Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3133382e39342e36382e302f32332d3233203d3e20323633343731.roa
File: 3133382e39342e36382e302f32332d3233203d3e20323633343731.roa (raw, json)
Hash identifier: GaH3uG7rHXGXxDpQ95h5+OOqPN5EXrbDwINlt3GwHos=
Subject key identifier: F4:E6:B9:F5:0E:B8:11:38:78:ED:46:DF:7F:B3:83:CA:BF:C6:BD:71
Certificate issuer: /CN=EA745FF35657420CF2CD31D74379F929ADDD10FE
Certificate serial: 24DB0E02F0B04F5DF0D8F5EAFC2E27C418C46199
Authority key identifier: EA:74:5F:F3:56:57:42:0C:F2:CD:31:D7:43:79:F9:29:AD:DD:10:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA745FF35657420CF2CD31D74379F929ADDD10FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3133382e39342e36382e302f32332d3233203d3e20323633343731.roa
Signing time: Wed 24 Apr 2024 14:36:06 +0000
ROA not before: Wed 24 Apr 2024 14:31:06 +0000
ROA not after: Wed 23 Apr 2025 14:36:06 +0000
asID: 263471
IP address blocks: 138.94.68.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:db:0e:02:f0:b0:4f:5d:f0:d8:f5:ea:fc:2e:27:c4:18:c4:61:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA745FF35657420CF2CD31D74379F929ADDD10FE
Validity
Not Before: Apr 24 14:31:06 2024 GMT
Not After : Apr 23 14:36:06 2025 GMT
Subject: CN=F4E6B9F50EB8113878ED46DF7FB383CABFC6BD71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:1d:cd:a8:3f:30:bb:9a:bc:e8:f5:12:81:
7e:9b:43:fc:5e:b0:08:5a:20:30:e3:bb:f9:3f:c3:
bc:bb:b8:04:c4:09:9a:f7:c9:50:46:54:33:18:f5:
59:1c:b7:a4:4e:10:a1:67:ea:68:54:8d:44:2e:35:
88:4a:fd:15:cf:45:78:ca:47:eb:d3:22:17:28:e7:
80:b7:0e:f5:99:43:b9:4b:7e:ce:97:88:a7:43:7b:
e8:62:b1:4d:c1:2d:c0:0c:df:03:63:ff:26:b1:37:
5c:4c:b0:c4:5e:22:ed:a5:55:66:02:17:2c:2a:ae:
3e:b8:7b:87:4a:fe:2a:7a:fe:ba:29:24:8d:08:ef:
63:0a:19:a4:6b:82:71:32:38:09:cd:ce:62:53:f0:
42:14:a0:5d:41:f6:8e:ba:e4:66:bc:eb:00:df:1e:
f8:71:da:dd:e5:76:c9:66:29:40:b6:72:b4:66:d5:
c1:58:da:2f:d6:62:fb:68:0b:8c:a6:42:cc:f9:49:
23:26:90:36:86:3c:61:32:e6:91:dc:d0:41:3b:5d:
67:fe:e3:e1:d1:b2:f8:f5:96:79:ca:8c:34:e4:bc:
6f:85:2e:b3:6c:82:ff:f1:8b:a5:32:07:af:15:db:
7e:cd:02:13:a5:5a:f7:22:f6:21:aa:31:43:8d:c5:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E6:B9:F5:0E:B8:11:38:78:ED:46:DF:7F:B3:83:CA:BF:C6:BD:71
X509v3 Authority Key Identifier:
keyid:EA:74:5F:F3:56:57:42:0C:F2:CD:31:D7:43:79:F9:29:AD:DD:10:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/EA745FF35657420CF2CD31D74379F929ADDD10FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA745FF35657420CF2CD31D74379F929ADDD10FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3133382e39342e36382e302f32332d3233203d3e20323633343731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.68.0/23
Signature Algorithm: sha256WithRSAEncryption
42:ea:1f:ed:cc:07:bb:99:9c:de:a5:fe:6f:54:d2:bb:58:ed:
7d:19:06:ea:16:f0:79:ad:55:99:92:37:97:c0:b5:4d:bd:6e:
b9:a6:6b:ec:78:2e:15:7d:89:44:54:77:f9:33:9b:10:1f:79:
c5:cc:7b:6a:81:be:1f:74:cf:9d:21:06:48:90:75:81:32:c1:
d1:52:90:18:98:eb:b9:4f:00:75:36:d4:54:08:67:4b:bd:41:
8c:d1:90:37:23:72:c9:25:f9:80:eb:f4:1d:a8:33:b8:6f:05:
c8:7a:2e:10:5d:6d:68:01:6d:c4:82:cd:66:58:01:de:47:54:
17:e0:49:ef:8b:a0:72:92:44:bc:71:e3:19:ab:5f:cf:08:b1:
1c:a8:29:3e:4e:d9:bb:8d:ec:ad:49:31:c7:65:78:b7:55:47:
a7:fd:00:62:a1:72:c8:b7:77:41:6b:cc:07:b1:08:cd:ed:c3:
ad:a9:65:0c:a6:fa:2a:56:25:38:90:5e:11:88:17:38:0a:e7:
42:e8:5a:bf:73:91:2c:94:38:42:a9:74:1d:78:83:76:db:2f:
f6:fb:54:2a:cb:4c:5a:c1:ba:1a:64:f6:83:61:53:18:6e:1b:
24:12:41:d8:87:b8:03:27:f5:18:51:cf:dc:61:10:ba:41:75:
e1:29:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org