Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3234203d3e203532363339.roa
File: 3137392e39362e3137362e302f32312d3234203d3e203532363339.roa (raw, json)
Hash identifier: GVokS6yjIe0V83PRabXwpk0eqXJhkfXBn8ev6/9WDDM=
Subject key identifier: B5:A8:16:8D:BC:A1:40:88:AF:26:D3:6C:16:CD:D6:82:86:72:1E:B4
Certificate issuer: /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial: 2BB09755366F72A20AC96CAB012C3BA75CE51EDA
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3234203d3e203532363339.roa
Signing time: Thu 06 Mar 2025 00:58:54 +0000
ROA not before: Thu 06 Mar 2025 00:53:54 +0000
ROA not after: Thu 05 Mar 2026 00:58:54 +0000
asID: 52639
IP address blocks: 179.96.176.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b0:97:55:36:6f:72:a2:0a:c9:6c:ab:01:2c:3b:a7:5c:e5:1e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Validity
Not Before: Mar 6 00:53:54 2025 GMT
Not After : Mar 5 00:58:54 2026 GMT
Subject: CN=B5A8168DBCA14088AF26D36C16CDD68286721EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:e4:81:85:32:7d:a7:0b:70:a5:3f:e6:8b:
fb:0c:e0:f8:af:11:27:20:47:b6:06:c5:45:c8:4c:
ec:6b:9a:e7:3c:ba:82:7f:bf:f4:9c:2c:58:55:0f:
10:b5:7a:4a:55:ac:18:29:55:48:db:cd:59:01:c8:
4a:94:f8:4e:ba:d7:c2:1d:2b:4d:6c:7f:87:2e:b1:
89:3d:99:d5:29:28:4c:61:f3:f5:11:23:4d:c2:7e:
84:98:be:e2:53:82:68:ad:d3:03:6b:09:9f:92:d3:
da:76:88:d9:9d:e1:90:c7:d9:4d:62:63:cd:d3:a0:
33:e1:94:dd:7d:14:e7:87:4d:e1:3f:e5:85:b5:f6:
0a:17:ef:8e:12:7d:b1:b1:7c:e0:73:29:df:7a:e6:
36:85:54:e9:67:16:4b:86:46:5b:08:fa:d4:ce:45:
21:8b:ef:cb:f8:bb:e7:8f:d0:06:76:7e:e2:b7:47:
e4:a1:66:04:c3:45:70:a7:36:cd:6a:ca:1e:e5:c6:
a1:db:86:eb:9a:2d:4b:df:54:16:5c:61:64:62:cb:
03:5d:65:1f:2b:87:6c:35:75:fc:cb:c0:99:db:7e:
52:8a:12:71:1b:b8:b2:f8:c9:74:39:72:93:60:1a:
41:2f:55:22:ba:b0:66:b3:55:f1:50:ec:55:14:4d:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A8:16:8D:BC:A1:40:88:AF:26:D3:6C:16:CD:D6:82:86:72:1E:B4
X509v3 Authority Key Identifier:
keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3234203d3e203532363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.96.176.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:77:84:c9:44:c5:81:bf:f9:6c:bd:5d:03:70:16:6e:a7:8c:
1c:a4:b0:d3:ea:07:7b:1a:ee:1d:d5:37:b8:7d:8e:20:34:d4:
f4:4c:6e:a1:fa:0b:bb:01:65:0d:da:0d:5e:f3:6f:f2:df:ab:
08:17:e9:ef:0a:87:f0:08:c5:54:92:f4:d2:0e:57:0e:98:f5:
6e:a9:99:a1:e5:07:ae:9c:1a:9a:b6:25:4e:7e:e1:4f:df:c9:
44:13:22:b9:f3:39:be:db:b4:08:3f:47:90:5c:99:a5:db:7c:
7c:d8:fa:35:db:9b:fd:61:7d:eb:6d:c2:9b:40:14:19:78:60:
a3:91:a1:1f:e3:37:39:d2:57:81:7f:c6:dd:9e:1e:a5:ce:aa:
0f:a3:19:43:af:b7:87:26:72:66:d0:17:02:7c:2a:28:d0:bb:
e5:ae:0e:2c:bf:1d:34:1c:aa:69:eb:ea:25:85:bd:0d:b5:9b:
bb:ae:35:fe:63:c0:5f:2d:d4:a5:5b:55:3d:f5:bd:bd:bd:c8:
13:fb:99:7a:18:5c:86:ea:36:87:81:c4:4e:46:c3:9e:89:51:
08:c3:68:d2:a2:32:a3:06:07:fa:da:94:5b:2f:fc:88:39:31:
d2:f8:76:0d:41:a7:12:bc:00:88:aa:d9:f9:c0:4c:7c:b4:de:
80:c1:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:53:34 2025 by rpki-client