Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32302e302f32342d3234203d3e20323633303236.roa
File: 3133382e33362e32302e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier: 7Q8A6CjnzQxfXfUm5Nu7+t+TjK1U72olJymOB7TYqE8=
Subject key identifier: 5A:F5:E7:23:2D:D4:ED:D5:FB:87:6B:72:06:A4:04:BC:66:D9:56:35
Certificate issuer: /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial: 5EFCEFDC520D6750C2CB73F17894A9BA8DD78405
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32302e302f32342d3234203d3e20323633303236.roa
Signing time: Thu 04 Apr 2024 15:10:32 +0000
ROA not before: Thu 04 Apr 2024 15:05:32 +0000
ROA not after: Thu 03 Apr 2025 15:10:32 +0000
asID: 263026
IP address blocks: 138.36.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:fc:ef:dc:52:0d:67:50:c2:cb:73:f1:78:94:a9:ba:8d:d7:84:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Validity
Not Before: Apr 4 15:05:32 2024 GMT
Not After : Apr 3 15:10:32 2025 GMT
Subject: CN=5AF5E7232DD4EDD5FB876B7206A404BC66D95635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:fa:c9:e7:1d:0d:49:4e:f8:6b:44:8f:e5:
e2:ea:5c:2e:97:a0:e2:f6:6c:1e:45:09:6f:b0:fc:
a7:8c:94:70:ad:18:ca:cc:f3:eb:06:bc:2c:a4:fe:
1b:6f:01:4a:d9:2f:85:66:6a:82:5c:8e:4f:36:e4:
ac:67:ba:1d:a3:2c:33:08:e6:7d:eb:9d:24:3d:a0:
b0:97:d7:de:45:02:aa:b5:8f:e0:28:03:af:27:65:
45:00:91:ea:15:18:af:fd:5b:4a:d7:56:46:0b:69:
14:42:b9:83:71:5d:3f:c5:10:fa:62:0b:a4:a8:18:
09:67:fa:73:30:8a:70:11:91:8e:62:91:78:77:c2:
ad:24:93:3a:2b:1d:92:94:66:e6:20:0a:1d:8b:57:
5e:a0:a8:0d:99:07:41:23:20:97:ab:5f:c3:94:ac:
5c:ad:c3:6c:61:12:b6:f1:8f:0a:ab:d8:55:2b:e6:
5f:e4:5c:3d:12:71:88:f1:c8:3d:83:c3:9e:f4:22:
4a:9c:e4:84:6c:75:12:01:c7:af:b7:bc:7c:24:e1:
8e:58:23:09:98:3c:bd:c5:84:03:b5:20:8e:12:90:
67:c7:fc:d2:73:35:da:1d:7b:b6:de:ec:6b:5b:05:
5e:ee:9b:d5:60:b3:7f:bd:71:92:33:30:9e:8e:b4:
cd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:E7:23:2D:D4:ED:D5:FB:87:6B:72:06:A4:04:BC:66:D9:56:35
X509v3 Authority Key Identifier:
keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32302e302f32342d3234203d3e20323633303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.20.0/24
Signature Algorithm: sha256WithRSAEncryption
27:6f:bb:d8:41:fc:d7:65:90:ef:8f:87:c6:18:a8:ec:4e:c1:
1e:02:a1:9b:88:dd:e3:2f:c1:78:0c:26:2d:38:68:23:e3:d5:
ef:de:ab:84:7b:dc:f0:7b:fa:ff:06:3f:dc:4d:5e:6d:c7:0d:
7b:ea:4e:bc:b7:9e:c9:87:1f:93:01:f3:c6:7c:9c:dc:52:d3:
6d:19:aa:43:ac:1d:20:4c:e1:f4:9a:06:97:b6:36:82:02:9f:
ad:25:43:5f:72:3c:44:4c:9f:47:51:83:bc:b4:38:74:5b:61:
03:4c:25:89:e5:86:d7:9b:ae:76:37:27:36:c8:d5:35:07:01:
12:c8:22:b1:be:cd:30:40:d0:fb:24:7e:ea:41:7b:3a:6b:41:
76:8f:79:9c:c0:18:c2:97:06:53:7a:85:f1:44:79:68:86:23:
d2:8a:6c:b4:88:6d:0f:fc:1f:8b:97:34:25:09:4a:a1:df:22:
ea:a8:46:ce:41:95:8a:e2:b2:7c:12:28:1c:56:69:52:e3:4c:
9f:82:cd:77:49:80:53:1a:48:b0:1c:60:7e:0d:be:41:2b:5a:
a5:0c:7f:6d:fd:06:fe:93:20:f5:9f:27:d1:61:de:6e:41:b1:
51:87:94:45:bd:83:f1:e6:a8:22:9e:dd:82:e1:01:ff:5a:c0:
92:71:7f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org