Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135362e302f32332d3233203d3e203238313630.roa
File: 3138372e36322e3135362e302f32332d3233203d3e203238313630.roa (raw, json)
Hash identifier: G108P2R44i7gHihG7qGwBD8Jbgqas2a6pCdqXS6svX4=
Subject key identifier: FD:D8:03:47:83:60:42:F1:F5:7F:4A:8E:0B:9A:69:2A:CD:DF:56:F7
Certificate issuer: /CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Certificate serial: 0B4EFBE1FB101104B241852971B3727FF33B618E
Authority key identifier: 72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135362e302f32332d3233203d3e203238313630.roa
Signing time: Sat 16 Nov 2024 11:11:41 +0000
ROA not before: Sat 16 Nov 2024 11:06:41 +0000
ROA not after: Sat 15 Nov 2025 11:11:41 +0000
asID: 28160
IP address blocks: 187.62.156.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 16 Nov 2024 13:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4e:fb:e1:fb:10:11:04:b2:41:85:29:71:b3:72:7f:f3:3b:61:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Validity
Not Before: Nov 16 11:06:41 2024 GMT
Not After : Nov 15 11:11:41 2025 GMT
Subject: CN=FDD80347836042F1F57F4A8E0B9A692ACDDF56F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:21:95:b4:0e:32:d6:87:0b:a2:67:1a:90:
c5:23:c3:db:aa:03:e1:63:34:c8:01:00:28:55:5a:
ae:ca:e8:c9:28:ac:66:a6:86:fc:b2:ed:89:52:c8:
c8:b0:88:79:12:08:cb:1a:77:95:a5:be:d5:af:1e:
9d:51:1e:94:be:7e:60:d1:19:cb:ca:d5:06:23:f2:
07:42:93:76:ce:05:26:1a:10:cc:c6:c1:c7:54:31:
53:74:b6:e7:7e:d2:b8:51:1c:cf:34:40:2e:61:61:
50:63:83:c1:0f:53:bd:f2:39:15:1e:05:82:90:f4:
de:96:ac:b2:34:87:ff:55:5a:49:21:8c:a3:67:f0:
93:36:99:bb:31:53:08:59:98:29:e2:50:13:66:fe:
6d:39:48:6a:e0:f6:ec:a6:f3:0b:af:8f:c1:8a:2e:
75:a4:5b:42:ea:61:dc:1b:af:5a:f2:f3:33:07:54:
db:17:a5:ce:de:1f:12:eb:fb:0d:f5:0f:68:b8:fb:
ea:53:fd:53:89:29:0d:1b:ce:65:c2:6a:43:47:95:
3b:07:fd:31:92:23:92:df:44:c1:ea:5e:bc:23:df:
ee:94:4c:d1:be:54:d3:e0:f9:b5:e9:c7:3e:9a:19:
1c:82:02:bf:d1:fd:84:19:a9:b9:22:80:00:69:d9:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D8:03:47:83:60:42:F1:F5:7F:4A:8E:0B:9A:69:2A:CD:DF:56:F7
X509v3 Authority Key Identifier:
keyid:72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135362e302f32332d3233203d3e203238313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.62.156.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:f5:5b:c5:d0:95:21:92:96:c5:2d:15:ae:c1:b7:60:6e:3e:
96:03:9b:ca:9a:e4:61:59:3d:4a:3d:5a:e5:49:e0:48:58:0c:
c5:0a:d5:53:2b:78:ad:11:8d:8c:9c:e6:aa:06:60:83:22:28:
34:ca:d9:5b:81:dd:84:90:75:6b:69:82:c0:d1:fe:11:e2:7c:
24:b9:86:8b:d3:a4:d2:97:79:15:55:a1:98:31:01:f3:08:82:
05:09:3a:27:25:df:bf:dc:5a:90:96:f1:7c:81:fd:79:ed:03:
28:2f:98:82:a3:ec:b8:54:9f:fc:b2:3f:d7:62:94:12:fd:cf:
c9:46:1a:c9:06:e6:ef:49:cc:85:d9:17:86:b4:66:82:77:d2:
ff:7c:2c:f7:21:e5:76:45:c7:2b:d3:35:9f:3a:d8:9a:bc:f3:
be:32:c0:36:2e:dc:ea:80:88:90:8f:a2:8e:03:2b:7e:b0:c4:
ab:26:bd:d9:55:0a:78:28:89:7c:03:d6:1e:c3:32:da:0b:6c:
90:41:2c:9a:9f:46:a5:aa:8d:b2:8d:22:5a:b2:22:b9:56:a5:
73:ea:4a:0a:c9:84:fc:a3:47:0b:20:8e:c0:af:f1:d1:d4:99:
a0:9e:2b:b0:ae:48:69:63:8a:92:73:a6:28:b3:8f:28:70:90:
1a:83:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 14:28:46 2024 by rpki-client on console.sobornost.net