Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33352e302f32342d3234203d3e20323636343937.roa
File: 3137302e3234342e33352e302f32342d3234203d3e20323636343937.roa (raw, json)
Hash identifier: CoOSbRH5j51jBksIDT4Gt+3SQUcQ7AK+SxW/mWE4QAU=
Subject key identifier: AD:99:71:E4:84:17:13:61:96:0B:F9:EE:58:93:D4:E7:5E:50:D2:B8
Certificate issuer: /CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
Certificate serial: 7403E290FE172E3C826CE502F950AD70D7B2E343
Authority key identifier: A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33352e302f32342d3234203d3e20323636343937.roa
Signing time: Fri 06 Dec 2024 16:52:03 +0000
ROA not before: Fri 06 Dec 2024 16:47:03 +0000
ROA not after: Fri 05 Dec 2025 16:52:03 +0000
asID: 266497
IP address blocks: 170.244.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 20:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:03:e2:90:fe:17:2e:3c:82:6c:e5:02:f9:50:ad:70:d7:b2:e3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
Validity
Not Before: Dec 6 16:47:03 2024 GMT
Not After : Dec 5 16:52:03 2025 GMT
Subject: CN=AD9971E484171361960BF9EE5893D4E75E50D2B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:70:20:0f:11:ee:3e:f6:a2:a4:40:a5:99:
12:03:49:ce:7a:83:ed:73:8f:20:17:ef:f7:57:dc:
bb:cd:5f:82:34:05:59:3f:1d:f4:9a:fc:47:41:bb:
cb:66:53:27:26:27:37:f9:c7:81:56:be:e4:f1:54:
0a:83:a5:66:d2:71:e9:98:78:66:10:f7:dc:ec:fa:
58:6d:92:e5:a5:9b:aa:b4:0a:83:9e:ab:85:f6:64:
c7:82:45:7c:06:de:27:52:8f:ae:a7:48:f8:67:f2:
7d:8f:dd:89:21:59:e3:76:04:71:a0:6d:75:3a:5e:
8e:74:10:2e:e3:a6:18:68:e8:1f:be:20:86:16:89:
cc:46:0f:98:a7:af:bd:1a:22:22:d3:fa:99:ac:b1:
ae:20:21:12:b8:04:e6:8f:ad:3f:6d:99:78:b0:77:
df:f3:51:44:d3:44:88:97:97:d8:db:5e:c3:99:8d:
65:56:f6:99:f7:45:70:ff:5e:2b:32:77:89:f0:2f:
93:73:95:cd:28:aa:4c:86:96:f2:13:d4:0b:bc:af:
15:4d:46:e7:d6:9c:93:12:f5:aa:b6:e4:23:c4:56:
7c:c6:a8:70:bb:6c:24:f9:35:fa:8c:a5:dd:89:42:
6b:a2:e8:e4:f7:b5:79:51:2c:e9:e0:6c:0b:65:1e:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:99:71:E4:84:17:13:61:96:0B:F9:EE:58:93:D4:E7:5E:50:D2:B8
X509v3 Authority Key Identifier:
keyid:A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33352e302f32342d3234203d3e20323636343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.35.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ae:d2:c4:d0:1d:58:0f:0f:64:7c:b2:c6:e9:dd:79:d2:e6:
c1:72:ec:ac:4d:4d:d0:4b:be:dd:ea:a8:49:d3:36:0d:c2:5c:
44:e9:df:ff:d1:b8:1c:30:f0:7b:fb:7a:67:29:a9:ee:0e:4a:
a8:57:96:27:af:d0:55:b7:3d:df:5a:e5:b5:b3:34:21:0a:1b:
d9:8f:c6:9a:95:ec:be:96:4f:06:d5:80:15:7f:66:77:3e:aa:
96:ca:0f:c9:2e:5f:a6:79:81:3f:e8:07:59:3b:9f:a0:7e:e9:
ad:f2:dd:26:9c:af:a2:2a:43:31:19:de:8f:82:de:3e:ac:a3:
37:2e:91:3d:72:42:b2:19:e2:b1:86:cc:e3:c4:a1:60:2e:d7:
c9:67:5e:43:30:78:bb:30:40:9e:be:57:74:fe:e4:0d:89:b2:
fc:2a:40:e1:ee:77:3e:76:b2:8e:08:5e:5e:5d:84:41:c6:79:
97:66:be:79:55:e4:33:3a:3f:dc:a1:20:0b:a5:3f:20:2c:be:
0f:59:71:d9:37:b3:8e:79:f5:08:53:f1:e9:f3:97:cb:2d:d9:
e5:b7:19:a4:e2:1d:32:83:e3:ee:ab:3b:b2:06:91:d1:23:b7:
5b:05:03:0a:3d:27:63:86:4a:4b:a3:ff:6f:6b:89:92:88:7d:
07:ae:d1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:31 2025 by rpki-client