Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e372e302f32342d3234203d3e20323730343934.roa
File: 32342e3135322e372e302f32342d3234203d3e20323730343934.roa (raw, json)
Hash identifier: VGn1yIc7BMPhuDh3qUtvIII/XbqgWQ9yKTjRbrD3OuM=
Subject key identifier: 2B:69:3A:19:B8:22:B9:1E:78:BB:56:15:44:7B:0E:63:EB:10:3F:66
Certificate issuer: /CN=FE87A6B4A867FB246AF3F307808DC99592129232
Certificate serial: 481FB92580A9F04903AE60CF249CEDD6DD9A179F
Authority key identifier: FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e372e302f32342d3234203d3e20323730343934.roa
Signing time: Fri 21 Feb 2025 21:50:50 +0000
ROA not before: Fri 21 Feb 2025 21:45:50 +0000
ROA not after: Fri 20 Feb 2026 21:50:50 +0000
asID: 270494
IP address blocks: 24.152.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 19:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:1f:b9:25:80:a9:f0:49:03:ae:60:cf:24:9c:ed:d6:dd:9a:17:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE87A6B4A867FB246AF3F307808DC99592129232
Validity
Not Before: Feb 21 21:45:50 2025 GMT
Not After : Feb 20 21:50:50 2026 GMT
Subject: CN=2B693A19B822B91E78BB5615447B0E63EB103F66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:10:11:b2:fe:06:9c:f4:08:0c:01:0f:13:
e4:02:d0:29:8c:bf:0d:fc:c8:17:4e:92:ec:14:40:
02:c1:19:30:02:05:55:00:3e:5f:4c:ec:e9:d2:20:
76:2b:57:e0:6d:d8:cb:cd:ec:1a:e1:5a:e5:5c:ba:
8e:83:f5:7d:31:e4:df:6b:bd:85:24:c7:1c:23:a4:
e1:37:30:ee:99:f1:dd:ab:00:a7:7c:4c:91:46:5a:
3e:59:ca:a1:56:a1:4b:b8:be:11:98:d2:a7:89:dd:
03:76:99:8a:61:d3:35:f5:53:a7:01:a4:48:6d:59:
70:f4:18:c0:e3:b5:13:e3:7a:ff:cf:a1:56:2b:97:
9d:df:ce:44:2c:8a:ff:e1:32:4c:46:af:a4:34:14:
48:31:61:c9:a5:02:c8:2a:d8:4b:00:8e:20:e3:83:
e2:f9:0e:1c:ef:a8:80:01:8f:58:19:b2:5b:6f:60:
97:f2:9a:91:6e:3b:ad:07:62:ea:12:cc:a3:3a:01:
0a:01:e4:5d:c5:90:d9:60:af:e1:a1:0e:64:91:27:
46:f7:4d:0d:66:0b:27:0f:88:39:dd:e3:eb:b7:7d:
34:8f:bb:00:a6:3e:c9:fe:21:f5:95:06:9c:1d:bb:
64:5e:75:42:78:9d:69:65:82:40:2d:5b:68:ff:c3:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:69:3A:19:B8:22:B9:1E:78:BB:56:15:44:7B:0E:63:EB:10:3F:66
X509v3 Authority Key Identifier:
keyid:FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e372e302f32342d3234203d3e20323730343934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.7.0/24
Signature Algorithm: sha256WithRSAEncryption
78:da:78:f8:d9:29:1b:d2:91:c7:37:00:a0:7f:89:99:97:02:
9b:cd:c3:02:73:b5:2d:7e:55:a2:03:0e:83:2d:54:63:c8:91:
01:1c:d8:90:6a:c3:28:1a:0b:6b:d9:ab:c6:8c:fe:d1:84:82:
de:65:c6:25:b0:27:42:e0:85:1e:97:43:01:74:67:a9:ae:b1:
0b:aa:38:b6:5d:ef:40:50:db:8c:ff:cb:d1:d2:2f:35:ac:c4:
a6:04:34:4f:d2:ee:a2:55:3c:b1:f9:64:09:d2:3d:4d:56:4a:
e0:ac:08:94:0f:c9:2c:b7:54:69:4a:f5:b9:f1:8e:ce:10:11:
ee:fe:54:06:59:aa:90:38:49:56:83:ab:6e:bb:6d:ef:68:5c:
c0:2c:d5:3a:58:82:72:df:cd:03:f4:a0:be:62:4d:b9:43:37:
df:78:6f:30:68:24:8f:fa:49:70:d9:be:d8:cd:42:84:87:0c:
16:39:f5:9a:48:ee:93:58:b4:9c:d1:4c:e6:60:8d:db:14:71:
11:13:cf:e8:94:fa:b9:c6:5d:59:ad:f0:83:4e:7b:7f:fc:a7:
15:05:30:96:32:20:6a:d4:d7:e0:af:67:70:dd:1c:91:5d:08:
f9:08:c9:1b:71:04:02:0e:27:fb:00:13:ce:53:c8:cf:24:09:
d1:7c:9b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:58:12 2025 by rpki-client