Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e352e302f32342d3234203d3e20323730343934.roa
File: 32342e3135322e352e302f32342d3234203d3e20323730343934.roa (raw, json)
Hash identifier: ZUtYhKdJJpB3xeh8P0IWFN4L92ZD748z3Sbf8dDsn4s=
Subject key identifier: C9:81:0C:04:97:16:AE:C2:A5:EB:7C:40:17:93:1D:EC:68:63:A6:7E
Certificate issuer: /CN=FE87A6B4A867FB246AF3F307808DC99592129232
Certificate serial: 5F8DA4F8705D7A714153EDD97C9DCD2E42296050
Authority key identifier: FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e352e302f32342d3234203d3e20323730343934.roa
Signing time: Fri 21 Feb 2025 21:50:46 +0000
ROA not before: Fri 21 Feb 2025 21:45:46 +0000
ROA not after: Fri 20 Feb 2026 21:50:46 +0000
asID: 270494
IP address blocks: 24.152.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 19:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:8d:a4:f8:70:5d:7a:71:41:53:ed:d9:7c:9d:cd:2e:42:29:60:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE87A6B4A867FB246AF3F307808DC99592129232
Validity
Not Before: Feb 21 21:45:46 2025 GMT
Not After : Feb 20 21:50:46 2026 GMT
Subject: CN=C9810C049716AEC2A5EB7C4017931DEC6863A67E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:6a:fd:e5:31:ac:fc:37:0b:f2:7c:bd:40:
05:82:d3:84:a2:fc:17:76:fe:c1:5d:23:b6:38:76:
46:26:1b:07:34:e1:0f:86:16:5a:25:59:97:2e:a7:
90:fa:9a:34:de:46:be:e6:0f:53:47:b3:87:04:e3:
76:22:aa:2b:2a:44:8b:29:e7:33:e3:ec:2a:2b:98:
ab:9c:ce:fb:0d:cb:ab:00:da:69:66:e7:db:22:16:
92:ee:0e:b1:17:bc:94:c0:08:37:04:0b:4f:b7:e4:
ac:51:18:37:20:31:50:f1:00:fd:60:f6:01:c9:79:
a9:ad:48:ac:0f:c5:f6:a8:d0:c7:ad:5c:60:12:77:
8d:77:c8:b8:86:a3:72:1c:99:1c:c3:e9:57:97:83:
b1:d2:47:82:2b:b0:ac:b5:f6:ea:6b:4e:e9:8a:74:
82:13:7d:2b:7f:cc:ae:e3:4e:47:b6:91:2d:da:4b:
37:90:18:bc:7d:cd:ca:8b:a4:d3:83:1c:2b:80:a9:
b0:d0:b3:67:0d:a5:a0:2c:dc:55:86:6f:b3:b1:bb:
8f:48:4c:5d:3c:55:da:b9:63:b9:a5:b2:6f:25:ea:
05:44:46:ff:c1:23:a1:83:9e:c2:d5:83:3e:c1:50:
0b:35:5f:4d:39:9d:70:db:62:44:f2:cf:86:e2:d8:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:81:0C:04:97:16:AE:C2:A5:EB:7C:40:17:93:1D:EC:68:63:A6:7E
X509v3 Authority Key Identifier:
keyid:FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e352e302f32342d3234203d3e20323730343934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.5.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c1:fe:8b:4e:52:16:5b:00:1d:de:27:55:b3:b4:e0:3d:8a:
fd:ac:cb:ef:5d:8f:b9:33:fb:2e:30:81:4e:03:66:e8:a2:b6:
6f:79:c5:ca:da:88:d0:6f:86:5b:30:bc:1e:e1:39:b5:d0:e3:
f1:1b:b8:de:af:f3:96:dd:ee:4d:de:ba:87:5e:a6:a3:1e:36:
2b:e3:5f:94:82:31:b3:88:e7:33:48:f1:61:71:b0:fc:99:bc:
62:d2:f1:83:6d:f7:ec:56:e3:3e:83:71:7e:03:36:ac:3b:58:
b9:df:89:c7:65:fc:35:ed:c2:08:27:bf:2c:7b:1c:9c:47:4e:
18:a5:72:75:43:93:32:19:e6:e3:8e:27:92:55:1d:02:34:46:
0c:30:84:f6:40:bf:c4:11:63:31:94:ee:0d:d3:40:42:bf:d2:
80:e6:73:ed:19:50:18:57:32:50:c7:d4:c4:81:d5:33:3e:3a:
fe:71:21:63:3e:24:1b:8f:b5:50:c6:59:76:b7:20:e5:3d:b7:
bc:81:4f:2c:52:fe:5a:80:e6:8e:de:6e:74:ed:b5:df:58:24:
94:47:c9:e9:41:a2:dd:dd:68:1b:79:f1:c1:96:e6:42:86:f8:
63:7b:cc:0f:61:29:f8:c2:3c:ea:04:0b:4d:25:6a:cb:96:86:
36:b2:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:17:01 2025 by rpki-client