Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136342e302f32322d3232203d3e20323633303837.roa
File: 3137392e3130392e3136342e302f32322d3232203d3e20323633303837.roa (raw, json)
Hash identifier: hwjZGGiJgcuwsmOuvKGhGW/4czt5r3VpfZeGNe1eQRU=
Subject key identifier: 30:7D:D8:D2:1E:9D:A9:08:AB:B7:20:65:36:16:C1:F7:A0:35:96:A1
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 0AC7AE7D224C5AA4F42907E66082444B507B9916
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136342e302f32322d3232203d3e20323633303837.roa
Signing time: Wed 22 May 2024 17:36:54 +0000
ROA not before: Wed 22 May 2024 17:31:54 +0000
ROA not after: Wed 21 May 2025 17:36:54 +0000
asID: 263087
IP address blocks: 179.109.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Jun 2024 18:51:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:c7:ae:7d:22:4c:5a:a4:f4:29:07:e6:60:82:44:4b:50:7b:99:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: May 22 17:31:54 2024 GMT
Not After : May 21 17:36:54 2025 GMT
Subject: CN=307DD8D21E9DA908ABB720653616C1F7A03596A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:44:b2:32:f6:73:75:14:1f:8f:47:86:c4:
53:e3:18:64:60:7b:73:e4:2e:c9:7d:b5:52:3c:f1:
7b:0c:1d:1f:5a:14:6e:ab:95:c7:b4:0e:77:c3:a5:
b1:06:4f:0f:a6:fb:2f:87:3b:56:c5:c1:f4:0e:10:
93:14:19:23:52:2e:61:20:24:81:fb:74:14:04:a8:
7e:9f:9b:88:9e:a7:56:77:d4:a6:bc:65:14:82:87:
51:c5:6e:bd:67:1b:9c:0f:34:81:a7:9a:23:95:a4:
bf:78:13:a8:54:98:7d:a7:da:d2:be:be:c7:cb:69:
8d:b5:d1:23:43:1a:6e:f7:3b:b8:92:c0:f1:fd:e1:
41:d0:8e:3b:14:88:64:81:5d:b3:33:13:6e:5e:fc:
7c:cb:02:1d:c7:c7:f1:06:ac:65:aa:c1:b3:b3:17:
33:fc:6f:18:56:ab:98:81:85:18:b8:24:cb:19:1b:
97:b2:65:3b:5f:fb:f9:3b:a3:bb:61:c5:d2:38:c3:
4b:1e:3f:68:bf:46:d1:78:e3:df:e1:3c:f8:30:b5:
c6:50:49:b1:8c:7c:e8:a3:b0:8b:df:63:01:8a:5a:
af:5c:a6:70:08:d4:f4:ea:1c:e4:f8:d2:6b:1e:46:
a0:f0:1c:cc:ce:23:e9:35:92:85:65:18:5b:0c:f3:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7D:D8:D2:1E:9D:A9:08:AB:B7:20:65:36:16:C1:F7:A0:35:96:A1
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136342e302f32322d3232203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.109.164.0/22
Signature Algorithm: sha256WithRSAEncryption
47:93:23:db:2a:f6:03:24:0b:b6:fa:84:7a:b3:4f:bf:4b:ca:
39:7a:11:68:95:b4:1d:48:0a:6f:aa:24:4a:57:9a:28:c9:23:
f2:0a:5c:d3:96:1f:29:8e:40:35:99:d9:57:8e:41:db:c2:11:
72:79:a9:74:df:36:fc:91:3e:dd:9b:00:fe:42:9b:bd:09:3b:
42:28:60:37:ef:8e:25:5d:5f:95:bc:50:c7:92:8f:29:a9:ad:
dc:f0:e2:c7:3e:81:28:e3:06:1c:ac:8f:57:f0:5d:21:64:da:
e7:53:f8:c7:4a:79:58:40:0e:1d:c8:92:48:4c:a8:2d:e4:3e:
7f:e7:65:c7:86:bd:15:38:a1:01:5c:88:95:af:94:60:a2:60:
20:3a:8a:21:d8:d1:ff:39:cf:42:75:25:08:16:4d:3c:2d:0b:
26:61:19:cd:9a:c0:4b:44:0a:a9:4d:2b:b7:2d:7b:0c:f5:56:
f1:56:21:af:3f:51:04:98:6a:25:82:1b:76:ec:4f:41:62:ab:
fd:22:04:42:83:07:67:fd:20:98:9d:5a:f8:d0:2e:47:6f:60:
fd:4c:2e:9f:ee:a8:87:9e:20:36:aa:bd:b1:d0:a1:9a:26:79:
b6:e7:30:98:4c:e6:e0:69:7d:b8:81:75:1e:a0:91:97:2f:21:
26:b7:6e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org