Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36352e302f32342d3234203d3e203238313834.roa
File: 3138392e38392e36352e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier: pq6uu6GjbTyWh/Bz+n8nDVYx1DByTD4kERn4vglYn1k=
Subject key identifier: 98:44:97:88:61:6D:E0:DB:A1:11:44:D6:9F:BF:E6:1B:59:BA:66:38
Certificate issuer: /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial: 171174FC74D2F576E3EAA3ECCDD98EC58EE635C3
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36352e302f32342d3234203d3e203238313834.roa
Signing time: Wed 04 Dec 2024 17:35:09 +0000
ROA not before: Wed 04 Dec 2024 17:30:09 +0000
ROA not after: Wed 03 Dec 2025 17:35:09 +0000
asID: 28184
IP address blocks: 189.89.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 18:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:11:74:fc:74:d2:f5:76:e3:ea:a3:ec:cd:d9:8e:c5:8e:e6:35:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Validity
Not Before: Dec 4 17:30:09 2024 GMT
Not After : Dec 3 17:35:09 2025 GMT
Subject: CN=98449788616DE0DBA11144D69FBFE61B59BA6638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:85:ee:d1:d8:c4:76:12:96:f0:cd:14:80:3b:
f3:c3:2b:e5:d5:03:c0:28:13:8e:f3:a7:2e:45:46:
bb:95:5a:5b:51:74:4b:19:10:28:1a:f5:8a:4d:a3:
f6:15:d9:e7:bb:53:f7:13:08:e8:66:65:07:c8:b1:
28:31:f4:03:66:70:70:d2:fd:6f:1f:56:49:d5:55:
95:a5:f0:f3:43:78:50:13:70:40:d2:40:21:73:7b:
04:83:02:c6:e8:f7:e5:8a:c5:37:04:bf:59:62:9b:
1e:5f:7f:e1:cc:29:43:53:27:39:bb:87:3b:36:5d:
88:59:1a:a8:cf:65:df:39:43:ea:f7:59:ff:73:12:
95:4c:9c:d1:29:12:43:2e:51:73:46:15:0c:89:e7:
5d:98:9f:76:8a:95:61:3d:ab:7c:c6:df:34:ad:94:
49:f5:43:db:64:40:86:53:da:5c:c4:f9:00:8c:57:
c8:c3:48:48:11:ff:76:e6:e4:d7:66:32:ae:8e:4d:
55:a9:e2:3f:d2:58:49:9b:cd:e2:a6:20:7d:2a:55:
40:da:12:9f:13:de:17:48:fc:e0:04:6b:33:b4:28:
e4:f9:ee:9f:d0:ce:82:90:54:f7:c0:4c:ec:60:69:
a2:6a:f7:d5:30:e4:50:68:4c:d1:1b:ce:13:82:77:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:44:97:88:61:6D:E0:DB:A1:11:44:D6:9F:BF:E6:1B:59:BA:66:38
X509v3 Authority Key Identifier:
keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36352e302f32342d3234203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.65.0/24
Signature Algorithm: sha256WithRSAEncryption
29:9d:b6:49:54:84:6a:e8:35:5f:1b:0a:dd:4e:e2:0a:4d:ff:
e8:ef:c1:0d:cf:84:9e:25:f5:74:d1:66:03:5e:ab:ce:83:50:
a6:e8:23:fd:8c:bc:16:e5:79:f0:00:f7:b5:7a:22:57:20:f9:
8c:04:df:56:a5:55:a4:13:f3:aa:ff:e3:b7:96:36:7f:12:16:
02:be:78:51:45:e1:3d:ef:b6:62:ae:58:07:93:a2:b1:18:04:
a5:5a:9b:3c:2b:99:b8:cf:30:8e:64:5b:50:b5:6f:86:4b:30:
e0:76:70:b8:1f:20:92:25:5f:6e:8e:c7:66:a6:b8:40:e4:84:
28:17:00:ea:09:54:d6:e4:52:59:4d:d4:ac:43:6e:53:94:9e:
a7:4c:27:72:5f:ee:e8:6d:aa:8c:33:99:9d:6f:11:8b:f1:25:
77:bd:11:4d:74:b8:c4:44:87:79:d8:34:e9:de:37:1e:46:db:
73:61:6d:b6:a0:a3:fd:fe:47:4c:1a:8e:5a:a3:20:f2:77:d0:
d0:bb:58:c2:6d:e1:30:12:04:8a:55:3a:2c:e0:19:c0:ed:a1:
23:b3:e4:c0:7b:3a:61:18:cb:9e:d5:41:b9:a2:7e:ff:b2:89:
07:b0:2f:f8:f2:db:13:a9:7b:16:3a:ee:62:8a:1f:1f:19:63:
2f:5e:a0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:40:59 2025 by rpki-client