Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230302e302f32322d3232203d3e203238333238.roa
File: 3138392e31342e3230302e302f32322d3232203d3e203238333238.roa (raw, json)
Hash identifier: 3kvQgGQiHhmqTUCKPVcf2t4dzhoTHVinrx+rPeaznjk=
Subject key identifier: 22:17:7B:BB:2C:34:24:E2:45:11:8C:DB:E1:78:6B:56:01:0D:D0:D4
Certificate issuer: /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial: 1CE424B22ED344BCB8CD5035180EEF91F5099AAD
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230302e302f32322d3232203d3e203238333238.roa
Signing time: Fri 26 Apr 2024 16:55:48 +0000
ROA not before: Fri 26 Apr 2024 16:50:48 +0000
ROA not after: Fri 25 Apr 2025 16:55:48 +0000
asID: 28328
IP address blocks: 189.14.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 29 Jul 2024 12:19:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e4:24:b2:2e:d3:44:bc:b8:cd:50:35:18:0e:ef:91:f5:09:9a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Validity
Not Before: Apr 26 16:50:48 2024 GMT
Not After : Apr 25 16:55:48 2025 GMT
Subject: CN=22177BBB2C3424E245118CDBE1786B56010DD0D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:c6:85:cf:be:a0:ef:ca:0a:6b:91:2a:26:
f5:38:79:9a:f4:73:ed:9e:b8:5d:31:93:fe:2b:84:
85:7e:53:ea:74:a3:54:f8:a9:d1:e7:4a:cd:f4:54:
f8:31:d5:83:3a:e4:05:1f:1f:24:0a:dc:6e:e0:65:
da:10:1e:55:46:75:9f:03:7c:4c:f3:bf:ad:96:76:
78:7c:7b:54:66:86:66:c4:b4:3a:36:6d:9d:6c:09:
44:fb:b5:72:54:de:43:4c:dc:0b:7c:ce:3d:00:17:
74:7d:cd:6f:cf:8e:01:f5:96:48:2f:50:5c:a0:3f:
96:e1:c2:b4:02:11:75:95:c2:5a:07:ed:e5:45:fc:
6d:4d:be:59:f9:ce:3d:2b:46:69:14:7b:be:f6:db:
3f:46:8c:bd:55:ad:9f:02:44:b5:48:da:4c:93:ac:
99:00:79:70:71:63:65:ed:9b:f9:e8:35:f3:2d:28:
0a:01:05:53:9e:79:7c:68:ef:e9:77:1e:f8:4a:48:
e0:3a:82:88:0a:bb:e1:b1:ee:15:44:90:5c:af:3c:
91:27:1c:ee:d1:c5:40:45:8f:03:e5:68:9f:6d:91:
5a:85:0e:d3:2a:4d:cb:28:3c:69:e8:34:ad:e3:b8:
92:d7:49:23:17:14:50:0a:cc:dd:68:c5:44:0d:60:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:17:7B:BB:2C:34:24:E2:45:11:8C:DB:E1:78:6B:56:01:0D:D0:D4
X509v3 Authority Key Identifier:
keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230302e302f32322d3232203d3e203238333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.14.200.0/22
Signature Algorithm: sha256WithRSAEncryption
99:7c:71:1f:a8:c0:7b:61:85:3b:1b:fb:b4:8f:0f:02:a6:21:
32:41:97:95:19:8e:f4:14:97:fb:59:e7:73:6c:74:3c:4d:ac:
5f:8d:85:a3:64:1e:32:9d:64:88:ef:6d:b6:ec:0d:08:53:26:
c3:b2:50:9e:11:73:c0:9b:7a:94:a7:6c:eb:98:69:b5:7f:5e:
38:e1:c6:a2:1f:9e:50:18:f7:5f:47:49:28:d4:7b:40:ea:69:
c8:b5:ae:d4:80:6c:c9:f9:d5:e0:e2:4e:71:3c:bd:54:1b:a8:
2f:a6:33:45:84:d6:70:33:3f:d0:42:79:00:aa:cf:3e:42:f5:
85:e4:70:00:c2:64:92:90:76:dd:e6:06:ff:e6:2a:d6:86:02:
bd:00:06:08:28:73:36:4c:b3:23:4e:4d:b3:1b:10:de:fa:c9:
8a:d8:52:35:0a:24:f1:18:fa:e9:ee:00:50:07:0f:21:a7:66:
ca:3e:c2:9f:5d:cd:92:3f:93:cf:fc:f9:cc:09:1a:b4:0c:36:
e4:a3:e8:78:b7:23:83:c6:99:dd:ef:42:b7:4f:d8:74:c9:79:
29:58:22:e0:bc:05:c1:bf:17:9b:b6:78:39:1e:d9:53:c7:b5:
70:07:f9:09:27:40:81:97:90:a0:61:95:86:28:cf:fe:25:c5:
87:c8:3f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 13:52:10 2024 by rpki-client on console-fra.rpki-client.org