Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232342e302f32322d3232203d3e20323731333837.roa
File: 3230302e3231352e3232342e302f32322d3232203d3e20323731333837.roa (raw, json)
Hash identifier: T9mBWv075cXiu8DUsepeEtLKcIqWnRD9MizoRtYTWZU=
Subject key identifier: 5C:4F:43:55:A6:95:A8:87:82:CF:62:3C:E9:E0:14:B5:FF:04:FF:81
Certificate issuer: /CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
Certificate serial: 01F219AE0540CE37BBD2C343EC35748CD5E02D55
Authority key identifier: E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232342e302f32322d3232203d3e20323731333837.roa
Signing time: Thu 30 Jan 2025 13:56:00 +0000
ROA not before: Thu 30 Jan 2025 13:51:00 +0000
ROA not after: Thu 29 Jan 2026 13:56:00 +0000
asID: 271387
IP address blocks: 200.215.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 11 Feb 2025 15:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f2:19:ae:05:40:ce:37:bb:d2:c3:43:ec:35:74:8c:d5:e0:2d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
Validity
Not Before: Jan 30 13:51:00 2025 GMT
Not After : Jan 29 13:56:00 2026 GMT
Subject: CN=5C4F4355A695A88782CF623CE9E014B5FF04FF81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:e5:94:ce:e4:48:74:69:4a:cb:d5:62:d9:
55:7c:b7:40:d6:50:d6:a3:fe:2b:cd:9c:02:64:f4:
fa:ae:3a:a8:5b:f2:63:0c:c1:21:76:8e:7e:90:59:
e8:a1:0e:ab:ee:20:68:39:c0:be:85:13:59:03:05:
5c:32:6a:33:6b:6c:3e:a9:a0:c7:90:85:45:69:e8:
c8:f9:fa:1c:15:a2:44:e4:a7:7c:3c:c7:53:c4:62:
10:fa:f8:a4:71:f9:80:89:38:70:4b:68:1b:ef:9f:
0e:60:a4:34:5e:c8:9e:7d:2b:f4:da:e7:82:ba:45:
50:65:81:4e:c7:a4:4f:35:e3:d3:b7:5d:29:54:39:
5c:cc:30:76:92:c0:db:29:35:31:57:49:66:a0:1c:
21:de:eb:39:1c:0e:6c:7d:62:f2:66:46:0d:59:5e:
e3:d4:60:0f:e3:3d:8c:4d:ad:72:1b:ae:f3:ec:e1:
b9:73:32:a2:70:e4:c3:2f:9c:e2:2f:78:71:6f:0a:
1e:25:bd:71:04:cb:42:0c:a6:f3:6d:ec:c0:9f:fc:
2b:0b:44:8e:69:0e:98:4a:32:bc:03:99:02:bd:15:
6d:99:4d:fc:c5:d8:4e:dc:a1:85:1c:0e:59:f5:c2:
1f:62:eb:28:70:58:96:1b:3f:95:06:7d:5c:da:29:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:43:55:A6:95:A8:87:82:CF:62:3C:E9:E0:14:B5:FF:04:FF:81
X509v3 Authority Key Identifier:
keyid:E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232342e302f32322d3232203d3e20323731333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.215.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:df:fc:21:85:28:0f:ec:c8:9d:b1:9b:e2:7f:e0:24:e7:4b:
4c:93:5f:2d:e6:64:1f:b9:0f:53:27:67:23:d2:d0:20:e7:91:
a3:80:68:05:7d:73:d7:1b:1a:10:c4:74:c8:ba:9b:00:0a:80:
85:6d:74:25:26:8e:f6:ee:90:5e:60:a6:cc:95:cc:51:59:03:
3b:b5:ef:6f:44:1c:7e:d9:da:37:8a:a3:19:a0:94:01:80:fc:
b4:ee:ca:93:e7:8a:ac:8b:17:22:66:ed:a1:46:63:55:41:14:
3a:b1:78:55:e7:ea:fd:32:d5:e0:93:8e:6d:c6:4c:cf:40:aa:
6e:ac:b2:18:71:28:cc:1f:74:67:90:81:5a:65:34:0f:44:00:
35:6f:95:0e:81:99:98:85:06:38:90:a8:0d:d0:31:a5:46:06:
21:33:89:17:57:a4:1b:c5:66:88:97:10:7b:15:97:af:16:79:
46:4a:81:00:fa:ed:40:8b:55:80:6e:f1:4d:ab:2d:fe:72:9c:
dc:17:f0:73:d9:b9:34:4e:ff:71:d8:b6:58:00:38:89:b7:9d:
f4:dd:7a:12:03:b9:02:f9:19:a5:69:3d:44:14:f0:3c:9e:0b:
04:44:f8:93:73:06:ba:10:7b:bc:6b:4c:1d:c5:43:20:19:4a:
26:2b:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:25:22 2025 by rpki-client