Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230382e302f32302d3232203d3e203238333238.roa
File: 3138392e31342e3230382e302f32302d3232203d3e203238333238.roa (raw, json)
Hash identifier: WWYgXwX05oSf2Bj4PAz6fopVE83iddUUz+c/Nn+TF/A=
Subject key identifier: 87:8A:90:A7:DB:AF:C1:1A:4E:68:08:77:21:15:F2:B1:7C:7E:66:34
Certificate issuer: /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial: 48F155C5B4913E86EDA6017ECC1C1F597018A48E
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230382e302f32302d3232203d3e203238333238.roa
Signing time: Wed 24 Apr 2024 21:40:04 +0000
ROA not before: Wed 24 Apr 2024 21:35:04 +0000
ROA not after: Wed 23 Apr 2025 21:40:04 +0000
asID: 28328
IP address blocks: 189.14.208.0/20 maxlen: 22
Validation: Failed, certificate revoked on Fri 26 Apr 2024 16:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f1:55:c5:b4:91:3e:86:ed:a6:01:7e:cc:1c:1f:59:70:18:a4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Validity
Not Before: Apr 24 21:35:04 2024 GMT
Not After : Apr 23 21:40:04 2025 GMT
Subject: CN=878A90A7DBAFC11A4E6808772115F2B17C7E6634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:37:b1:65:1a:f4:6b:49:13:a6:dc:bf:4b:
72:c8:91:8a:d6:74:d2:6a:8d:13:e7:f8:1c:17:5e:
c6:1c:e9:64:be:88:f2:fd:f3:af:03:c9:46:62:a9:
3c:0c:bd:bc:ef:0b:75:34:98:d4:fe:86:36:ed:c8:
d8:77:63:d1:b3:dc:39:c0:c6:ae:41:cb:3f:88:48:
88:9c:e2:e3:e3:aa:82:6a:30:cc:3a:a2:99:b1:6a:
d8:2f:48:43:8a:fe:d6:c2:5d:6c:bf:c6:54:1f:86:
c6:65:57:6d:ca:d6:19:a5:ba:a4:01:47:36:9f:20:
9d:78:70:a8:9b:94:f9:3d:31:69:11:90:67:84:eb:
d0:39:c6:31:8d:bf:6a:63:4e:6d:71:82:6d:c4:54:
86:58:21:02:2e:f1:2c:f7:8e:6d:c0:6d:b4:f1:88:
e3:84:e7:6b:36:a0:13:d2:b0:5c:e7:64:ab:52:36:
e0:40:fd:d6:ed:55:54:57:88:f2:1b:03:6a:a7:ce:
5f:cc:de:ba:dd:c4:2d:8e:80:1a:9b:4d:3c:d3:b1:
ee:ed:5b:8f:08:e9:1a:b2:0b:4f:a1:5c:42:f3:43:
8f:f3:62:4d:bb:69:04:b1:76:3c:08:d0:e3:99:7c:
f7:20:e4:b2:3d:dd:35:1d:99:34:e6:ee:03:d0:6d:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:90:A7:DB:AF:C1:1A:4E:68:08:77:21:15:F2:B1:7C:7E:66:34
X509v3 Authority Key Identifier:
keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230382e302f32302d3232203d3e203238333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.14.208.0/20
Signature Algorithm: sha256WithRSAEncryption
bb:71:66:d8:25:21:c4:5a:44:6a:e2:17:ea:34:06:26:16:2e:
7e:6b:86:b1:ec:4f:5c:36:ad:2d:be:b0:10:d2:5e:4f:cd:5a:
85:16:de:23:89:2b:98:ad:a8:5f:a4:e9:10:78:3b:28:c8:8f:
de:b1:97:33:af:cd:47:cb:56:d0:5e:d1:fe:8c:9b:ac:b3:3b:
4a:78:80:84:78:be:23:37:75:9c:35:25:98:00:df:81:f9:9b:
c4:68:31:4b:32:df:aa:e2:0d:a8:e9:46:a5:35:d4:98:be:bf:
e6:09:8f:d9:a1:24:3a:4c:5e:84:10:f4:de:69:03:f3:1a:6a:
07:53:6a:12:de:60:ab:93:fc:44:d2:b5:66:be:e0:38:f3:89:
5e:da:c2:b9:68:32:2c:0d:f2:d6:bf:c5:36:12:f4:95:38:91:
ce:33:50:c0:25:15:da:77:d9:20:e1:78:6d:7e:7c:77:ff:8e:
57:f3:e6:9a:a0:26:d2:2c:da:e8:54:7a:87:6d:c2:72:6b:00:
18:66:17:50:cc:f5:1e:63:53:a0:89:95:96:42:76:b0:c3:c1:
1e:91:9b:28:e0:8e:2a:a2:18:78:21:e4:75:ff:b6:00:e4:ca:
00:5d:29:cc:e7:60:6b:17:2e:00:1b:dc:9b:c4:6e:82:0d:90:
01:2b:97:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org