Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/3136382e3139342e3232312e302f32342d3234203d3e20323635343132.roa
File: 3136382e3139342e3232312e302f32342d3234203d3e20323635343132.roa (raw, json)
Hash identifier: 9QwyEYzRtKg9Lcf9h8tudc6YQEEF/YYJuza+TXwVaMk=
Subject key identifier: DA:8D:71:AE:2B:D3:8A:94:02:93:FE:98:14:99:67:8A:05:88:A9:B3
Certificate issuer: /CN=F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6
Certificate serial: 4769F28AC2FD05240FBA0EC7AAF8CD550A0E702F
Authority key identifier: F5:32:C3:FA:CC:86:AB:1E:10:18:2A:73:1C:EE:5C:6E:32:C7:B3:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/3136382e3139342e3232312e302f32342d3234203d3e20323635343132.roa
Signing time: Wed 24 Apr 2024 20:08:45 +0000
ROA not before: Wed 24 Apr 2024 20:03:45 +0000
ROA not after: Wed 23 Apr 2025 20:08:45 +0000
asID: 265412
IP address blocks: 168.194.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:69:f2:8a:c2:fd:05:24:0f:ba:0e:c7:aa:f8:cd:55:0a:0e:70:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6
Validity
Not Before: Apr 24 20:03:45 2024 GMT
Not After : Apr 23 20:08:45 2025 GMT
Subject: CN=DA8D71AE2BD38A940293FE981499678A0588A9B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:63:81:92:2a:70:01:e1:56:66:25:62:e3:
60:5c:15:0a:4a:39:0d:79:a0:58:39:67:90:03:a8:
57:fd:f9:08:0c:81:c9:fd:cf:7e:7d:8c:db:ae:67:
5d:d9:63:38:60:08:96:93:35:55:03:e8:ac:21:48:
ec:ed:d9:d1:a5:ab:0b:df:de:f9:f2:db:b2:1a:21:
47:65:13:a7:33:c2:bb:79:04:c1:90:e0:d2:7f:99:
e9:d3:55:7b:54:e6:1c:9c:0d:5b:af:07:06:57:cb:
32:32:9f:8a:65:05:d7:8e:07:26:35:43:14:e6:fa:
26:2e:88:a9:1a:1f:ba:94:d9:e9:c4:21:54:74:91:
f6:f9:e2:78:03:6f:4f:cc:87:b6:53:9d:02:d5:b9:
e3:2c:5a:3a:d0:43:41:98:6e:98:69:58:01:b4:9d:
58:dc:64:7d:91:ab:a6:b1:ca:f2:32:1a:1f:b6:f3:
ce:36:47:fe:58:c0:ef:fa:69:44:fe:c5:e6:96:c6:
70:36:65:1c:41:7c:9e:10:d9:c1:52:e9:04:45:b7:
c5:69:8d:41:bc:f6:67:cd:d4:56:82:b2:b7:94:6b:
08:9e:87:a8:3c:c3:64:57:44:e8:8c:ad:b4:15:fd:
ce:df:71:b6:c2:0a:ae:d3:4f:1d:d9:ea:2b:6b:92:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8D:71:AE:2B:D3:8A:94:02:93:FE:98:14:99:67:8A:05:88:A9:B3
X509v3 Authority Key Identifier:
keyid:F5:32:C3:FA:CC:86:AB:1E:10:18:2A:73:1C:EE:5C:6E:32:C7:B3:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/3136382e3139342e3232312e302f32342d3234203d3e20323635343132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:31:ad:28:05:f4:0a:26:ba:ba:71:d9:29:42:aa:9d:55:09:
6a:c1:41:5a:e6:3c:4d:e8:ee:3b:e5:59:47:cc:83:f7:32:16:
59:60:10:6b:86:9d:8c:d3:fb:72:9a:26:07:03:e8:ab:f1:3e:
08:09:da:6e:6a:f3:70:0b:79:db:14:e2:8b:e5:bd:d1:53:03:
9a:74:70:37:41:b4:d4:73:db:c3:75:77:24:45:a0:31:7f:96:
63:0f:91:7a:45:4b:16:c2:bc:27:ca:ce:f3:70:7a:28:d4:25:
fa:73:77:23:d9:0d:19:6b:11:6e:6f:19:5a:4d:3f:0f:71:3d:
cb:65:51:5b:88:56:f1:94:ad:30:0b:ad:c3:bb:7d:3f:e3:2d:
14:25:bf:29:4a:02:ac:a7:10:c3:d3:0d:45:b8:44:23:47:37:
70:cd:46:9b:55:78:d4:d8:ea:af:fe:fe:0f:f1:95:d1:8f:ad:
26:5c:a7:ab:47:67:4d:14:46:81:a8:ca:7e:9a:06:7e:a0:18:
da:69:c1:27:a4:ce:5d:56:a5:52:07:56:1f:a6:3d:7a:1f:80:
3f:22:34:f0:43:b2:e2:07:8a:f3:40:5d:6c:29:ed:73:5f:10:
5e:80:b8:92:49:c3:e0:5e:1a:4d:f6:50:f1:0c:56:15:73:7f:
7f:e4:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:35 2025 by rpki-client