Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3137322e302f32332d3233203d3e20323633303837.roa
File: 3137392e3130392e3137322e302f32332d3233203d3e20323633303837.roa (raw, json)
Hash identifier: Zlpx9RUOL5irFHNe9UlJ0PG13XwF8HYTgYAsqFlmDqY=
Subject key identifier: 1A:08:37:BD:BC:33:A4:1F:D3:10:ED:51:AB:73:9E:95:07:63:93:E4
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 0AFF5A30F7252BE551E433E0E941282BFF3D5105
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3137322e302f32332d3233203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:33:03 +0000
ROA not before: Thu 18 Apr 2024 14:28:03 +0000
ROA not after: Thu 17 Apr 2025 14:33:03 +0000
asID: 263087
IP address blocks: 179.109.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 22 May 2024 17:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ff:5a:30:f7:25:2b:e5:51:e4:33:e0:e9:41:28:2b:ff:3d:51:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:28:03 2024 GMT
Not After : Apr 17 14:33:03 2025 GMT
Subject: CN=1A0837BDBC33A41FD310ED51AB739E95076393E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:e5:6c:74:21:c2:13:9b:aa:fd:f8:5e:bd:
a5:53:36:ae:a6:2c:a0:39:d7:17:26:24:27:9b:90:
7c:5a:0c:af:30:40:a0:8b:19:87:b8:ab:9b:62:dd:
29:cd:42:a5:15:b9:91:9b:27:26:f7:84:9f:31:81:
f8:28:c2:03:6f:a0:e8:68:61:5a:e7:8e:ac:7a:14:
57:e7:8c:22:0d:d8:1c:62:07:d9:8f:d9:68:30:8c:
b9:bf:8e:c2:b6:b7:ae:25:86:b4:cd:49:3a:a3:bd:
8a:15:4f:bb:97:54:50:9b:a2:95:0b:dc:e3:65:0a:
aa:8c:85:7e:18:76:96:42:ce:be:01:cf:67:19:a4:
8a:6e:17:50:5f:9e:7e:fd:e8:99:21:8b:56:62:2f:
90:c7:1e:11:e8:53:32:ac:a0:1f:99:e7:40:b3:ac:
8f:c2:92:50:09:19:fa:7a:8c:83:62:58:e8:69:58:
c3:83:51:9b:60:48:ed:1e:62:a2:b0:ee:9e:9d:c3:
1c:ba:d3:7e:d5:92:ef:16:63:7a:ad:52:c7:20:6b:
72:41:84:bf:66:96:9c:36:4e:03:bc:fa:1e:c8:eb:
61:a8:64:98:bc:1b:66:6c:d1:61:e8:95:a1:77:79:
63:cd:16:8e:4d:42:85:b0:f5:85:9b:cf:db:36:c0:
20:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:08:37:BD:BC:33:A4:1F:D3:10:ED:51:AB:73:9E:95:07:63:93:E4
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3137322e302f32332d3233203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.109.172.0/23
Signature Algorithm: sha256WithRSAEncryption
56:58:2e:d2:a0:72:d4:b7:ec:87:58:df:a7:f3:05:e9:54:b2:
04:db:ac:c3:3f:53:be:4d:9a:5c:15:f1:95:ce:31:cc:5e:25:
3a:26:2c:7a:ac:bf:0b:47:38:74:d5:51:97:c7:9d:2d:ba:a2:
e3:3b:9b:88:f7:61:92:10:f3:f1:ef:3b:0e:e2:45:b6:38:7e:
17:96:64:70:6d:c1:3c:a4:7a:09:2b:37:45:05:72:f1:e3:81:
4e:b1:a0:dc:47:11:4b:f6:9a:be:fd:2b:d7:18:e5:47:09:3c:
8b:94:55:c9:6f:2b:64:a9:09:18:fc:82:f2:b4:4d:f4:a8:c0:
d1:e6:53:b8:b7:f4:f9:4c:02:db:13:5c:72:dc:6a:ae:73:19:
96:f6:d5:2b:d0:a6:ea:90:77:6d:50:61:5e:07:49:91:53:3e:
4a:88:93:f1:05:f6:a3:94:06:8e:62:2e:b6:79:39:55:1e:d9:
9d:45:79:54:19:b5:33:53:8e:ba:a3:1d:17:49:ea:35:4b:a7:
9a:a5:ad:a9:d2:2d:29:04:2d:78:24:a0:03:ed:8e:1c:cf:2b:
65:dc:ed:6e:88:7f:4f:49:a8:27:74:70:af:06:f8:ef:ff:d2:
3c:7f:2a:a1:8b:9c:61:a7:81:d3:ee:32:2e:22:ee:02:ec:e9:
37:b6:7c:ee
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCv9aMPclK+VR5DPg6UEoK/89UQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB
MzY0M0Y5NDAeFw0yNDA0MTgxNDI4MDNaFw0yNTA0MTcxNDMzMDNaMDMxMTAvBgNV
BAMTKDFBMDgzN0JEQkMzM0E0MUZEMzEwRUQ1MUFCNzM5RTk1MDc2MzkzRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0uVsdCHCE5uq/fhevaVTNq6m
LKA51xcmJCebkHxaDK8wQKCLGYe4q5ti3SnNQqUVuZGbJyb3hJ8xgfgowgNvoOho
YVrnjqx6FFfnjCIN2BxiB9mP2WgwjLm/jsK2t64lhrTNSTqjvYoVT7uXVFCbopUL
3ONlCqqMhX4YdpZCzr4Bz2cZpIpuF1Bfnn796Jkhi1ZiL5DHHhHoUzKsoB+Z50Cz
rI/CklAJGfp6jINiWOhpWMODUZtgSO0eYqKw7p6dwxy6037Vku8WY3qtUscga3JB
hL9mlpw2TgO8+h7I62GoZJi8G2Zs0WHolaF3eWPNFo5NQoWw9YWbz9s2wCC5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGgg3vbwzpB/TEO1Rq3OelQdjk+QwHwYDVR0j
BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C
LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF
QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9L
RmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1CLzAvMzEz
NzM5MmUzMTMwMzkyZTMxMzczMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
MzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAbNtrDANBgkqhkiG9w0BAQsFAAOCAQEAVlgu0qBy
1Lfsh1jfp/MF6VSyBNuswz9Tvk2aXBXxlc4xzF4lOiYseqy/C0c4dNVRl8edLbqi
4zubiPdhkhDz8e87DuJFtjh+F5ZkcG3BPKR6CSs3RQVy8eOBTrGg3EcRS/aavv0r
1xjlRwk8i5RVyW8rZKkJGPyC8rRN9KjA0eZTuLf0+UwC2xNcctxqrnMZlvbVK9Cm
6pB3bVBhXgdJkVM+SoiT8QX2o5QGjmIutnk5VR7ZnUV5VBm1M1OOuqMdF0nqNUun
mqWtqdItKQQteCSgA+2OHM8rZdztboh/T0moJ3Rwrwb47//SPH8qoYucYaeB0+4y
LiLuAuzpN7Z87g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org