Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231362e302f32332d3233203d3e20323633303837.roa
File: 3137372e3133372e3231362e302f32332d3233203d3e20323633303837.roa (raw, json)
Hash identifier: VWlq8t17umf4husqUqio5IWQ71UmbQTAoJRZRNUDLZE=
Subject key identifier: A3:17:E4:CC:2A:14:C9:72:22:2E:19:C9:C0:31:57:45:0B:F1:93:39
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 3111AB4923AC3346706B29E8DFCE19289280F3AD
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231362e302f32332d3233203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:31:30 +0000
ROA not before: Thu 18 Apr 2024 14:26:30 +0000
ROA not after: Thu 17 Apr 2025 14:31:30 +0000
asID: 263087
IP address blocks: 177.137.216.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 22 May 2024 17:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:11:ab:49:23:ac:33:46:70:6b:29:e8:df:ce:19:28:92:80:f3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:26:30 2024 GMT
Not After : Apr 17 14:31:30 2025 GMT
Subject: CN=A317E4CC2A14C972222E19C9C03157450BF19339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:f7:63:e3:5f:b0:ea:ec:bd:93:71:a8:1d:
6c:a8:db:77:da:d5:1c:20:0b:ff:cc:f7:1f:bc:d2:
a0:a0:2e:0f:cb:ea:e4:98:2f:75:c8:2a:e2:38:45:
f6:7b:13:0f:8a:5c:18:19:07:93:98:f1:bc:24:4d:
ff:eb:ae:75:fb:ed:33:7a:6d:21:52:d2:48:03:b4:
ee:54:80:62:83:b9:d1:92:5d:8f:db:80:f2:36:af:
ce:2b:c5:cc:56:60:6a:5c:5e:a2:05:24:c7:2e:28:
92:fa:38:e5:c3:82:e6:34:07:04:a8:39:e8:82:0f:
70:f0:29:5c:8a:1c:d7:2d:bd:db:02:8e:2e:d6:85:
61:e1:d0:35:80:70:a1:12:68:f5:c2:de:4b:97:e5:
f2:87:b9:9c:81:5e:15:68:e9:ba:0a:28:84:81:43:
06:3f:c1:52:84:7e:71:d7:6b:17:ea:35:00:75:7b:
74:f3:32:0b:79:b6:99:77:5d:b5:2f:98:b4:7c:c1:
06:8a:52:ec:55:34:6d:16:9a:1a:04:3b:c9:fd:56:
63:c2:56:39:52:ce:80:db:df:9d:1f:90:e8:1b:a1:
fc:61:fa:84:8d:49:8c:55:3d:a1:0a:9b:f0:5a:40:
2b:f6:61:d6:14:32:93:85:e2:91:77:83:7e:57:7f:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:17:E4:CC:2A:14:C9:72:22:2E:19:C9:C0:31:57:45:0B:F1:93:39
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231362e302f32332d3233203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.216.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:ca:75:7e:9c:2d:a5:48:84:e8:c6:f7:66:90:fc:93:eb:cc:
38:b6:f9:df:43:a6:10:6e:53:95:7d:65:2d:1e:57:c7:77:1d:
d3:42:32:94:fa:c8:fc:a5:2c:c5:02:4a:06:e7:15:f1:2c:6a:
39:cc:fe:f3:e6:c8:26:50:8c:32:ee:71:03:e3:28:b9:4e:2c:
ee:18:04:cb:25:11:7f:89:f1:29:e1:be:4f:f4:b0:d5:9d:c6:
fa:af:64:4a:79:2c:8f:54:21:20:05:70:8b:6d:1e:4b:5a:02:
eb:ec:19:1a:6c:12:a1:17:49:4e:30:5c:77:ae:f5:1f:e4:93:
cf:e6:e4:e0:91:4d:8a:29:5c:d7:d6:fe:8c:20:d0:fd:a6:60:
ea:e3:22:e4:1c:2d:ae:05:94:9d:ab:24:89:2a:62:ec:9c:21:
ce:13:de:c1:1d:d6:17:4c:be:cc:2c:b1:ce:14:6b:22:5a:8d:
3e:17:2c:67:97:2f:13:41:3d:bc:1b:b0:fe:05:20:02:9c:fd:
6d:ab:67:63:7c:ab:be:c9:f9:92:8a:5a:2c:f5:b9:a4:ed:fa:
fe:c7:98:bd:80:db:fa:33:fe:17:7d:55:91:ab:d7:9d:bd:4f:
55:64:3e:10:fb:33:e6:e4:8f:1c:12:ea:6e:b3:db:d4:43:14:
bc:72:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org