Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32342d3234203d3e20323730343934.roa
File: 32342e3135322e342e302f32342d3234203d3e20323730343934.roa (raw, json)
Hash identifier: TovE0vpqubYeQpMDvMw3WqU9A8AVXwf5WtZRD3AsVEY=
Subject key identifier: 1A:19:25:E7:BC:A7:5D:31:1D:44:8A:22:CB:D6:65:C9:7C:5F:19:58
Certificate issuer: /CN=FE87A6B4A867FB246AF3F307808DC99592129232
Certificate serial: 7440066D683F772473CEFEA595CAC1E9F0310885
Authority key identifier: FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32342d3234203d3e20323730343934.roa
Signing time: Fri 21 Feb 2025 21:50:49 +0000
ROA not before: Fri 21 Feb 2025 21:45:49 +0000
ROA not after: Fri 20 Feb 2026 21:50:49 +0000
asID: 270494
IP address blocks: 24.152.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 19:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:40:06:6d:68:3f:77:24:73:ce:fe:a5:95:ca:c1:e9:f0:31:08:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE87A6B4A867FB246AF3F307808DC99592129232
Validity
Not Before: Feb 21 21:45:49 2025 GMT
Not After : Feb 20 21:50:49 2026 GMT
Subject: CN=1A1925E7BCA75D311D448A22CBD665C97C5F1958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:73:97:17:d6:54:7e:c4:07:3a:8a:bf:39:
da:73:fa:96:38:33:8d:d6:4d:ca:25:c7:42:69:c2:
45:84:36:13:f2:3c:e9:6e:c2:3c:3b:8f:4a:86:e5:
4d:fb:a9:58:c1:07:45:9f:e0:7a:ab:35:fd:01:56:
17:7a:b0:58:f5:55:33:ff:5d:27:95:6e:c7:9f:86:
ba:f0:07:39:87:dc:49:85:6e:08:a5:5f:ce:5e:bb:
c4:d7:d0:64:9f:99:dd:cc:12:9b:e0:2a:89:49:0c:
46:d4:57:b5:8d:3e:29:26:df:c2:a5:ba:bc:2f:cd:
e3:4c:6a:35:7a:67:27:ad:a2:f4:a0:a7:b8:54:28:
c9:6f:0c:9d:32:7b:8b:dd:58:ff:61:fc:cc:25:d6:
43:a7:c3:f0:2b:ad:dd:e9:d4:e9:52:87:e4:a7:0b:
99:bf:a4:8a:d9:0b:a1:74:7c:1b:cb:97:af:35:90:
94:16:66:10:c0:76:7b:16:14:0a:66:b4:5d:4a:a0:
91:39:dd:a5:68:44:25:68:38:5f:73:54:9d:fe:16:
eb:31:5d:b5:75:d5:c1:9d:53:05:7c:c1:ef:93:5f:
9d:57:75:fe:d7:7f:f5:42:09:28:9e:83:7c:2b:e9:
5e:01:9a:dc:be:74:5e:5c:12:f0:11:df:24:21:fb:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:19:25:E7:BC:A7:5D:31:1D:44:8A:22:CB:D6:65:C9:7C:5F:19:58
X509v3 Authority Key Identifier:
keyid:FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32342d3234203d3e20323730343934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:bb:ee:39:2f:96:0b:cc:21:ac:c7:1f:7a:bd:39:96:ce:9d:
5b:06:2d:c4:06:28:56:3a:64:0b:97:52:cf:94:3d:6b:2d:6b:
1f:d4:f6:ff:bd:92:72:bf:cd:4e:e9:98:29:75:aa:e1:4d:84:
b1:f8:2a:3f:95:92:3e:d5:36:d6:37:ec:c6:b0:e0:7e:c7:3f:
16:eb:3b:38:33:12:86:ed:cd:63:fd:0d:9c:3e:6d:6e:14:17:
80:62:b1:11:16:9d:1e:c7:3d:ea:a0:c8:c8:2a:b3:f9:50:2a:
2d:8e:0d:78:0e:d9:62:4b:f0:23:55:aa:7e:46:5f:52:3a:0d:
97:89:dd:3d:3f:17:8d:4a:5e:21:9a:89:bf:48:d0:ef:55:36:
8e:ce:a1:f2:ca:51:f6:47:bf:ab:ff:42:72:d7:1c:95:cf:1b:
b8:e4:3e:f1:10:54:18:88:08:38:6b:2d:27:5e:05:d5:92:30:
36:43:a7:e5:cd:29:66:e4:bf:43:ab:43:17:12:1c:b1:db:4a:
c8:4b:fb:bd:b4:c9:ef:f0:73:13:38:54:21:cc:4a:26:10:63:
91:0c:fa:d9:e6:0e:96:d3:27:b3:3b:ef:36:b8:83:c8:16:57:
35:c7:5c:08:89:1f:2b:4a:fa:f2:e2:01:c2:fc:60:d2:93:9e:
ce:9d:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:48:38 2025 by rpki-client