Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138362e302f32342d3234203d3e20323634343235.roa
File: 3133312e3232312e3138362e302f32342d3234203d3e20323634343235.roa (raw, json)
Hash identifier: kjr+2F/0RdWNSajnrEi/iOKKQTL8v0K5toc9rpa3zOo=
Subject key identifier: 2D:F7:EB:02:E1:7F:88:AF:66:3E:77:0F:51:DB:4F:9F:65:25:2D:72
Certificate issuer: /CN=563F220F1BE7F8A083408CCA243F8EDE091EA8DC
Certificate serial: 4FE4263FCE7F5EE4F1F619C07C3E6B0970566AFA
Authority key identifier: 56:3F:22:0F:1B:E7:F8:A0:83:40:8C:CA:24:3F:8E:DE:09:1E:A8:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138362e302f32342d3234203d3e20323634343235.roa
Signing time: Tue 23 Jul 2024 18:02:09 +0000
ROA not before: Tue 23 Jul 2024 17:57:09 +0000
ROA not after: Tue 22 Jul 2025 18:02:09 +0000
asID: 264425
IP address blocks: 131.221.186.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e4:26:3f:ce:7f:5e:e4:f1:f6:19:c0:7c:3e:6b:09:70:56:6a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=563F220F1BE7F8A083408CCA243F8EDE091EA8DC
Validity
Not Before: Jul 23 17:57:09 2024 GMT
Not After : Jul 22 18:02:09 2025 GMT
Subject: CN=2DF7EB02E17F88AF663E770F51DB4F9F65252D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:f2:24:49:fa:e7:54:f5:bc:06:f0:e1:1d:
a1:23:92:50:ac:eb:ed:0b:e0:6c:91:c3:b6:77:34:
cc:9e:ab:45:94:ec:90:24:42:42:f5:e2:c2:f3:8d:
04:1a:76:1b:9f:40:14:fd:14:ed:6e:82:a3:9e:9e:
37:29:e3:22:19:82:15:d8:a6:19:4d:6b:af:cb:55:
ab:12:0c:bb:9c:0a:3d:13:92:2e:4b:d8:78:0b:f1:
5d:0f:78:c5:07:18:4c:2d:75:ce:ae:c5:a1:d7:4a:
a3:36:17:cc:e6:b6:3b:fb:79:13:f6:4b:0a:1c:d0:
f2:82:3f:5a:75:17:aa:68:a3:4e:bc:f9:95:9b:5a:
3a:76:63:48:0f:e8:4f:fa:a4:76:75:72:39:1b:98:
e9:12:4e:fa:15:bf:59:dc:2d:2f:d6:e6:d2:e3:9f:
eb:e8:d7:ed:79:d4:4e:4c:0d:33:ff:8d:20:d2:7c:
2f:2a:8b:45:e1:1d:6c:e1:80:00:72:eb:ee:50:41:
e4:fd:6b:15:5a:fd:bb:62:93:6a:d4:a5:d1:f4:02:
50:0e:67:24:52:80:dd:1e:a3:d6:01:35:59:f7:1c:
9c:2e:dc:ed:95:e6:69:aa:61:f6:48:fc:4c:4e:78:
41:63:76:55:ed:03:f1:e0:83:28:41:19:c6:0a:ac:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F7:EB:02:E1:7F:88:AF:66:3E:77:0F:51:DB:4F:9F:65:25:2D:72
X509v3 Authority Key Identifier:
keyid:56:3F:22:0F:1B:E7:F8:A0:83:40:8C:CA:24:3F:8E:DE:09:1E:A8:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138362e302f32342d3234203d3e20323634343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b4:85:54:c8:b9:fe:f8:3b:b4:b1:b1:97:25:25:80:34:a3:
33:29:05:a4:f1:8b:3a:c6:9c:2f:ae:17:76:26:f5:97:b0:08:
53:4f:60:5e:ba:21:59:5b:ab:97:2f:d2:b5:d7:dc:d2:13:8f:
2e:27:80:50:06:cf:ee:c1:9e:f9:60:c0:2e:e4:b7:a7:36:4e:
af:22:d4:13:84:78:2e:a0:6c:80:0c:6a:e3:f2:36:b8:00:e6:
c1:b9:99:0e:ce:54:82:21:c0:34:ee:2d:38:67:6f:ed:e5:af:
6e:e6:c7:af:c0:7e:05:d6:bb:2e:a1:51:20:fa:38:17:72:20:
03:ab:87:70:b0:7c:23:10:65:a2:a1:f9:95:2a:b4:ef:9e:00:
83:8d:7b:21:53:b7:54:b0:c2:0c:b7:7e:19:b1:84:50:26:06:
8c:09:83:e2:ab:d5:00:d7:ad:b1:90:5f:b5:8c:34:ef:31:02:
e3:25:c3:a0:a2:da:0c:c5:88:7d:a4:4d:05:cf:34:7d:20:2d:
e1:22:0f:b2:16:b2:91:5e:33:af:ab:e7:60:d5:28:8f:d7:25:
b0:02:e8:50:0d:43:b0:12:c7:44:c3:d1:62:92:39:01:f7:68:
ab:0f:81:44:80:cf:4c:f6:45:7f:1c:e2:80:d3:c0:ca:f7:c6:
25:43:1f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:17:45 2025 by rpki-client