77:a5:
a2:dc:f2:e5:16:34:13:70:26:ba:5e:40:3d:0b:27:47:5f:61:
e7:4b:f2:9b:e0:69:99:2f:c9:72:a9:70:e0:2e:2e:5f:14:10:
59:aa:5c:59:0c:5f:4a:b5:d3:13:a1:19:6e:d8:98:b1:aa:c7:
a0:21:3b:b4:7f:02:99:6b:3a:81:1a:0e:f8:0a:fd:b0:a4:86:
93:3e:c5:dd:b4:f7:56:f4:1d:50:8b:b4:59:a1:8c:ff:21:ba:
6f:ad:6a:31:3d:f2:85:b9:cd:7e:f3:21:3b:ee:e6:c2:bb:8a:
ae:c2:d4:ad:0c:d3:fd:3a:ba:2e:07:b9:de:62:0e:06:3e:1b:
e4:3f:ae:b3:6c:f6:81:3a:04:d8:8e:23:a5:33:6c:dd:29:b8:
67:dd:68:ba:b7:bc:8a:6b:68:b4:34:a4:54:5f:fb:f8:9a:2b:
7e:9a:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:07 2025 by rpki-client