Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32322d3232203d3e20323633303837.roa
File: 3137392e3130392e3136302e302f32322d3232203d3e20323633303837.roa (raw, json)
Hash identifier: hj1s+7BDVSlDrpr2r8kuAFUgoarA7LhEIGP8xTrKGpk=
Subject key identifier: EB:BF:85:64:E7:69:7A:EA:8C:42:C9:5C:7F:83:B6:73:66:97:B3:C4
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 265922FFC089343F7B11896B7B9D9D0ABDC36EE9
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32322d3232203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:31:55 +0000
ROA not before: Thu 18 Apr 2024 14:26:55 +0000
ROA not after: Thu 17 Apr 2025 14:31:55 +0000
asID: 263087
IP address blocks: 179.109.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 22 May 2024 17:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:59:22:ff:c0:89:34:3f:7b:11:89:6b:7b:9d:9d:0a:bd:c3:6e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:26:55 2024 GMT
Not After : Apr 17 14:31:55 2025 GMT
Subject: CN=EBBF8564E7697AEA8C42C95C7F83B6736697B3C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:b6:2e:6a:c2:47:be:b3:40:23:24:40:b2:
bd:82:51:df:7b:b0:e6:c9:ac:ca:38:c5:79:c3:53:
dd:42:e2:69:77:ea:ab:ca:6c:71:28:c0:a1:5d:32:
d1:3e:32:9b:87:90:5d:88:f2:6a:ee:10:d4:5b:42:
34:2c:9d:64:dd:46:49:c2:73:4a:e9:3d:89:6a:c2:
2b:59:25:05:2b:be:e0:97:82:39:00:b7:e7:90:a4:
de:fb:7d:17:73:7e:75:2a:09:22:b8:06:f8:9c:5f:
b2:9b:ac:8d:a6:9a:62:c4:2a:8a:4f:d7:30:d6:7a:
a7:62:d4:35:8c:09:87:dd:0a:2c:d2:27:48:d3:32:
92:ca:81:97:b0:b0:3b:24:c1:45:32:cd:7c:36:fc:
41:f7:cf:3b:ce:51:f1:ea:d5:81:41:78:14:0f:87:
25:74:b6:f5:7b:d5:d4:60:98:27:f0:a3:4a:e2:6b:
8a:3c:b6:41:2f:cd:04:44:d9:2a:d5:b6:61:5d:a6:
2a:7b:90:fc:bb:b7:32:5c:71:f6:6a:c3:c1:47:23:
e4:39:e5:fc:d3:52:00:aa:8d:9a:14:c5:a6:ce:a4:
ab:7d:6b:db:3e:42:eb:7b:1a:af:bd:7e:ec:50:17:
6d:bb:72:84:ca:d4:5f:9d:c1:92:f9:1c:18:1b:5a:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:85:64:E7:69:7A:EA:8C:42:C9:5C:7F:83:B6:73:66:97:B3:C4
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32322d3232203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.109.160.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:bd:a6:27:1b:91:d0:d2:cd:55:f9:ed:ef:44:6b:98:46:80:
6c:54:d0:8a:b1:15:ae:49:c1:6c:77:f2:3d:ff:ee:7b:5e:15:
f2:72:a0:4c:a7:8c:11:c2:04:fa:1f:be:32:e1:12:f5:40:57:
47:c6:b8:46:a5:ce:74:15:c0:2b:49:84:8e:04:79:f9:a0:8e:
39:56:86:ba:ba:20:ff:82:bd:7e:2a:70:42:c2:4b:cc:39:16:
ac:92:37:5e:0f:23:5a:bf:63:7a:89:62:29:bc:58:b0:f4:44:
7b:08:b8:b2:d3:ea:2e:a2:65:09:c9:f4:55:8c:ad:0b:a6:58:
cf:81:97:e8:96:e6:92:d1:52:8d:a0:6e:c1:36:7b:b7:f7:c2:
c7:ef:5d:c2:bd:e8:ad:42:a0:a2:58:b0:d6:80:2e:f7:fc:1e:
a9:f0:03:0c:25:05:36:d3:a1:01:7b:91:0e:6b:00:2f:b6:be:
7f:e6:d4:84:3a:69:ab:4f:f8:f0:49:89:c9:b3:f9:f6:32:f0:
27:d0:86:f1:f0:91:e8:09:35:af:5e:51:4f:54:86:32:a4:d0:
00:57:f9:8b:99:13:29:a1:cc:89:59:5d:43:7e:99:4f:48:15:
d3:aa:07:8e:c7:e7:38:4e:f9:a9:09:ff:9a:07:1b:13:4b:7e:
eb:04:05:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org