Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31342e302f32332d3233203d3e203631393336.roa
File: 3230312e3135382e31342e302f32332d3233203d3e203631393336.roa (raw, json)
Hash identifier: Szt2USAWWFZHhCLRn7C87XPu97+w3Zqph+nnWypSwF4=
Subject key identifier: 8B:F1:DA:C9:57:8E:96:09:88:F2:DE:6D:19:D0:34:C5:79:F4:D5:67
Certificate issuer: /CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
Certificate serial: 0948FE7A8BE40846F7C3A9E2BBAA463FEC8204EE
Authority key identifier: 8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31342e302f32332d3233203d3e203631393336.roa
Signing time: Thu 18 Apr 2024 14:39:07 +0000
ROA not before: Thu 18 Apr 2024 14:34:07 +0000
ROA not after: Thu 17 Apr 2025 14:39:07 +0000
asID: 61936
IP address blocks: 201.158.14.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:48:fe:7a:8b:e4:08:46:f7:c3:a9:e2:bb:aa:46:3f:ec:82:04:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
Validity
Not Before: Apr 18 14:34:07 2024 GMT
Not After : Apr 17 14:39:07 2025 GMT
Subject: CN=8BF1DAC9578E960988F2DE6D19D034C579F4D567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:85:07:12:9f:20:6b:85:b1:b9:8e:20:6a:
69:08:f0:24:9b:2e:eb:13:02:46:de:ba:52:e8:b1:
d2:e1:84:5b:4b:f8:0e:93:68:2f:b4:b2:73:37:13:
b2:60:bf:7c:52:9d:aa:f3:8a:f4:63:39:d6:f2:d4:
fc:02:69:c4:b9:bf:31:3d:6f:34:39:b8:f6:ab:26:
5f:46:26:e8:01:65:ad:d1:fb:0c:34:68:f6:50:91:
af:28:81:20:b5:fb:ec:c0:e3:65:28:61:7f:1a:e5:
36:85:f4:ad:a7:1e:03:82:24:b7:07:3d:a0:b8:7e:
1f:47:1d:32:c4:9a:36:da:3d:9a:e1:cd:18:cb:81:
58:30:73:32:2c:36:60:84:52:8d:49:73:67:bd:88:
62:f8:40:7e:5a:e8:97:74:91:f9:a6:97:5c:c5:e8:
14:d3:60:7b:15:02:23:2c:d0:b3:71:c8:ea:b1:d8:
7a:af:ba:84:f0:b3:a8:a7:94:ea:fc:d7:44:75:55:
51:f2:6b:c0:c5:f1:64:82:fa:10:b2:b3:a3:2d:43:
dc:8f:10:a2:37:4d:28:ed:79:94:7f:fa:3a:66:6e:
8a:ab:8d:8a:09:09:92:0f:5c:3c:15:4f:2d:59:5e:
14:12:7d:b5:65:f0:4f:8e:b6:6c:22:7a:ec:48:0b:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F1:DA:C9:57:8E:96:09:88:F2:DE:6D:19:D0:34:C5:79:F4:D5:67
X509v3 Authority Key Identifier:
keyid:8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31342e302f32332d3233203d3e203631393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.14.0/23
Signature Algorithm: sha256WithRSAEncryption
84:35:c6:62:b9:b6:7c:b2:0e:aa:76:28:64:6d:f4:b0:2a:18:
dd:c2:7e:5a:18:b7:22:30:35:46:a5:22:99:b0:b6:ce:d0:c6:
68:5a:8e:c3:41:02:bb:14:ed:48:de:bf:08:51:d4:6a:27:8d:
ae:63:45:71:41:93:c2:30:6c:17:5e:fb:95:88:b4:ec:5f:b9:
cc:af:a1:3a:48:f2:a8:5a:41:6e:06:58:4f:04:3c:92:6a:90:
01:36:a4:20:12:04:22:91:ac:a3:82:1a:4b:40:de:70:e3:dd:
9e:f3:05:e4:21:d0:cc:1d:bf:17:6a:2c:8d:96:c4:b6:4f:f5:
33:14:69:ce:22:4f:f0:e1:cb:10:a1:10:4b:01:1b:4f:1e:20:
13:0d:e6:d1:18:f9:e4:ce:a8:89:3c:c3:74:63:f3:37:7a:7b:
07:cd:7e:27:8d:d3:28:5b:2d:d3:ec:a8:9c:ea:c9:e6:ba:7f:
07:3d:79:cf:88:48:a4:51:b1:2d:5b:2a:d2:d7:46:65:4d:d4:
d6:11:04:12:a2:39:01:4b:17:df:12:d5:c5:21:b7:ca:3d:78:
a7:a6:7c:5d:0a:7f:5f:04:49:18:53:31:27:cf:86:bb:84:11:
d6:87:fe:32:8b:32:aa:ad:65:f1:b8:5a:92:96:f0:ec:0e:59:
46:75:d0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:53 2025 by rpki-client