Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137362e302f32322d3234203d3e20323731313130.roa
File: 3136302e32302e3137362e302f32322d3234203d3e20323731313130.roa (raw, json)
Hash identifier: kXN8sQa/W6j2Rqkg9tHQaKwvS3RhgmbJFB172AxP+8o=
Subject key identifier: 24:2B:3F:03:6C:DA:97:6B:50:4A:5E:FD:3D:31:AA:80:3E:F6:E2:AC
Certificate issuer: /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial: 3B22A3678C210D0858B1F2282AD27FDCE3764CB5
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137362e302f32322d3234203d3e20323731313130.roa
Signing time: Wed 04 Dec 2024 19:21:57 +0000
ROA not before: Wed 04 Dec 2024 19:16:57 +0000
ROA not after: Wed 03 Dec 2025 19:21:57 +0000
asID: 271110
IP address blocks: 160.20.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 12:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:22:a3:67:8c:21:0d:08:58:b1:f2:28:2a:d2:7f:dc:e3:76:4c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Validity
Not Before: Dec 4 19:16:57 2024 GMT
Not After : Dec 3 19:21:57 2025 GMT
Subject: CN=242B3F036CDA976B504A5EFD3D31AA803EF6E2AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:25:31:45:6f:b3:dc:c1:e5:56:8d:34:d0:
22:32:9b:bb:db:8c:f3:cc:06:5d:84:a1:1d:fa:67:
e0:61:d6:b5:ee:c1:e5:3f:19:ef:9e:38:49:c1:51:
9f:57:55:ab:78:b3:f0:98:ca:bd:b3:a2:f1:43:27:
48:5e:0a:fe:69:fc:d6:ed:58:d8:d8:da:8b:b3:d4:
15:a9:1b:f0:d5:9a:35:2c:dd:74:b8:10:20:f8:4a:
8e:04:56:7c:8f:e2:62:5f:a0:c8:d1:33:65:64:d3:
e5:ff:c9:19:e6:12:0e:ae:7e:d6:56:5b:5c:54:ac:
62:c4:54:c9:2e:9a:58:61:0b:8e:ad:08:b3:fb:b0:
fb:bd:14:9e:6e:ab:be:21:74:47:d5:5f:eb:81:fa:
bb:39:32:75:a3:ca:59:28:a5:80:7d:c9:08:05:78:
b5:c3:e5:22:14:32:f5:e6:aa:47:72:8c:dc:20:d2:
d2:4a:56:e6:70:35:90:81:a2:a7:46:cd:6c:56:e4:
8d:9e:de:df:ea:6b:85:99:92:0f:0e:8d:c5:95:f5:
07:71:0d:6b:6d:26:c3:0a:f7:49:62:9e:8a:f5:dc:
a5:6a:8f:b9:b2:4f:85:76:ff:fe:35:68:8d:88:c0:
6b:b3:47:f2:08:2e:a3:91:c9:8d:66:c2:0f:fd:0d:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:3F:03:6C:DA:97:6B:50:4A:5E:FD:3D:31:AA:80:3E:F6:E2:AC
X509v3 Authority Key Identifier:
keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137362e302f32322d3234203d3e20323731313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.176.0/22
Signature Algorithm: sha256WithRSAEncryption
41:b5:af:ca:de:e5:d5:6a:f8:fe:7c:84:2b:2f:10:9a:e7:e5:
f8:05:dc:54:72:91:6d:f0:56:a0:f8:5d:83:67:ab:1c:48:f1:
12:ab:9d:26:60:c6:9c:7c:51:b9:93:e7:92:c1:a8:0a:71:da:
36:d3:f4:46:5e:5c:aa:a2:19:48:d1:96:7e:a6:83:fc:21:48:
a4:f6:80:ad:98:29:63:9b:4f:50:fe:14:3b:64:dc:a8:b4:e2:
89:54:10:09:bb:5c:b3:19:81:60:5c:28:aa:3a:c2:4a:0a:6d:
2b:89:fc:c5:77:27:cf:c6:e9:b0:b5:46:4d:38:58:cf:03:65:
28:be:1d:ac:a8:df:5f:19:a4:1c:db:2b:d0:3a:b3:71:ec:aa:
12:12:fa:7e:c9:67:6c:65:b3:f3:5f:0e:07:21:d0:7e:b1:99:
c0:20:91:d2:f1:fe:a7:b6:9e:a4:24:53:01:df:4e:9b:e1:6e:
d6:e2:b8:2c:ca:e0:d4:d0:11:f9:17:d1:fe:c9:be:e6:f1:90:
80:06:4b:fc:72:89:56:38:d6:72:8a:fc:17:f4:0f:f7:45:40:
b9:ed:a1:89:fb:fd:e6:e2:7d:b3:94:b1:dd:9a:94:3b:af:7f:
79:16:49:a6:ca:e7:0d:90:89:c9:e8:55:02:5e:05:1f:95:22:
96:12:01:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:19:43 2025 by rpki-client