Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3232203d3e203631363231.roa
File: 3137302e3233312e3230382e302f32322d3232203d3e203631363231.roa (raw, json)
Hash identifier: r++71liA6rgn0xdiaZ7naYcviiiW1XxzEE7TmwnGWik=
Subject key identifier: 89:89:45:9D:E2:1D:2D:AC:A9:DE:C2:60:4C:44:66:A4:73:19:3D:5A
Certificate issuer: /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial: 72FADC798247098201EF6E4D5AD863E12A356B66
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3232203d3e203631363231.roa
Signing time: Tue 19 Nov 2024 21:21:36 +0000
ROA not before: Tue 19 Nov 2024 21:16:36 +0000
ROA not after: Tue 18 Nov 2025 21:21:36 +0000
asID: 61621
IP address blocks: 170.231.208.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 20 Nov 2024 02:42:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:fa:dc:79:82:47:09:82:01:ef:6e:4d:5a:d8:63:e1:2a:35:6b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Validity
Not Before: Nov 19 21:16:36 2024 GMT
Not After : Nov 18 21:21:36 2025 GMT
Subject: CN=8989459DE21D2DACA9DEC2604C4466A473193D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:4e:49:65:ba:fa:39:db:ea:54:e5:bd:e4:
17:2a:23:a7:01:82:55:14:78:9c:20:c0:9a:9a:0f:
4a:bf:18:f2:0a:2d:de:c0:6c:44:1b:03:21:eb:f3:
78:48:82:7e:e2:71:06:4f:0b:44:4b:b4:b1:b7:97:
23:1c:3e:9c:4b:1e:ca:75:ea:e0:17:3b:c8:14:55:
be:eb:60:db:94:e8:c2:f8:0d:f0:6f:85:d9:eb:de:
2d:0b:91:8d:64:11:71:0c:05:4f:02:e6:a4:d3:0d:
c5:12:e3:7d:a9:c3:9d:cf:0b:a3:79:07:f2:42:c7:
2d:e7:a2:fa:18:96:1b:85:aa:6b:43:cc:32:a6:10:
9c:41:02:46:a0:fb:ed:a2:66:5e:48:02:9b:2d:b3:
b9:d9:08:ab:8c:d9:7f:b6:d8:25:6a:7e:44:d0:4b:
cc:b4:b4:f8:07:44:56:26:c9:6c:0a:7b:d1:3e:82:
17:ae:70:27:7b:f2:20:f9:37:47:a2:39:29:01:1e:
f4:5d:ba:ba:58:1f:12:1e:1c:ff:17:fd:b4:b2:e6:
bc:55:98:9c:d3:91:47:d0:10:c2:c1:cb:05:03:10:
ad:c5:7a:01:74:15:04:2f:c1:b0:83:d7:76:30:62:
16:5f:a6:1b:3f:0a:f1:5e:bd:79:b3:65:36:b2:b5:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:89:45:9D:E2:1D:2D:AC:A9:DE:C2:60:4C:44:66:A4:73:19:3D:5A
X509v3 Authority Key Identifier:
keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3232203d3e203631363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.208.0/22
Signature Algorithm: sha256WithRSAEncryption
56:56:d0:06:9d:3b:9c:f3:14:87:ca:3b:b1:12:b2:47:bc:e8:
c5:c8:45:49:0a:79:80:5e:7b:58:83:23:46:0a:d6:b2:76:97:
ad:6f:90:9a:42:00:7a:5f:86:42:c3:e5:85:8f:52:b0:f3:87:
ce:09:b6:e7:c2:18:e4:2a:03:c5:70:3b:f4:60:80:95:ec:6c:
73:e4:78:8b:bf:0e:66:30:7c:3e:ac:f4:8d:b2:fd:28:fe:a6:
a9:86:7e:c2:24:e2:e9:02:48:b9:68:81:99:b0:a1:cf:e7:bc:
35:a6:2c:2b:eb:be:49:8d:e1:19:68:12:59:e5:bb:d7:00:39:
73:63:35:20:f1:bb:c5:c3:d1:58:31:76:9d:6d:21:73:2a:f5:
24:5a:56:77:ed:d7:e0:66:a1:13:0e:80:52:4c:fc:b7:c5:9f:
bb:ef:5c:b6:27:df:50:0c:ce:9a:b4:47:d5:ce:cf:6c:e9:36:
43:ba:ed:18:46:53:68:54:bb:1e:8e:ad:6c:ce:9e:bb:2e:f0:
fe:c2:8b:f0:c4:90:3b:11:e3:31:eb:be:7f:8f:ee:7f:55:f8:
ee:14:ca:2f:70:17:ec:79:56:0c:2b:86:2b:8f:33:fb:50:b2:
62:54:49:5c:c9:e9:e2:e6:46:bd:88:9c:40:66:18:41:39:38:
f8:12:a7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 04:35:43 2024 by rpki-client on console-fra.rpki-client.org