Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231342e302f32342d3234203d3e20323632383638.roa
File: 3137372e32302e3231342e302f32342d3234203d3e20323632383638.roa (raw, json)
Hash identifier: lH57MemhDUisAiQp0/NCLROnXxmoBSj4bvOnpDg2PuA=
Subject key identifier: 21:F8:14:82:0F:61:DF:C0:5F:CD:18:64:04:24:94:AD:46:6A:B0:D1
Certificate issuer: /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial: 68B81C061BC6E6FE7EA2DFAAEF68B8F1A3EF25A7
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access: rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231342e302f32342d3234203d3e20323632383638.roa
Signing time: Tue 07 Jan 2025 20:32:33 +0000
ROA not before: Tue 07 Jan 2025 20:27:33 +0000
ROA not after: Tue 06 Jan 2026 20:32:33 +0000
asID: 262868
IP address blocks: 177.20.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 13:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b8:1c:06:1b:c6:e6:fe:7e:a2:df:aa:ef:68:b8:f1:a3:ef:25:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Validity
Not Before: Jan 7 20:27:33 2025 GMT
Not After : Jan 6 20:32:33 2026 GMT
Subject: CN=21F814820F61DFC05FCD1864042494AD466AB0D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:45:bf:c2:d2:21:10:f9:48:91:68:ef:32:
a6:82:d5:d5:c5:ac:18:ac:81:ae:50:a2:c9:cc:29:
72:b0:b0:8b:40:0c:4f:5c:a0:cf:a5:cf:8b:3e:ce:
a6:e5:c3:f4:f3:94:8b:34:0b:9e:29:a1:83:5a:e9:
d8:00:48:15:0a:8d:80:71:9a:a6:09:40:3a:b6:98:
05:c7:3c:f1:59:5d:58:55:aa:35:26:e3:c9:b7:c4:
4e:84:d2:7b:d3:d9:90:8b:53:b6:1a:7b:ab:2d:d3:
a3:7a:61:a9:ce:0a:68:d1:bb:42:cb:e6:90:95:e2:
35:15:ef:63:a8:60:58:92:91:6f:0e:d6:d7:bf:25:
7b:c1:bd:b0:9f:c9:1f:01:bb:fe:ec:c9:6c:f1:d8:
00:04:3d:be:a0:ea:b3:74:b7:9d:e2:3e:b0:3d:8f:
86:62:98:20:69:e5:fd:3d:cb:e2:4f:36:33:ef:a3:
4e:63:1b:16:45:61:b3:bb:25:34:d8:bd:6d:9a:f6:
11:93:dd:e4:a3:a2:52:65:7e:6e:b9:aa:2e:54:d9:
70:88:5b:08:f8:f4:30:7a:7c:c2:2e:ff:e4:ee:7f:
0c:a4:34:46:f0:88:34:f5:80:08:13:3c:63:0b:2e:
08:21:45:c2:76:e0:84:8a:01:22:71:6a:9a:01:d0:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F8:14:82:0F:61:DF:C0:5F:CD:18:64:04:24:94:AD:46:6A:B0:D1
X509v3 Authority Key Identifier:
keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231342e302f32342d3234203d3e20323632383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.20.214.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7b:39:26:dc:70:53:a5:2c:ee:0e:ee:f3:ce:05:30:af:3d:
a6:e9:dc:8d:57:c9:16:74:c6:df:71:4a:af:01:79:ff:84:5b:
fa:ba:ee:87:99:d0:a6:85:0a:a5:47:4f:8e:ae:ac:5b:b0:21:
06:6c:52:b2:4b:9e:a2:35:6f:bb:f4:ad:f6:3b:08:f0:f1:da:
dd:53:b9:d3:8e:35:3c:20:69:08:4e:e7:3d:0b:4c:3e:e4:6b:
0a:7f:a3:d4:07:d3:17:ef:cc:48:77:02:0c:41:6d:6c:72:ef:
1c:04:fc:bb:c9:5e:44:e9:80:97:5a:42:4c:1d:e9:3a:a2:b4:
fa:fc:8c:d7:31:a1:b6:24:32:ce:15:54:73:0b:27:52:24:fb:
da:8d:a5:83:31:d8:58:a6:cb:64:ea:ba:0b:d3:8d:f1:1b:6c:
71:d4:3e:b4:2b:d0:92:75:05:d7:0b:a9:58:98:f7:44:f5:fe:
a3:73:6d:37:1a:74:30:93:34:22:62:50:bb:61:67:b0:7b:b4:
6f:19:6b:a2:6b:cb:03:56:f0:d5:58:2f:4a:21:eb:ec:46:78:
ff:61:bf:b2:e7:fd:ac:1e:1a:17:1c:ec:bf:f5:2f:40:88:4d:
67:a1:77:8a:73:5f:27:4b:59:c0:da:78:92:4e:2c:da:f1:db:
c1:78:98:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:42:03 2025 by rpki-client