Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232302e302f32332d3233203d3e20323632373733.roa
File: 3137302e3233312e3232302e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier: KYHMcFuqV2KNStxGBKK9EBJJCuUDa2v/odfHayyP/7Y=
Subject key identifier: 64:09:59:6D:5B:84:5D:3D:F8:18:F4:0C:CD:CF:3E:B8:CB:EA:AF:95
Certificate issuer: /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial: 253CFC934E571A99B06E9FB0C049A69F8B46103A
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232302e302f32332d3233203d3e20323632373733.roa
Signing time: Wed 14 Aug 2024 12:08:21 +0000
ROA not before: Wed 14 Aug 2024 12:03:21 +0000
ROA not after: Wed 13 Aug 2025 12:08:21 +0000
asID: 262773
IP address blocks: 170.231.220.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 09 Sep 2024 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3c:fc:93:4e:57:1a:99:b0:6e:9f:b0:c0:49:a6:9f:8b:46:10:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Validity
Not Before: Aug 14 12:03:21 2024 GMT
Not After : Aug 13 12:08:21 2025 GMT
Subject: CN=6409596D5B845D3DF818F40CCDCF3EB8CBEAAF95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:33:1a:95:ef:c7:41:06:09:4d:3b:ef:2f:
fd:87:75:d8:14:5a:33:ba:09:ff:58:09:c6:6a:37:
fb:78:d9:e5:2d:52:b2:93:0f:fe:a1:db:f2:c9:49:
13:df:0e:56:97:cc:b7:19:d3:90:10:37:6d:99:0e:
2e:7e:92:17:91:98:a8:c4:de:71:83:5c:28:2d:ff:
2d:27:0e:e2:bb:93:51:3f:20:18:1a:ad:21:20:be:
53:ae:3f:6e:e0:e7:ce:71:b3:b3:13:85:95:42:47:
4a:c9:5c:af:97:aa:d7:76:15:08:14:ff:cb:ed:db:
c2:0d:11:f6:aa:d6:5d:2d:22:ea:38:ff:e0:40:64:
66:34:2d:6b:b6:1a:68:e0:07:ea:3d:c5:90:4f:07:
96:84:20:88:79:ac:6a:f9:00:2f:65:2d:66:96:03:
ee:75:0d:08:64:c2:c4:38:5e:f1:5a:98:f2:4a:c6:
d6:aa:62:85:38:2d:e7:1b:50:5f:5c:d4:aa:ff:dc:
a8:15:7c:1d:ac:d8:82:fc:41:b5:82:3c:10:a0:25:
9f:04:5c:ca:94:3c:a2:48:2f:57:5c:dd:4e:00:5f:
bd:e6:8b:19:59:2c:71:1d:fc:2b:97:15:c0:f0:de:
e9:7a:b9:f7:d1:42:70:b9:c5:39:fc:3b:9c:be:e8:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:09:59:6D:5B:84:5D:3D:F8:18:F4:0C:CD:CF:3E:B8:CB:EA:AF:95
X509v3 Authority Key Identifier:
keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232302e302f32332d3233203d3e20323632373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.220.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:2c:a8:c4:a9:9a:0c:1f:8b:9e:ef:7e:3f:12:cd:3b:06:ca:
60:7f:22:9b:bf:cb:b4:24:10:7e:58:20:ae:4d:f3:57:11:fc:
da:8b:49:ff:70:33:63:52:f6:d2:89:bc:da:ff:d6:1b:34:fc:
6b:7e:37:3c:18:5b:62:73:9f:9d:ef:83:70:69:38:8c:0a:a9:
7f:ef:f4:72:f4:86:d5:18:52:9e:7c:2b:8c:8d:78:d2:40:58:
37:f5:1e:a1:9d:6e:27:e5:e6:f9:24:2d:9d:fb:7b:e8:f4:4a:
21:a0:53:f0:12:41:a6:20:93:b3:fe:d7:22:92:bf:83:a0:87:
ec:2f:17:07:c9:53:c1:82:ae:49:23:2d:d8:f9:ce:c4:9f:a1:
80:5e:b0:fa:8d:d3:ce:89:39:91:7c:df:ff:66:82:ce:3a:70:
f5:1b:a5:62:e7:18:27:cf:63:45:c6:39:bf:8c:49:3b:88:1c:
3a:0c:83:55:cd:b8:5a:df:61:bc:33:8f:3e:17:95:98:3f:a3:
c0:c7:b1:d9:ff:e0:cd:56:e8:db:64:a1:3f:b1:fb:2a:9a:8b:
27:be:f4:2d:51:10:03:30:31:27:9b:25:6e:49:b0:db:b9:ac:
bc:90:31:43:83:69:9f:59:1b:e6:77:af:23:52:7a:e3:f3:4b:
16:39:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:52 2024 by rpki-client on console-ams.rpki-client.org