Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232302e302f32322d3232203d3e20323633303837.roa
File: 3137372e3133372e3232302e302f32322d3232203d3e20323633303837.roa (raw, json)
Hash identifier: 7O0aQAd8O/Qb8mVVQj0PGrct88DemBwMFi9zrJgLSfE=
Subject key identifier: E3:99:94:65:3E:20:0D:E6:4F:0C:6F:B4:E6:B5:14:98:3E:8C:2E:59
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 3CF99F0C7632BE5BCDC2DC6C19F5E2BA600399E2
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232302e302f32322d3232203d3e20323633303837.roa
Signing time: Wed 22 May 2024 17:35:30 +0000
ROA not before: Wed 22 May 2024 17:30:30 +0000
ROA not after: Wed 21 May 2025 17:35:30 +0000
asID: 263087
IP address blocks: 177.137.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Jun 2024 18:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f9:9f:0c:76:32:be:5b:cd:c2:dc:6c:19:f5:e2:ba:60:03:99:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: May 22 17:30:30 2024 GMT
Not After : May 21 17:35:30 2025 GMT
Subject: CN=E39994653E200DE64F0C6FB4E6B514983E8C2E59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:6f:00:9f:50:62:7f:00:c0:20:f1:b4:17:
5c:f4:20:7a:66:fd:15:9e:ac:c0:47:1c:67:10:6c:
5d:e2:f0:c2:e5:4a:08:32:66:8c:15:93:c2:32:c6:
c9:9f:9c:01:67:a2:d6:e8:61:aa:69:c0:91:78:61:
f8:30:17:ac:ca:eb:74:2d:68:a0:da:77:db:dc:81:
95:0e:12:48:e3:f0:51:33:d1:77:0e:41:9d:ca:d7:
de:81:35:64:ce:cc:3d:2b:23:f6:93:01:91:4f:b0:
72:fc:20:92:78:76:4d:e7:e1:78:9e:13:2d:82:2d:
f4:fb:93:41:6b:fa:ee:b1:09:3c:a7:b1:b6:ef:9a:
95:8e:7f:95:66:08:5d:e5:95:b3:58:e4:e4:e0:45:
a8:c0:31:89:69:d3:6b:d6:f8:32:a8:36:a7:b2:5e:
17:b0:22:3c:e5:df:cb:c7:b0:81:04:4e:9d:52:86:
40:2b:83:12:0c:46:b3:ac:6b:1c:6e:42:54:63:2a:
6a:00:b8:62:4e:3e:d0:e3:48:a4:67:8e:56:39:67:
ae:7c:37:32:a6:17:fc:cc:23:c6:6b:ac:64:54:47:
42:4d:82:cb:7f:6a:37:fb:bf:85:42:ea:7b:ef:1d:
ad:d2:30:6e:47:23:a6:e8:ae:17:5d:c8:84:22:ad:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:99:94:65:3E:20:0D:E6:4F:0C:6F:B4:E6:B5:14:98:3E:8C:2E:59
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232302e302f32322d3232203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.220.0/22
Signature Algorithm: sha256WithRSAEncryption
08:21:28:72:0f:ab:10:cd:72:16:d2:af:73:2e:be:f5:9b:29:
ef:ff:1b:a7:8d:f7:08:f7:3c:cd:7f:67:00:fb:47:0b:e5:61:
8b:61:d5:63:db:4c:91:79:fe:ef:df:38:d7:b4:46:d1:89:47:
8d:6e:d7:78:9f:01:1f:c2:78:a4:a4:05:53:09:6b:53:1a:60:
16:fd:20:3e:19:77:e8:47:ba:6c:7e:4a:ac:05:c7:0a:06:28:
19:9c:b9:e8:6a:05:f5:aa:ab:08:33:fc:ac:34:53:dc:cd:78:
80:1c:fe:6a:3b:92:90:6d:16:f1:fe:03:4a:b2:bc:be:23:11:
5e:02:55:fa:c5:48:ab:e8:59:d9:cc:4f:5e:86:37:29:8f:bd:
2f:2d:f4:67:80:7a:9a:37:f6:5e:4c:c8:8d:c4:c6:79:39:6b:
bf:b6:2b:bc:b5:b6:00:99:3a:29:75:9a:2f:ab:8a:33:64:bb:
cc:8a:ea:85:1c:bb:aa:e8:7e:55:64:ea:cf:1a:15:e0:43:77:
4d:e9:bf:bc:58:95:de:69:9a:18:e7:04:bb:9d:c5:90:04:fc:
7b:3f:a5:57:4b:5a:a4:b6:81:3c:da:be:f3:96:8e:80:c4:7d:
1c:1f:22:cd:75:a4:b9:a2:0f:55:99:4e:04:7d:a4:77:9a:fb:
f6:c5:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org