Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53184.roa
File: AS53184.roa (raw, json)
Hash identifier: H3ekfqELY4OcDWUqTG1xKmK8xKkNyqx7MUdk1WRB21o=
Subject key identifier: 70:9D:FD:89:BB:76:2D:88:C6:FE:60:77:B6:5D:D0:B5:D1:C9:AB:55
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 7A902302B737AE61C5DDF58507C359B6AE774FF0
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53184.roa
Signing time: Fri 03 May 2024 22:02:07 +0000
ROA not before: Fri 03 May 2024 21:57:07 +0000
ROA not after: Fri 02 May 2025 22:02:07 +0000
asID: 53184
IP address blocks: 138.118.84.0/22 maxlen: 24
143.0.228.0/22 maxlen: 24
168.0.148.0/22 maxlen: 24
168.196.180.0/22 maxlen: 24
170.239.232.0/22 maxlen: 24
177.39.64.0/22 maxlen: 24
177.39.68.0/22 maxlen: 24
177.73.0.0/21 maxlen: 24
177.74.120.0/21 maxlen: 24
177.87.32.0/22 maxlen: 24
177.129.24.0/22 maxlen: 24
177.155.248.0/22 maxlen: 24
186.232.48.0/22 maxlen: 24
186.232.52.0/22 maxlen: 24
2804:1c8::/32 maxlen: 48
2804:2984::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:90:23:02:b7:37:ae:61:c5:dd:f5:85:07:c3:59:b6:ae:77:4f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:07 2024 GMT
Not After : May 2 22:02:07 2025 GMT
Subject: CN=709DFD89BB762D88C6FE6077B65DD0B5D1C9AB55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:bc:95:ae:7b:94:74:ad:e4:07:f6:5a:c4:
eb:e1:7b:4b:29:6c:ff:8e:28:df:a6:c4:67:e7:b4:
0c:7d:e8:98:1e:49:39:7d:c9:aa:31:4c:80:53:c1:
41:18:36:ac:c4:84:27:fd:86:a0:2e:a8:c6:32:ef:
8b:11:46:6b:17:fc:f8:6c:65:10:f8:62:a6:b5:26:
8f:86:99:40:7c:9d:8c:72:c4:de:a6:12:a1:7d:ba:
4e:82:1b:c8:b0:71:31:a7:ee:4e:8b:99:b8:33:b2:
f2:08:47:d6:95:56:46:0d:f1:6b:8d:b6:1b:af:05:
93:32:ac:2a:e1:04:84:82:2a:8a:e7:a4:0d:27:4b:
30:16:6b:cd:12:3c:58:c6:d6:bc:40:c8:5f:e7:e6:
a0:25:21:b5:5a:22:65:bd:9b:ee:6b:4f:ff:bf:ea:
b9:a2:bc:e9:68:b0:0d:df:f0:68:2b:10:96:a5:52:
84:a9:27:6e:7f:a3:58:bd:c6:d7:ed:27:45:07:dc:
d7:d4:50:20:5f:cc:2a:4c:32:f5:df:11:93:ac:87:
b9:ed:37:39:70:3c:63:bf:1b:58:2d:68:c1:cd:be:
26:7c:d8:7f:11:cc:95:39:12:7e:f0:79:0e:42:04:
c1:d4:dd:59:b7:93:15:e3:7b:18:e3:33:2a:85:6e:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9D:FD:89:BB:76:2D:88:C6:FE:60:77:B6:5D:D0:B5:D1:C9:AB:55
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53184.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.84.0/22
143.0.228.0/22
168.0.148.0/22
168.196.180.0/22
170.239.232.0/22
177.39.64.0/21
177.73.0.0/21
177.74.120.0/21
177.87.32.0/22
177.129.24.0/22
177.155.248.0/22
186.232.48.0/21
IPv6:
2804:1c8::/32
2804:2984::/32
Signature Algorithm: sha256WithRSAEncryption
72:32:27:4c:6e:0b:87:7e:e3:5f:be:8c:4c:a5:e2:5f:82:36:
11:c1:cc:09:05:91:1c:e0:2d:e2:7b:ca:25:aa:93:2e:69:a8:
20:4e:d1:e6:de:59:bf:17:93:df:ff:86:d6:46:9b:ba:fa:24:
0a:43:c5:8e:6a:1d:c4:3f:cc:a0:ef:62:d0:5d:f9:a7:10:c3:
b0:c2:e3:a1:1a:a5:20:3b:f2:1b:35:65:38:cd:d5:c4:21:f0:
ed:ee:f3:06:1c:0d:65:33:aa:4e:34:d6:39:71:c5:4e:e0:a8:
5b:b8:2d:98:69:18:78:fb:3f:bc:96:e9:24:69:db:c2:66:f4:
1b:b5:c1:01:f8:bb:7a:00:c3:3e:b8:0d:2e:3d:b9:93:eb:b8:
35:c3:50:c8:4c:6b:a8:f6:88:52:af:06:fb:18:c5:0f:75:4b:
6e:6d:cf:3f:23:5f:44:54:8a:b5:1b:cc:2a:24:94:e7:95:ac:
67:c1:ee:1c:72:2d:5d:00:1f:3a:2a:64:a8:e5:5d:e3:33:9d:
21:b6:34:55:8c:91:2d:99:f2:36:7d:9c:26:81:54:3e:c9:d1:
2c:bd:70:6f:3d:f7:da:ff:6b:6f:9a:60:ee:1a:f8:ac:2a:87:
36:b9:03:94:1a:bd:6f:15:e4:35:21:49:69:9e:45:fb:4f:f6:
f1:d6:07:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 18:38:21 2024 by rpki-client on console.sobornost.net