Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3232203d3e203238363035.roa
File: 3230312e32302e3134342e302f32302d3232203d3e203238363035.roa (raw, json)
Hash identifier: KL9toeOmbwr72qaeXdMTzEjFvRDG54sQdhn7tWvf81s=
Subject key identifier: BC:F8:DE:21:99:58:B9:D5:83:54:A5:F3:CA:D9:6A:81:B2:26:09:58
Certificate issuer: /CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
Certificate serial: 26FD08CF8213BF9DFF5CD75C2285A952D0EDF3F2
Authority key identifier: 5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3232203d3e203238363035.roa
Signing time: Tue 08 Apr 2025 16:19:38 +0000
ROA not before: Tue 08 Apr 2025 16:14:38 +0000
ROA not after: Tue 07 Apr 2026 16:19:38 +0000
asID: 28605
IP address blocks: 201.20.144.0/20 maxlen: 22
Validation: Failed, certificate revoked on Tue 08 Apr 2025 19:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:fd:08:cf:82:13:bf:9d:ff:5c:d7:5c:22:85:a9:52:d0:ed:f3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
Validity
Not Before: Apr 8 16:14:38 2025 GMT
Not After : Apr 7 16:19:38 2026 GMT
Subject: CN=BCF8DE219958B9D58354A5F3CAD96A81B2260958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:03:a7:bb:b1:f2:d6:ae:1b:1c:1a:c8:b1:
f6:09:79:48:a7:89:b8:3b:49:bc:97:61:c1:1f:dc:
8a:00:65:92:7f:9b:bc:57:1b:e9:56:76:b8:5d:a8:
62:2d:1d:96:f8:b4:cb:7c:d2:16:53:4b:a9:1c:d2:
50:22:8f:c3:8f:f0:a1:be:51:57:8a:5d:15:17:ad:
24:df:8e:70:e1:de:02:a0:12:e4:e0:2a:b9:14:30:
b7:14:33:b2:1e:e6:81:62:41:7c:eb:90:92:bf:a9:
6a:50:eb:3d:d4:21:51:3f:7e:df:8a:77:0c:0a:ed:
ad:7b:87:19:8a:68:94:2b:6a:49:fc:dc:92:5d:9f:
34:74:ae:09:8a:e0:57:cd:15:6d:b2:d7:d3:e4:9d:
68:e1:3a:e3:0a:30:49:88:2d:89:38:d5:0e:5d:f2:
7b:2d:09:24:3d:23:88:40:d5:d0:35:e3:f5:fa:bf:
82:2c:51:52:72:8f:e4:62:c4:a2:9f:51:91:46:05:
d0:ed:f5:87:15:7c:0c:77:68:41:51:c3:e7:72:25:
0d:1d:ef:03:f6:a7:4c:13:fc:05:eb:69:5d:8f:25:
85:46:06:a6:74:38:1f:7d:19:88:30:08:7f:8b:15:
04:41:2a:1c:bf:04:2e:bc:dd:cf:af:c8:5a:fc:55:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F8:DE:21:99:58:B9:D5:83:54:A5:F3:CA:D9:6A:81:B2:26:09:58
X509v3 Authority Key Identifier:
keyid:5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3232203d3e203238363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.20.144.0/20
Signature Algorithm: sha256WithRSAEncryption
44:34:54:58:a6:fa:72:1d:0c:9e:0f:02:e3:a6:38:f4:6d:bf:
02:7c:d5:e6:51:8e:7a:a6:2c:ea:79:a3:0c:c5:d8:cb:75:4f:
bf:55:e2:70:36:61:1c:37:58:b4:71:a7:02:fc:ab:1f:5d:b1:
bc:c8:17:a8:28:fc:8f:d8:32:1c:fe:1d:44:d1:52:28:b0:dd:
7a:aa:7a:14:1a:e4:5a:78:5e:e1:a4:e3:3d:4e:91:69:ff:aa:
d2:d5:08:0d:17:56:f7:18:a9:9c:dd:de:1a:1f:84:f6:ce:1a:
a3:82:9d:22:0b:59:ab:d4:e8:b9:95:cd:e3:f5:16:98:a3:9c:
f9:c6:90:05:56:e0:ee:49:51:0d:6d:4f:20:c4:d9:11:cd:d3:
6b:87:f2:66:ac:5d:96:9a:2d:a0:ef:cc:b1:92:b1:1f:08:8f:
58:d6:b5:ab:3c:3c:40:b0:6a:8c:12:be:1d:cb:f6:c2:89:30:
74:1d:53:cf:e5:c1:9f:42:e4:6b:cb:48:c6:ed:e2:a4:09:54:
e2:02:bb:6a:f0:0f:2c:80:d6:08:5a:6a:50:3c:35:dd:28:d0:
40:d4:1a:12:fd:a9:b6:54:d7:ab:08:53:61:08:da:76:06:41:
23:2a:0b:33:33:e5:f6:28:22:ff:72:56:32:82:b8:70:63:09:
d4:15:24:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:51:09 2025 by rpki-client