Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32302e302f32322d3232203d3e20323633303236.roa
File: 3133382e33362e32302e302f32322d3232203d3e20323633303236.roa (raw, json)
Hash identifier: bOOftaMnj/5qcj9C5SQJvRLisUUTUdXX0ZaEsMkHTJ0=
Subject key identifier: E1:2A:5C:D2:C4:FB:3B:A5:F8:02:53:C2:79:92:6F:1B:2A:68:53:9B
Certificate issuer: /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial: 24CE4E89C3DCD9D83F32D85B100FF2027BD102A6
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32302e302f32322d3232203d3e20323633303236.roa
Signing time: Thu 04 Apr 2024 15:10:31 +0000
ROA not before: Thu 04 Apr 2024 15:05:31 +0000
ROA not after: Thu 03 Apr 2025 15:10:31 +0000
asID: 263026
IP address blocks: 138.36.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 07 Aug 2024 14:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ce:4e:89:c3:dc:d9:d8:3f:32:d8:5b:10:0f:f2:02:7b:d1:02:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Validity
Not Before: Apr 4 15:05:31 2024 GMT
Not After : Apr 3 15:10:31 2025 GMT
Subject: CN=E12A5CD2C4FB3BA5F80253C279926F1B2A68539B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:80:1d:36:50:f2:49:76:11:08:03:5b:68:d5:
fe:6a:2e:25:76:16:bf:9d:94:77:28:fb:3d:78:d9:
13:35:b4:f5:64:03:bc:c6:f9:cf:43:24:24:d9:8c:
ab:b6:11:b6:87:ab:b1:32:68:92:30:9d:4a:a7:df:
16:ad:01:12:73:9a:a3:68:4c:03:4d:35:a4:05:03:
d1:b2:31:5c:63:ce:62:1b:54:ff:af:e2:9f:b7:95:
bb:59:82:e1:2e:05:4a:e9:ea:40:2f:54:e6:b6:cf:
fd:32:c2:ff:83:64:8e:1c:c1:41:01:07:f6:df:86:
36:96:7f:a1:a7:c6:69:52:0a:f1:f4:2b:94:18:3a:
d9:d8:1d:21:01:53:ab:e9:4b:e3:e7:13:3a:28:02:
d3:b3:db:e7:9d:32:d0:38:d7:82:d0:5d:c4:40:9d:
03:40:2b:3b:d7:9c:e3:e4:96:98:77:2c:bb:d3:fa:
d4:86:93:2a:59:9e:c7:f8:19:b7:46:62:6d:00:b8:
7c:68:87:3c:25:bc:ea:a6:3b:db:c4:07:ea:81:75:
97:b9:98:a3:ee:b3:3f:25:5e:20:f1:48:b5:6a:b6:
6d:1a:4e:c6:a3:fa:cb:31:b7:71:8f:f1:62:04:83:
82:a5:58:df:11:d6:ed:ef:bf:5f:27:15:ab:64:86:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2A:5C:D2:C4:FB:3B:A5:F8:02:53:C2:79:92:6F:1B:2A:68:53:9B
X509v3 Authority Key Identifier:
keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32302e302f32322d3232203d3e20323633303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.20.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:f6:23:91:6a:e1:8e:54:ea:0b:59:8a:d5:5b:a4:75:af:cc:
ec:ff:39:2a:80:90:46:2b:1b:f3:b7:46:5d:fa:67:10:3d:e4:
91:aa:c1:ee:9d:f4:f1:29:39:3d:7c:29:d3:72:cd:ba:2c:eb:
6d:79:c1:b1:a9:d4:53:4c:d9:2f:f7:ac:27:2e:70:7a:28:c3:
f9:9b:cb:08:18:8b:ba:9f:dc:3d:d0:2b:9f:57:d0:d7:52:31:
f9:ef:a3:19:d7:0e:75:e8:df:87:5c:00:e7:a3:d7:a2:9e:89:
40:2e:3d:93:dc:e4:a4:9c:99:76:73:f3:55:07:e3:b4:ef:61:
4f:f6:a9:7a:fa:87:1f:d2:f2:22:d0:9f:7c:1e:7e:7d:27:f1:
63:ea:32:4e:cb:67:ff:f9:5d:12:93:58:ac:0c:13:44:2f:37:
a9:17:ec:a0:7e:50:2f:98:6b:ad:44:35:8f:1c:0e:0c:31:f7:
2c:80:0c:99:ba:07:bb:7d:29:10:32:c1:34:00:92:29:28:d6:
24:64:d2:8d:68:6f:43:cc:c9:10:1c:54:ed:c9:f3:82:67:67:
b6:24:4c:c1:db:45:39:21:2b:ae:c5:0f:83:7d:83:ca:08:7d:
6b:4e:06:b7:12:7c:0f:26:68:bf:9d:ef:a4:a2:58:88:47:3a:
15:a5:9d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org