![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3139312e302f32342d3234203d3e20323633333338.roa
File: 3139312e33362e3139312e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier: ZDbLC96wqdflk45TuQaOVq21FzFtjQOnd0SMH7ZHxDw=
Subject key identifier: 34:DF:AE:6C:B4:5E:23:AD:D4:73:32:33:42:05:20:F2:93:A9:70:E7
Certificate issuer: /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial: 0E345C65A1C080D4BDAF546CC2B6F09FC1622B2B
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3139312e302f32342d3234203d3e20323633333338.roa
Signing time: Fri 18 Oct 2024 11:53:06 +0000
ROA not before: Fri 18 Oct 2024 11:48:06 +0000
ROA not after: Fri 17 Oct 2025 11:53:06 +0000
asID: 263338
IP address blocks: 191.36.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 11:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:34:5c:65:a1:c0:80:d4:bd:af:54:6c:c2:b6:f0:9f:c1:62:2b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Validity
Not Before: Oct 18 11:48:06 2024 GMT
Not After : Oct 17 11:53:06 2025 GMT
Subject: CN=34DFAE6CB45E23ADD4733233420520F293A970E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:4b:df:f8:67:e6:38:25:03:4d:59:32:ca:
0c:41:7d:03:fe:02:5b:9c:f3:a8:db:73:b7:a1:e2:
0a:11:0e:a7:36:84:ad:f1:ff:69:45:23:b0:14:af:
70:c9:ec:4c:ba:b6:88:bc:58:93:ad:6c:e6:f4:c1:
06:a2:46:0e:df:75:c7:44:0b:a3:ad:03:9c:6d:76:
af:5c:c5:5d:61:ba:2d:83:71:5c:13:a9:b1:2f:65:
7e:c3:b8:8c:3c:b3:8d:14:21:0c:04:0f:06:f8:d0:
6d:c5:4c:80:c1:92:eb:a4:5e:0e:16:f5:6e:62:cb:
04:b2:46:e8:35:0a:6a:c6:9f:23:13:70:51:92:25:
4a:5f:d0:8f:62:3e:a7:26:ac:e0:81:0a:08:d6:8f:
c0:d6:85:cc:99:8c:5b:81:fc:e3:eb:89:e3:d7:9d:
94:7b:a5:b1:e5:a3:77:12:7d:0e:2d:dd:af:4b:12:
4a:3e:a7:0e:3c:80:39:45:b9:43:aa:4b:f5:85:11:
d8:11:02:fc:71:f7:a4:bd:88:24:de:25:d9:91:48:
08:8c:86:74:f1:2c:a1:ab:9c:4c:ac:62:30:08:97:
23:cd:29:ea:ae:3c:46:b7:a1:b7:53:f2:89:e5:d6:
c3:d6:47:31:4a:97:20:16:ed:a7:35:21:e4:fa:ac:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DF:AE:6C:B4:5E:23:AD:D4:73:32:33:42:05:20:F2:93:A9:70:E7
X509v3 Authority Key Identifier:
keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3139312e302f32342d3234203d3e20323633333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.36.191.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7e:cd:b4:e2:fe:d2:77:3c:49:ac:29:f1:9f:6d:da:df:26:
87:35:83:e2:eb:71:d0:cf:87:b6:fb:10:37:17:3a:88:95:0d:
f5:c4:6b:09:94:f7:f7:0d:cc:ce:9a:fe:84:27:18:aa:bb:ed:
81:dc:dc:a8:27:3f:a3:a1:f0:e0:fe:93:9f:35:62:d1:bf:18:
ff:fb:6c:7e:db:49:74:3f:af:03:23:18:25:a8:aa:72:6f:f1:
10:63:67:38:7b:7c:19:50:d6:c4:2f:eb:04:5c:30:fa:af:c7:
74:57:9c:d0:ba:5d:2c:21:01:dd:36:e0:c9:92:bc:98:9d:dd:
ff:a9:6d:01:d7:0b:ad:f6:a9:31:83:e7:79:6a:1a:49:77:ef:
72:db:cc:ce:0e:ef:fe:9b:a5:fa:63:01:de:c1:c7:61:db:6a:
33:e3:f3:22:70:c9:ff:9b:e8:de:90:f6:78:dc:4d:a6:78:05:
0c:8f:1c:ab:bb:56:97:62:ad:7e:3c:e7:94:25:4c:62:5c:f5:
0f:0a:2c:76:cb:4e:21:1d:00:89:32:93:78:41:ff:c7:e9:ee:
de:f4:99:28:58:34:be:3f:b7:fe:c2:5e:ad:02:ab:90:6b:61:
38:03:d5:72:7c:66:34:34:11:a2:55:cf:4e:2a:ae:c3:21:9a:
8a:f6:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:22 2025 by rpki-client