Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/3136342e3136332e39362e302f32322d3232203d3e20323635393439.roa
File: 3136342e3136332e39362e302f32322d3232203d3e20323635393439.roa (raw, json)
Hash identifier: dQwUlYPxCfbkWlH0KDLc9Wu3bP6CLVHS4yDYHK4tGjw=
Subject key identifier: 1A:51:D4:AF:59:D1:BE:01:D2:72:5B:13:DA:F9:46:FB:63:D6:85:B0
Certificate issuer: /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
Certificate serial: 7D7ADD04C2C25B15AD83E0117962875019DD858C
Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/3136342e3136332e39362e302f32322d3232203d3e20323635393439.roa
Signing time: Fri 22 Nov 2024 21:13:16 +0000
ROA not before: Fri 22 Nov 2024 21:08:16 +0000
ROA not after: Fri 21 Nov 2025 21:13:16 +0000
asID: 265949
IP address blocks: 164.163.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 13 Jan 2025 12:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:7a:dd:04:c2:c2:5b:15:ad:83:e0:11:79:62:87:50:19:dd:85:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
Validity
Not Before: Nov 22 21:08:16 2024 GMT
Not After : Nov 21 21:13:16 2025 GMT
Subject: CN=1A51D4AF59D1BE01D2725B13DAF946FB63D685B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:60:61:69:55:74:58:89:08:1f:72:dd:7f:
25:f8:a9:1a:3a:d6:69:42:7d:9e:70:d6:e7:31:36:
eb:36:28:9e:61:13:7f:48:32:67:34:ec:2e:c1:3f:
57:a8:21:93:44:3d:82:65:9f:fc:4c:58:cd:0e:86:
5b:86:d4:fc:eb:62:18:2d:26:a2:32:df:76:6a:8a:
8b:d4:df:a7:da:27:50:1e:00:a6:f5:c3:53:63:55:
91:63:06:b8:4a:06:83:48:83:a5:da:54:c6:fd:d7:
63:42:ca:7d:9a:bc:8e:35:f2:8c:3b:41:8d:3d:73:
c2:d4:10:bb:15:8a:2d:9c:aa:6f:81:e6:6c:98:06:
3a:c4:bd:37:79:b8:64:73:20:74:62:74:5c:2c:2d:
77:69:04:21:7a:5e:cc:d0:01:03:59:15:35:ad:68:
6d:62:34:f3:03:24:bb:2e:b3:ef:ab:9a:06:62:51:
39:da:49:28:8d:1e:6e:c4:6a:92:c4:9c:df:03:07:
a6:43:49:7a:0a:f8:bd:68:29:7a:f0:f9:17:16:41:
e5:f5:05:af:e0:71:77:d5:9a:cb:8a:82:27:cb:03:
97:69:95:14:2a:fb:cf:39:8a:2d:be:99:9b:2d:3b:
7f:90:8d:7e:e8:bb:22:84:be:d1:fd:da:a5:45:eb:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:51:D4:AF:59:D1:BE:01:D2:72:5B:13:DA:F9:46:FB:63:D6:85:B0
X509v3 Authority Key Identifier:
keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/3136342e3136332e39362e302f32322d3232203d3e20323635393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.96.0/22
Signature Algorithm: sha256WithRSAEncryption
11:5b:58:fa:98:ea:c4:ea:55:2a:65:d5:56:51:b5:1d:bd:05:
71:21:98:93:ed:1b:5d:8d:c6:21:b5:7d:02:26:3d:9b:7f:5f:
87:99:70:fb:b0:8e:8a:ae:14:44:71:1d:a9:b1:91:85:93:08:
2b:9d:47:b7:f8:b8:e6:a7:e7:43:c1:15:d2:9f:88:ea:a2:6a:
66:4a:b3:e0:7d:51:8c:88:2c:39:85:d2:89:96:b1:13:1c:cf:
dd:50:5d:b0:0b:7c:51:25:75:55:00:99:85:e5:31:b3:9b:73:
0f:be:74:dd:e1:13:74:67:08:1e:1d:bb:f9:c7:d1:cc:fa:f0:
06:1f:1a:cb:0d:22:ab:91:fe:a5:07:42:f1:69:39:d3:34:8d:
2f:3a:13:93:a8:73:b5:b6:b9:6b:0b:44:c0:7d:ed:fa:64:43:
4b:d4:43:f5:04:36:6d:80:ab:09:be:99:54:f2:42:1e:b5:77:
cf:49:a9:61:03:29:d2:48:3e:de:d0:a9:23:d4:39:3a:25:17:
bf:7f:8b:b0:b0:61:4b:0b:1f:21:d1:37:fd:af:8b:dc:a1:f9:
80:75:d2:77:ca:5c:97:ed:9e:56:82:4e:9d:46:18:a4:80:b4:
8a:b1:01:aa:19:b6:ce:34:31:3d:fa:3f:bf:64:1f:c9:32:6d:
e5:18:91:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:03:34 2025 by rpki-client