Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa
File: 3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa (raw, json)
Hash identifier: dhBrzFHPRT+uUI4pjVhwobUYKPbiAWsAO3er9Bm/SYo=
Subject key identifier: DB:51:33:0D:F0:59:23:B4:D6:EA:CC:D5:C9:03:FA:AB:64:13:4E:70
Certificate issuer: /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial: 58219F95D1129675721FDDB4817250EB74EEA8C6
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa
Signing time: Tue 07 May 2024 19:19:45 +0000
ROA not before: Tue 07 May 2024 19:14:45 +0000
ROA not after: Tue 06 May 2025 19:19:45 +0000
asID: 263022
IP address blocks: 186.249.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 03:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:21:9f:95:d1:12:96:75:72:1f:dd:b4:81:72:50:eb:74:ee:a8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Validity
Not Before: May 7 19:14:45 2024 GMT
Not After : May 6 19:19:45 2025 GMT
Subject: CN=DB51330DF05923B4D6EACCD5C903FAAB64134E70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:49:c9:1b:80:ac:74:4d:51:58:35:9d:2c:
7f:ab:ab:d8:21:aa:2e:6a:e1:34:92:9e:2d:e7:35:
70:06:15:c1:7a:ae:df:3a:ac:cf:9b:17:6d:ae:ab:
39:78:6f:6e:30:9d:73:9b:3c:98:b5:f5:a6:bb:49:
dc:fe:73:fa:22:c1:28:7c:d7:02:d9:0b:9d:14:3d:
a3:6a:68:81:3c:eb:43:0b:1f:c7:a4:72:db:b4:7c:
35:df:24:2d:2d:4f:1b:ba:a7:c8:a9:cb:37:7e:e2:
7f:ec:56:d2:79:3b:a0:8f:89:2b:90:08:65:84:cd:
0a:d2:0d:ee:54:37:ee:44:b0:02:e0:ec:08:95:ca:
96:16:ef:5c:6a:91:6e:cb:36:47:57:b4:49:c3:92:
77:d7:12:85:5b:c0:a7:3e:f2:83:22:81:36:bd:a4:
1e:c1:6e:1a:5d:e4:c1:21:30:86:b0:ab:c5:fe:50:
1c:b9:be:be:fd:e6:e7:ac:04:f6:36:7d:db:44:c7:
8e:80:89:cf:ab:9f:53:eb:b7:f1:22:42:92:73:6d:
1a:57:bc:31:43:83:88:52:1d:fe:e1:89:9b:13:c6:
fb:65:22:4e:27:83:3f:91:c7:f8:ef:7d:5b:6c:b6:
59:00:dc:88:fe:5b:6f:4b:50:b3:13:9b:0d:49:b1:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:51:33:0D:F0:59:23:B4:D6:EA:CC:D5:C9:03:FA:AB:64:13:4E:70
X509v3 Authority Key Identifier:
keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.249.20.0/24
Signature Algorithm: sha256WithRSAEncryption
61:5c:e1:69:5a:6d:e3:c2:c1:e2:86:05:b4:34:b8:a4:9b:d7:
d0:a1:7b:c8:20:d7:e3:5c:4c:e2:da:4a:a7:a6:ff:88:7f:96:
96:2f:3a:2c:87:bb:b1:60:25:9d:99:38:be:24:98:24:5e:c9:
31:99:2f:8b:0d:ad:c1:be:71:dd:0b:02:e3:da:46:c0:f1:18:
72:8f:fb:d8:7d:24:20:86:f2:07:64:49:e2:ec:ab:40:75:a7:
3c:f3:0d:53:3e:e9:74:7e:f1:b1:72:b4:e3:de:2e:69:d7:3b:
7d:6d:ff:db:f9:ee:1e:44:12:db:8c:68:ac:ee:cd:fe:9b:ba:
0b:95:0f:d0:98:05:4d:bc:cc:27:d7:b5:76:63:93:b8:3d:c7:
7f:c1:86:4c:5f:18:33:db:dc:b8:30:19:94:42:b8:ff:aa:c6:
2a:98:d9:99:26:42:1f:ff:c5:1f:94:e2:6c:57:7d:95:d1:eb:
93:20:f4:a3:4b:81:0c:97:a5:f8:51:37:94:ac:72:fc:3b:94:
bc:9f:1d:5b:3a:c1:84:12:0b:e4:e3:96:91:84:3a:6f:cb:68:
2e:5d:54:99:a1:a1:a3:e2:ff:2d:6c:bc:ad:f1:6c:30:58:98:
5f:9f:7e:1f:c7:fb:0e:8e:50:b7:ca:db:f6:43:de:62:d1:4a:
2d:b7:4a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:59:28 2025 by rpki-client