Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232302e302f32322d3232203d3e20323632373733.roa
File: 3137302e3233312e3232302e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier: tpZR4L/1dcwCXMDhjdv+41ELRl0SAlHMVFrk09dP0f4=
Subject key identifier: 11:87:C8:C4:EA:77:B7:F5:E0:55:0B:BE:6C:32:B0:F1:D3:71:48:17
Certificate issuer: /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial: 1C6A0EABB25E0C7F4FD92C7FBEE22E266509D321
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232302e302f32322d3232203d3e20323632373733.roa
Signing time: Wed 14 Aug 2024 12:08:26 +0000
ROA not before: Wed 14 Aug 2024 12:03:26 +0000
ROA not after: Wed 13 Aug 2025 12:08:26 +0000
asID: 262773
IP address blocks: 170.231.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 09 Sep 2024 14:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:6a:0e:ab:b2:5e:0c:7f:4f:d9:2c:7f:be:e2:2e:26:65:09:d3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Validity
Not Before: Aug 14 12:03:26 2024 GMT
Not After : Aug 13 12:08:26 2025 GMT
Subject: CN=1187C8C4EA77B7F5E0550BBE6C32B0F1D3714817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:10:18:8f:0e:41:d6:be:7a:0e:9b:f7:d6:
df:5f:63:9b:0a:1b:eb:0e:21:a1:4c:28:47:97:cb:
84:15:21:67:a2:82:68:3b:6f:8f:ea:a9:9f:30:c7:
66:09:f1:6a:bb:96:fc:72:57:a4:53:98:9b:8f:dc:
22:f5:75:8e:5d:ae:ed:2a:f7:ea:10:0f:55:72:8f:
cf:48:7a:1f:79:e5:07:c9:3a:a7:5a:84:fa:b5:24:
32:d6:19:78:1f:c2:80:67:2c:a5:f9:35:48:08:62:
f4:49:44:b3:44:6f:a5:a4:49:40:37:97:57:bf:01:
37:8f:22:bc:95:3f:5a:1b:aa:52:73:c2:3b:29:85:
4a:d5:5c:df:eb:df:6f:b6:18:6a:28:06:5a:f5:43:
07:0b:16:ff:ce:55:f8:e1:fb:36:54:40:5a:88:e2:
e6:d9:05:e1:0d:a0:ea:91:e8:e5:03:f6:70:1d:d6:
dd:d6:b8:62:1d:c4:37:d2:d2:00:2d:7c:c8:e0:d2:
0f:2e:db:b7:cd:d8:a3:9b:aa:1f:7a:d9:86:f9:40:
ad:78:6e:89:0c:cb:79:91:2b:1b:49:a2:33:c1:2e:
35:50:0f:a6:be:e0:47:cb:b2:76:f5:14:00:f8:d8:
69:a4:fc:c1:84:fc:ba:92:91:ee:24:68:ea:b5:b3:
b3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:87:C8:C4:EA:77:B7:F5:E0:55:0B:BE:6C:32:B0:F1:D3:71:48:17
X509v3 Authority Key Identifier:
keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232302e302f32322d3232203d3e20323632373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.220.0/22
Signature Algorithm: sha256WithRSAEncryption
92:9e:68:b3:fa:11:c7:bd:16:4d:95:81:56:a0:7f:bf:1f:1c:
c8:42:1a:18:08:b3:f7:25:2a:0b:60:c0:03:d2:02:50:e2:f1:
25:70:1b:dd:d9:18:93:c4:08:7c:7e:53:b9:ff:ee:3e:17:92:
59:ce:55:24:94:14:84:fa:2b:80:54:74:1f:4d:47:48:e8:70:
2c:4c:e6:2d:29:9a:dd:a3:7a:dc:3a:57:3f:cb:a6:ff:16:55:
d5:87:c8:fa:71:39:65:85:23:96:c6:2f:8f:a5:62:75:c5:17:
ed:a2:20:ec:f3:6c:16:6c:fd:57:7e:a5:46:e0:08:8a:68:c9:
c2:67:f8:8c:e8:d9:83:e4:16:6c:4f:68:c4:e2:05:e7:a3:76:
9d:0f:b3:3f:53:c2:38:58:fb:67:84:c6:ed:0f:27:24:4d:f1:
b4:ed:fd:99:34:26:4e:a4:1c:e7:cd:a2:62:36:74:4e:d2:1d:
59:ff:8c:fc:da:bf:f5:e2:7c:77:4d:19:9d:b2:83:aa:4a:75:
f2:96:db:5f:f7:da:7b:a4:5d:e5:4f:3b:15:b5:97:f4:67:fb:
39:52:77:77:7e:25:95:b8:af:a2:2e:73:53:85:f1:3f:21:c1:
90:69:37:38:22:fe:ad:3a:95:b3:11:52:bf:5d:44:54:97:ba:
e2:ca:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org