Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f32302d3233203d3e203238333238.roa
File: 3138392e31342e3139322e302f32302d3233203d3e203238333238.roa (raw, json)
Hash identifier: sbjzHrlkvoousZBIb3x3bPJBkQoRhrQ2ULa+Aa73FuI=
Subject key identifier: 70:54:3F:73:8F:71:45:11:DE:E7:E8:69:98:28:D7:AC:C2:B8:3F:F7
Certificate issuer: /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial: 6E1C56A1700DE2E0DEB2679166755991E385500D
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f32302d3233203d3e203238333238.roa
Signing time: Mon 29 Jul 2024 12:18:29 +0000
ROA not before: Mon 29 Jul 2024 12:13:29 +0000
ROA not after: Mon 28 Jul 2025 12:18:29 +0000
asID: 28328
IP address blocks: 189.14.192.0/20 maxlen: 23
Validation: Failed, certificate revoked on Mon 29 Jul 2024 13:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:1c:56:a1:70:0d:e2:e0:de:b2:67:91:66:75:59:91:e3:85:50:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Validity
Not Before: Jul 29 12:13:29 2024 GMT
Not After : Jul 28 12:18:29 2025 GMT
Subject: CN=70543F738F714511DEE7E8699828D7ACC2B83FF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:c7:4f:6e:a9:1f:ff:57:bc:6a:a3:97:99:
90:1c:87:fa:7f:0c:b6:d0:be:f6:47:8e:ff:09:70:
be:92:30:7e:4a:44:42:5e:f8:8b:88:f7:f6:ef:9e:
9b:a2:09:53:af:66:52:7a:19:6b:7d:94:06:b4:7a:
cc:1e:e9:b3:40:74:6d:00:32:8a:d4:fb:65:75:f3:
12:03:b1:0f:01:6a:a4:88:5a:3d:5b:7b:9d:15:9e:
82:37:60:3f:f8:86:74:7a:9a:7c:ba:17:e8:c6:14:
0c:2d:4b:45:7b:9d:9d:aa:59:11:dc:81:3c:14:37:
0e:fa:7b:44:d5:ba:7d:f1:6f:bc:59:f5:73:bd:47:
a2:d2:1c:47:5f:ed:0e:02:c1:6e:01:62:63:ba:1e:
93:1e:dc:3f:cd:91:f6:72:0d:f4:4f:1b:40:c1:fa:
e5:ce:47:54:e7:53:69:48:45:04:bd:b9:2c:c1:f2:
9d:bf:40:5f:86:53:09:7e:f1:a5:9f:62:c6:ce:48:
b8:d8:b1:44:51:ec:03:30:9f:23:da:7f:19:0c:39:
e3:0a:bd:be:2f:7b:03:b2:df:e2:eb:bd:0e:b3:a8:
39:42:3c:c9:f9:00:7c:ce:0a:5b:cc:86:0b:05:1d:
cc:e9:2d:bd:b0:04:37:7e:12:4c:28:a7:35:e9:ac:
0b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:54:3F:73:8F:71:45:11:DE:E7:E8:69:98:28:D7:AC:C2:B8:3F:F7
X509v3 Authority Key Identifier:
keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f32302d3233203d3e203238333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.14.192.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:82:e2:af:68:f7:2f:8e:92:60:4a:2c:37:36:7f:33:4f:c9:
2c:27:eb:be:12:e5:42:ea:15:53:f6:df:b6:7e:0a:26:b6:32:
89:92:f9:46:6c:8b:55:87:9d:3d:28:e3:ec:d8:e0:cd:dc:bd:
e9:1b:5b:5b:41:12:4c:19:11:be:50:91:49:14:a8:90:fd:bf:
7f:d8:c1:89:55:0f:33:88:e0:bd:dd:23:7c:87:77:bb:93:6f:
7c:f0:29:ba:4c:76:6c:a2:70:68:e6:fd:45:01:74:6a:18:4d:
27:9c:c7:96:da:8f:ad:d5:44:46:29:47:b1:2c:7f:20:79:42:
11:1f:fb:99:a8:62:01:fc:5c:4b:1a:fa:1b:94:3d:81:8d:7c:
7b:37:a3:0a:97:f5:0a:b5:e4:0b:5e:a8:81:b4:ea:da:27:6e:
88:15:63:7d:cb:42:87:05:d5:08:7e:1a:99:91:b7:b8:82:8c:
5e:13:fa:42:5e:8b:1c:66:f2:de:f3:6b:e1:f5:b8:6e:af:d7:
19:2d:01:97:06:9b:3f:94:94:ce:60:0b:49:3c:5c:b7:22:29:
78:ea:2b:fe:2e:c7:1c:33:a2:f3:c0:f0:d3:bc:0f:ea:08:79:
aa:91:3b:2d:93:31:b2:f5:42:93:25:04:9e:46:69:f1:82:84:
8c:d8:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 17:07:29 2024 by rpki-client on console-ams.rpki-client.org