Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139342e3132302e302f32332d3233203d3e20323632373733.roa
File: 3136382e3139342e3132302e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier: x1M2lmxv5gJRMu6KwuUu1mALVVYqg550hQ3q+ONahlM=
Subject key identifier: 4F:21:8E:5A:31:79:BA:8D:FB:7A:0C:B9:02:F8:1E:E1:14:4C:B3:BD
Certificate issuer: /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial: 6899B54DA81A782F49345996AF88F8DCB47F5886
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139342e3132302e302f32332d3233203d3e20323632373733.roa
Signing time: Wed 14 Aug 2024 12:08:22 +0000
ROA not before: Wed 14 Aug 2024 12:03:22 +0000
ROA not after: Wed 13 Aug 2025 12:08:22 +0000
asID: 262773
IP address blocks: 168.194.120.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 09 Sep 2024 14:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:99:b5:4d:a8:1a:78:2f:49:34:59:96:af:88:f8:dc:b4:7f:58:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Validity
Not Before: Aug 14 12:03:22 2024 GMT
Not After : Aug 13 12:08:22 2025 GMT
Subject: CN=4F218E5A3179BA8DFB7A0CB902F81EE1144CB3BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:ce:15:5e:b5:93:61:b3:c3:78:af:10:97:
a5:99:c5:94:c5:3d:70:ae:4f:13:5f:68:af:49:6c:
8a:ff:3f:54:da:8f:db:85:73:10:cf:4c:3a:73:ab:
ae:9e:9d:93:8f:d7:67:79:d1:18:c1:4a:b4:09:9b:
19:72:62:6b:f2:50:f8:6c:d8:b8:a3:c2:f1:c4:fb:
f3:a8:f0:02:3b:f7:aa:b2:9d:82:51:39:b2:21:e6:
65:05:10:00:99:36:74:2a:ff:a8:e4:0a:28:b4:01:
e9:fa:3b:68:83:60:4a:f5:fb:1e:60:d7:de:e0:50:
e6:68:25:3d:d6:a3:47:63:85:bb:00:1d:43:4c:89:
92:3d:b1:87:5d:7c:56:80:90:30:e8:9d:45:2e:d2:
96:7f:6e:a9:10:a7:88:e5:58:95:b1:50:10:a4:08:
c3:2d:3c:7e:17:f7:9f:e5:ea:83:8b:75:4c:7c:9a:
b5:82:70:6b:d6:ae:2e:53:0b:48:d2:92:7a:ad:bc:
13:50:8b:aa:ce:9f:6d:44:e2:61:19:a4:64:b4:ad:
49:38:4f:d3:9e:69:ba:40:2e:bd:96:ae:2a:27:a7:
ec:36:c2:56:18:aa:da:45:73:dc:5f:8a:2f:13:ae:
8c:8d:17:85:1d:2a:45:7a:56:4e:7c:c6:ce:da:aa:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:21:8E:5A:31:79:BA:8D:FB:7A:0C:B9:02:F8:1E:E1:14:4C:B3:BD
X509v3 Authority Key Identifier:
keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139342e3132302e302f32332d3233203d3e20323632373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.120.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:e9:38:cc:93:99:16:7c:4d:ed:20:49:9f:b4:f5:54:e6:5c:
38:0c:21:97:aa:7c:59:a9:31:61:d9:91:b3:e3:79:2e:ef:e4:
d9:64:9a:12:14:34:a8:ce:30:53:5a:ef:f4:3f:9f:49:d1:93:
7b:ff:5c:70:90:88:48:c4:92:9d:8c:fb:ac:b4:75:43:ea:c7:
35:9e:1d:f9:c4:4a:26:b3:fb:53:c2:f8:af:9e:b9:79:05:84:
61:a8:6c:41:c0:65:1a:db:4e:ab:90:3b:dc:14:23:c9:aa:7f:
c9:dc:ad:c4:d7:ae:ed:d4:1f:3a:bd:97:c6:6d:72:27:b1:55:
37:5c:6d:e7:51:8b:86:28:3a:1d:e9:11:bd:8d:2c:0e:a1:9b:
08:05:d3:a4:ce:6f:22:ab:66:bf:39:e0:f8:bb:f0:11:70:70:
d1:47:d1:df:99:c0:14:be:98:42:5b:11:2c:40:e4:16:6a:ce:
0a:f1:65:e2:52:fd:2b:97:6a:6b:03:40:bf:78:e2:a0:6a:fc:
85:d2:6e:c1:03:4b:53:31:91:0c:95:6b:c0:16:9e:11:d8:1c:
d2:63:88:ee:5d:4d:41:bc:5e:14:9a:7f:12:25:e4:cc:f7:e7:
60:76:06:9d:f1:a3:f5:1b:06:36:d5:04:64:a8:81:b1:39:7e:
c0:b1:c6:47
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaJm1TagaeC9JNFmWr4j43LR/WIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA4MTQxMjAzMjJaFw0yNTA4MTMxMjA4MjJaMDMxMTAvBgNV
BAMTKDRGMjE4RTVBMzE3OUJBOERGQjdBMENCOTAyRjgxRUUxMTQ0Q0IzQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKrc4VXrWTYbPDeK8Ql6WZxZTF
PXCuTxNfaK9JbIr/P1Taj9uFcxDPTDpzq66enZOP12d50RjBSrQJmxlyYmvyUPhs
2LijwvHE+/Oo8AI796qynYJRObIh5mUFEACZNnQq/6jkCii0Aen6O2iDYEr1+x5g
197gUOZoJT3Wo0djhbsAHUNMiZI9sYddfFaAkDDonUUu0pZ/bqkQp4jlWJWxUBCk
CMMtPH4X95/l6oOLdUx8mrWCcGvWri5TC0jSknqtvBNQi6rOn21E4mEZpGS0rUk4
T9OeabpALr2Wrionp+w2wlYYqtpFc9xfii8TroyNF4UdKkV6Vk58xs7aqkoXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTyGOWjF5uo37egy5Avge4RRMs70wHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNjM4MmUzMTM5MzQyZTMxMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajCeDANBgkqhkiG9w0BAQsFAAOCAQEAqek4
zJOZFnxN7SBJn7T1VOZcOAwhl6p8WakxYdmRs+N5Lu/k2WSaEhQ0qM4wU1rv9D+f
SdGTe/9ccJCISMSSnYz7rLR1Q+rHNZ4d+cRKJrP7U8L4r565eQWEYahsQcBlGttO
q5A73BQjyap/ydytxNeu7dQfOr2Xxm1yJ7FVN1xt51GLhig6HekRvY0sDqGbCAXT
pM5vIqtmvzng+LvwEXBw0UfR35nAFL6YQlsRLEDkFmrOCvFl4lL9K5dqawNAv3ji
oGr8hdJuwQNLUzGRDJVrwBaeEdgc0mOI7l1NQbxeFJp/EiXkzPfnYHYGnfGj9RsG
NtUEZKiBsTl+wLHGRw==
-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org