Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33342e302f32342d3234203d3e20323636343937.roa
File: 3137302e3234342e33342e302f32342d3234203d3e20323636343937.roa (raw, json)
Hash identifier: 21wxBR+clpOiUIB7LYoOR8JetRcQy28fryMz1Tf12Zc=
Subject key identifier: A1:99:C2:20:55:8B:0E:92:83:0D:6C:75:0F:33:DC:EA:99:97:46:58
Certificate issuer: /CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
Certificate serial: 4B19621B5FBCD07E44E4C33E888F6853D0C23458
Authority key identifier: A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33342e302f32342d3234203d3e20323636343937.roa
Signing time: Fri 06 Dec 2024 16:52:04 +0000
ROA not before: Fri 06 Dec 2024 16:47:04 +0000
ROA not after: Fri 05 Dec 2025 16:52:04 +0000
asID: 266497
IP address blocks: 170.244.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 20:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:19:62:1b:5f:bc:d0:7e:44:e4:c3:3e:88:8f:68:53:d0:c2:34:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
Validity
Not Before: Dec 6 16:47:04 2024 GMT
Not After : Dec 5 16:52:04 2025 GMT
Subject: CN=A199C220558B0E92830D6C750F33DCEA99974658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:e7:8b:97:f3:de:53:32:48:f1:39:f3:1f:
07:35:5d:6f:9f:ad:b1:e3:58:ef:65:e5:d7:d1:e2:
a1:e2:a8:15:5c:5e:3c:83:14:f0:3e:af:65:7a:6d:
2d:f7:ca:52:ff:33:5d:84:f6:0f:ee:dc:55:ac:76:
18:e7:f2:0a:a8:05:fd:e0:9f:ca:08:17:ab:54:e7:
7b:ef:eb:96:14:39:eb:cd:63:df:42:36:c8:bd:e1:
83:ce:f7:19:67:c6:cc:fd:1a:a6:14:ab:b4:4f:13:
2d:83:36:d8:30:69:ca:c1:cb:c2:0d:f7:2e:f5:e4:
2d:9d:fb:57:8f:55:42:e2:9d:ca:46:6a:56:06:f0:
99:99:7f:40:60:1e:57:e0:67:38:cb:3c:2a:d3:13:
e6:6a:3a:42:1c:1a:ca:a5:a6:8c:14:7f:18:7e:a7:
9e:2d:69:ce:41:dc:6b:4e:5e:1b:4f:60:14:e3:5d:
54:17:2e:6d:6b:cc:d6:c1:dd:8f:6e:c4:de:ec:64:
35:01:1f:0d:51:69:fe:d8:82:13:f3:35:c3:e7:a0:
9c:b5:7a:07:7f:34:16:6b:c2:d3:3b:d1:fc:2c:9d:
b2:51:a6:32:c5:4d:66:d9:c6:be:90:4e:7a:cd:a2:
45:38:b3:15:2b:2b:7b:02:68:43:05:7f:5c:89:31:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:99:C2:20:55:8B:0E:92:83:0D:6C:75:0F:33:DC:EA:99:97:46:58
X509v3 Authority Key Identifier:
keyid:A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33342e302f32342d3234203d3e20323636343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.34.0/24
Signature Algorithm: sha256WithRSAEncryption
79:92:fa:e2:c3:67:fa:e9:06:3a:a7:26:f6:5f:4e:4b:35:bf:
0d:92:60:19:52:bc:68:26:96:b1:46:e0:d5:d8:a6:9a:f3:b4:
b9:29:20:57:90:80:ce:4c:38:11:d8:b0:ee:c2:39:3a:bb:b6:
20:6e:95:d4:07:2e:f3:f2:aa:ae:fa:be:98:96:50:04:77:15:
6d:92:f4:3f:f8:c2:d3:e1:d0:0d:72:6c:0a:a2:37:cd:b9:e0:
9c:0b:3e:1c:52:96:d0:77:87:25:75:a3:b3:24:43:74:63:fd:
ee:8d:d2:a2:8c:ea:da:0a:28:06:4a:97:4f:1f:c3:c5:6a:ba:
1e:38:ea:38:9c:ed:cd:9c:dc:00:c8:d1:7c:9c:94:2d:6d:59:
39:be:14:ec:c8:22:0c:bb:d0:00:ae:a2:6b:db:4f:8a:99:65:
df:ae:9b:24:22:50:ac:d6:68:88:0a:b1:3e:43:7c:8c:ce:c9:
87:6a:f6:d3:db:e7:5e:ef:3a:57:fe:6d:3d:48:79:c2:0a:6b:
94:fc:6e:81:9b:b6:a3:4a:76:13:59:db:86:b6:c9:3c:2d:66:
77:f5:d9:a0:ce:91:b8:8a:c9:62:44:9e:70:4a:9a:60:c6:5b:
cd:18:5e:cf:0c:d1:bd:09:23:48:76:72:9d:0e:9e:9b:b3:13:
cf:78:7c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:12:33 2025 by rpki-client