Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232302e302f32332d3233203d3e20323633303837.roa
File: 3137372e3133372e3232302e302f32332d3233203d3e20323633303837.roa (raw, json)
Hash identifier: DHbwahT/7GWGo3Zzgj+oWkHhV0r3nsw6tdjfrISJ+UE=
Subject key identifier: 34:FE:54:AF:8E:C8:81:AF:8F:46:96:9E:35:4D:37:68:3E:E6:6B:1C
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 41C7B83666C1CB906371E98574270978393CCE8F
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232302e302f32332d3233203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:31:39 +0000
ROA not before: Thu 18 Apr 2024 14:26:39 +0000
ROA not after: Thu 17 Apr 2025 14:31:39 +0000
asID: 263087
IP address blocks: 177.137.220.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 22 May 2024 17:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c7:b8:36:66:c1:cb:90:63:71:e9:85:74:27:09:78:39:3c:ce:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:26:39 2024 GMT
Not After : Apr 17 14:31:39 2025 GMT
Subject: CN=34FE54AF8EC881AF8F46969E354D37683EE66B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:02:7d:40:b9:5c:24:63:5f:f6:8a:a9:cb:
f0:df:d0:0f:6e:c5:fa:8c:2e:36:73:f6:7e:1e:71:
dd:6c:83:fd:ca:2c:f3:ea:32:a3:8e:23:fb:89:40:
26:1a:65:c9:9e:fe:39:d9:38:f5:76:00:8f:d8:8d:
63:6d:88:33:5c:ad:43:7d:c5:fb:1a:d7:5b:31:68:
4b:a1:d3:53:d0:47:a9:a7:6c:b2:58:bb:83:cd:cb:
20:cf:88:8d:28:f8:4d:3a:89:a0:54:bf:03:5c:ea:
49:7a:9d:41:90:87:1f:6e:25:ce:af:5b:86:dd:b6:
35:bf:d9:3a:61:ae:c4:f9:0b:a0:a4:b4:23:90:b4:
20:8f:ea:f4:10:35:a2:ae:6c:d1:0b:ac:11:8c:2b:
7e:a1:4d:ce:6b:8c:f8:23:ab:1d:f3:02:3d:7e:c7:
6f:e0:4f:46:44:7d:de:39:ca:e1:da:0f:b9:81:70:
17:f6:96:bd:e8:7c:db:f4:56:be:f1:19:f3:53:47:
bf:df:a8:94:73:4d:39:6f:e6:1e:6c:e5:93:4f:dd:
88:fe:d1:02:a5:4c:f4:98:a6:48:85:33:02:ca:96:
1e:b0:d1:a2:81:63:23:78:97:ad:95:f6:c1:1e:e0:
18:70:21:65:03:c9:df:09:c2:7a:a1:37:c3:56:65:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FE:54:AF:8E:C8:81:AF:8F:46:96:9E:35:4D:37:68:3E:E6:6B:1C
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232302e302f32332d3233203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.220.0/23
Signature Algorithm: sha256WithRSAEncryption
57:b6:b3:08:84:68:34:4d:0d:36:f0:25:4a:0f:05:fd:84:0d:
e3:21:b1:6b:ff:f2:84:76:cf:2c:29:3c:04:95:56:f7:c7:d2:
1a:e0:6a:f0:a1:e8:07:d6:92:e3:4c:2d:d6:3b:ba:91:84:a5:
19:c9:33:33:c7:8f:a3:f6:33:ac:28:ba:b5:e6:4b:77:6a:72:
ce:5a:e4:df:c5:96:13:ee:a6:fb:12:f8:b3:fc:1a:0b:77:b3:
75:9f:70:38:50:89:3d:7a:a6:67:1c:bf:82:a9:d3:d0:95:7c:
7a:6d:9c:63:2e:b6:bb:a2:95:54:13:4c:e5:f9:45:ff:52:c5:
ec:04:e2:1b:a0:d1:51:15:d9:4f:b2:ad:c4:33:bc:8d:16:56:
27:ae:0b:a0:91:cf:bc:dd:a4:96:b5:94:91:9e:32:88:d1:b4:
6b:a7:f7:37:df:6d:c6:7c:94:e6:63:a0:5c:f0:97:ac:b4:f3:
9e:f1:e8:c0:31:08:f1:38:1b:81:89:e6:57:36:2b:b5:ad:fe:
cb:37:94:a7:af:a9:aa:98:92:11:36:55:f3:09:d0:11:b5:7c:
b8:34:51:6a:c3:81:d8:80:f0:7c:ec:90:3c:92:ed:06:d7:2e:
fe:68:8d:3c:51:34:d1:5d:ba:fa:c1:9d:14:21:15:b7:a1:d7:
a6:a8:20:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org