Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38362e302f32332d3233203d3e20323633313239.roa
File: 3137372e3135352e38362e302f32332d3233203d3e20323633313239.roa (raw, json)
Hash identifier: wIyawoRQjN53dde4gPAzGP1qECtsD7Jr0hUTDX9m3+U=
Subject key identifier: 56:88:95:AC:94:88:DE:BE:54:04:78:0F:6F:D0:38:D7:07:6D:1B:5B
Certificate issuer: /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
Certificate serial: 5035DD43400E8D3E16AE201881B206466E859136
Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38362e302f32332d3233203d3e20323633313239.roa
Signing time: Thu 25 Apr 2024 13:11:51 +0000
ROA not before: Thu 25 Apr 2024 13:06:51 +0000
ROA not after: Thu 24 Apr 2025 13:11:51 +0000
asID: 263129
IP address blocks: 177.155.86.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:35:dd:43:40:0e:8d:3e:16:ae:20:18:81:b2:06:46:6e:85:91:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
Validity
Not Before: Apr 25 13:06:51 2024 GMT
Not After : Apr 24 13:11:51 2025 GMT
Subject: CN=568895AC9488DEBE5404780F6FD038D7076D1B5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:97:39:f2:33:15:36:f6:08:21:e9:f4:b9:
01:ae:a8:1d:c4:7e:b4:11:76:82:4b:5b:3f:a6:ea:
ab:cf:d5:56:7c:02:6d:a2:ad:29:ca:8a:c2:00:0f:
30:0e:aa:25:a9:07:77:3c:58:09:90:28:9b:53:58:
da:2d:71:e0:c9:36:85:70:81:95:de:35:98:56:dd:
5b:d8:3a:cb:b2:06:8a:72:03:bc:60:30:60:0f:59:
74:94:a2:d4:8c:33:e7:20:cc:65:a4:b7:5b:65:ee:
2b:5a:82:5c:04:0d:db:de:6e:84:d0:84:2f:80:32:
12:23:10:94:eb:59:34:a8:88:9f:48:7d:04:d2:1a:
4b:71:dc:26:90:c7:61:54:a8:03:4f:c2:34:1c:7b:
98:58:dc:35:1d:bf:eb:44:ba:cf:5f:63:6d:94:bd:
16:aa:97:f3:bc:9f:8f:d2:f9:4f:9a:0b:87:4f:8a:
d5:4c:49:28:a8:80:72:0f:58:9d:19:50:e6:7e:41:
f1:c4:8d:29:0a:d3:d9:77:b9:18:db:63:c2:49:55:
3f:29:12:f5:00:2f:f4:2e:96:cb:34:17:03:a9:39:
d7:92:65:a9:72:ae:9a:ed:4c:27:d9:5c:41:70:70:
24:4d:b5:f3:8d:c6:29:dc:e6:80:fd:77:c7:d2:5e:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:88:95:AC:94:88:DE:BE:54:04:78:0F:6F:D0:38:D7:07:6D:1B:5B
X509v3 Authority Key Identifier:
keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38362e302f32332d3233203d3e20323633313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.155.86.0/23
Signature Algorithm: sha256WithRSAEncryption
08:65:8d:ae:25:0a:8e:ca:9d:2d:c1:48:ea:64:fc:20:1f:20:
76:99:2f:b7:bd:8d:7a:f6:bc:5f:50:34:8e:18:98:e8:51:55:
27:3f:9f:76:e8:31:d4:02:37:b6:23:7f:75:a0:1d:98:6a:33:
d8:dd:cd:3e:a6:fa:1f:6b:a3:eb:a0:d9:f7:57:ec:3c:d5:c1:
e1:c5:ef:5c:4c:24:5f:44:81:e6:46:47:7d:37:a6:ad:09:0a:
e3:f8:dc:69:f0:95:5e:51:4f:3c:da:18:3b:e2:e5:e9:5f:e7:
83:93:e2:c3:72:7c:14:aa:f3:6e:ad:4c:ef:03:1b:20:96:66:
6e:32:f0:ae:c8:d4:72:18:a4:1c:ec:77:a6:84:56:9b:6d:e1:
8d:76:86:c8:eb:6a:23:25:c0:c0:7e:70:62:39:5f:b7:a4:bd:
7c:34:61:d6:70:8c:fe:06:2f:e8:31:62:1d:b1:47:cd:5f:12:
1c:50:79:92:ba:66:6f:17:b9:0b:df:4a:67:a2:8f:59:0a:c6:
3f:89:c2:b2:92:45:3f:4e:53:bd:31:ed:d7:eb:4b:92:41:f5:
3e:97:7f:ca:c5:56:1c:88:b3:59:78:f4:c4:06:02:de:32:17:
e8:75:4f:56:85:5c:69:51:b3:b5:e2:31:f4:a9:ca:60:2d:94:
10:6a:2e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:34 2025 by rpki-client