![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/3136382e3139342e3232302e302f32342d3234203d3e20323635343132.roa
File: 3136382e3139342e3232302e302f32342d3234203d3e20323635343132.roa (raw, json)
Hash identifier: tLkOZSulbUBnAmdPdFfn8cm6NVaW5kD0kABYz34SM98=
Subject key identifier: A6:9B:EF:59:E1:4D:D6:0A:65:FF:B0:5C:6A:9E:C0:26:D3:D1:A7:11
Certificate issuer: /CN=F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6
Certificate serial: 5E603C424B4D785D7042D3AA671223944D934B4C
Authority key identifier: F5:32:C3:FA:CC:86:AB:1E:10:18:2A:73:1C:EE:5C:6E:32:C7:B3:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/3136382e3139342e3232302e302f32342d3234203d3e20323635343132.roa
Signing time: Wed 24 Apr 2024 20:08:43 +0000
ROA not before: Wed 24 Apr 2024 20:03:43 +0000
ROA not after: Wed 23 Apr 2025 20:08:43 +0000
asID: 265412
IP address blocks: 168.194.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:60:3c:42:4b:4d:78:5d:70:42:d3:aa:67:12:23:94:4d:93:4b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6
Validity
Not Before: Apr 24 20:03:43 2024 GMT
Not After : Apr 23 20:08:43 2025 GMT
Subject: CN=A69BEF59E14DD60A65FFB05C6A9EC026D3D1A711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:e3:1a:18:ca:2c:a4:1e:62:37:7e:2b:b7:
71:bd:98:61:e1:9e:0f:2c:42:b3:5e:30:73:63:af:
52:ec:db:26:4c:4c:5f:7a:06:42:4d:c7:d4:af:b6:
89:f2:4a:73:fd:c0:01:a3:13:c5:16:98:34:7b:20:
ed:a5:1e:2f:7d:fd:a6:07:3b:3c:07:b6:26:43:66:
8b:ec:75:85:f6:2d:36:c0:15:b5:4d:73:46:bd:c9:
56:5d:2a:0b:61:db:23:80:ed:a1:2f:02:0f:50:1c:
9e:ff:40:32:1b:82:4f:59:7e:77:2d:23:d3:10:dd:
f1:91:e6:27:3a:4f:b3:30:c3:b7:c6:20:87:eb:15:
21:30:bb:08:31:d9:95:3e:4f:ad:ed:e1:03:1e:70:
86:82:d8:e6:e6:0d:a5:66:8e:30:b3:61:d5:23:e3:
4e:c0:9d:65:59:ff:85:d0:ed:8a:27:62:e4:e7:da:
66:bd:e8:5b:e9:34:88:77:46:3f:52:cf:3c:32:cf:
5c:7a:df:1a:80:6e:b5:25:31:b8:ea:68:0f:12:37:
65:c2:3e:54:64:d8:e9:a7:87:12:a3:e5:56:43:ef:
9b:0e:cb:ab:7c:5a:07:91:77:64:fd:76:0c:ad:b0:
dd:ca:b5:9d:b2:b3:f8:98:39:ea:cc:e5:6a:7a:a2:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9B:EF:59:E1:4D:D6:0A:65:FF:B0:5C:6A:9E:C0:26:D3:D1:A7:11
X509v3 Authority Key Identifier:
keyid:F5:32:C3:FA:CC:86:AB:1E:10:18:2A:73:1C:EE:5C:6E:32:C7:B3:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/3136382e3139342e3232302e302f32342d3234203d3e20323635343132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.220.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e5:60:1b:19:d1:3d:22:5c:cb:95:81:df:7a:43:a9:2d:37:
23:de:6c:99:c0:cc:6b:ad:e3:ca:5e:b3:84:fb:36:98:7d:98:
15:2f:9a:e4:5d:ee:0a:18:56:49:e3:f5:f7:fc:26:75:fa:c1:
a4:e6:e6:ef:88:13:e7:8d:f3:29:3c:00:2b:c9:cd:4a:a2:56:
68:19:ac:cd:00:e5:0d:ad:c8:fc:47:03:f6:45:a8:a6:fa:9e:
bb:dd:70:73:2a:1d:85:19:ad:ae:2e:dc:b1:54:72:dc:ca:5c:
f6:37:ac:56:38:ec:f9:f5:de:8a:db:b6:77:22:75:33:a6:4f:
70:20:a3:ba:d0:6a:18:ec:67:54:83:b9:9a:18:99:cf:a6:36:
7c:f1:82:ed:10:84:35:e7:9e:d6:87:ec:cc:3c:f1:d5:43:a7:
ed:07:27:b6:bc:0e:b6:cf:28:8c:16:b4:a6:2a:de:4c:95:c6:
a1:7c:4f:07:7a:7f:d9:27:ac:38:4c:1c:aa:95:9c:d4:d6:af:
dd:41:25:30:a4:74:06:71:9f:b7:c0:db:92:f9:4b:09:7c:bf:
83:a2:f2:d5:21:dd:96:e9:96:82:61:b2:51:6b:a2:27:0b:ed:
14:fc:a5:34:ce:00:43:57:d7:8a:1c:bc:90:db:69:d2:5b:41:
e0:de:f3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:48 2025 by rpki-client