Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32332d3233203d3e20323633343832.roa
File: 3138392e38342e34342e302f32332d3233203d3e20323633343832.roa (raw, json)
Hash identifier: q2OvAyo4H9VaAOgQx5rvtP/xUJwzBqpzFA26HNJUZYQ=
Subject key identifier: 2C:A8:A4:B4:8E:F1:F1:28:E4:B4:ED:A5:BC:CE:7A:56:27:F6:27:23
Certificate issuer: /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial: 1B2AA84F9F211CFFF8330189B52884BEEE1F7FC0
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32332d3233203d3e20323633343832.roa
Signing time: Mon 31 Mar 2025 17:13:30 +0000
ROA not before: Mon 31 Mar 2025 17:08:30 +0000
ROA not after: Mon 30 Mar 2026 17:13:30 +0000
asID: 263482
IP address blocks: 189.84.44.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 17 Apr 2025 13:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:2a:a8:4f:9f:21:1c:ff:f8:33:01:89:b5:28:84:be:ee:1f:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Validity
Not Before: Mar 31 17:08:30 2025 GMT
Not After : Mar 30 17:13:30 2026 GMT
Subject: CN=2CA8A4B48EF1F128E4B4EDA5BCCE7A5627F62723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:91:a0:d5:2f:b7:7e:22:b6:b1:ce:97:5c:
46:9f:01:6d:d6:9c:c5:10:90:56:07:a0:37:8d:4e:
65:b3:75:0d:3a:51:e8:c2:01:e5:a5:51:82:24:e2:
05:c4:c2:20:63:46:0d:0e:a8:ee:9a:c7:f9:85:02:
1d:3d:de:d8:99:30:6e:98:81:f3:b5:e9:b2:f9:35:
c8:c2:b6:76:1f:27:c9:e4:cf:d1:04:40:a1:9d:90:
bf:f3:42:37:d8:12:70:24:ff:c3:b8:4d:9b:96:7f:
58:f7:ae:da:26:4d:e4:fb:a3:c2:c7:d5:1d:59:39:
e8:a6:02:1a:28:81:9f:31:eb:cb:2b:85:2a:cc:61:
99:77:ca:f2:e8:ed:e4:5d:9b:0c:da:38:59:ee:8e:
da:7f:16:de:f1:4c:20:8d:79:93:ae:44:b4:a8:78:
ef:81:0e:e3:04:6f:32:32:63:08:7c:6c:82:fd:1d:
a2:4b:b6:ec:d5:82:e7:e8:63:a4:b0:59:3e:8e:a8:
9f:26:c6:94:e3:6d:4a:a1:e0:28:29:7e:29:cd:59:
e6:7a:c6:2f:58:46:af:1a:91:68:c6:ef:66:48:8d:
ae:19:97:6b:00:8a:dd:77:87:25:bb:50:3a:d9:55:
b3:54:d9:73:d4:1d:9d:9a:60:b8:52:89:6a:a8:ac:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:A4:B4:8E:F1:F1:28:E4:B4:ED:A5:BC:CE:7A:56:27:F6:27:23
X509v3 Authority Key Identifier:
keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32332d3233203d3e20323633343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.84.44.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:54:d1:21:57:ab:a8:d7:19:51:bf:b0:09:6f:ef:60:03:e2:
81:f6:df:b1:9a:cb:86:6d:27:61:7a:8a:3e:eb:53:1d:97:4a:
12:30:ae:fc:43:30:bd:a2:8f:c0:ef:f5:c0:a8:08:75:94:69:
fe:e1:45:be:f8:03:ce:82:c9:d5:4c:07:22:5b:f3:2f:f3:73:
74:46:89:f5:b7:78:48:2a:4d:92:26:7b:33:3c:3c:62:6c:37:
2a:19:93:a6:0c:27:1d:cd:23:dd:6d:41:67:5b:b2:04:a9:42:
50:ad:2c:d5:e9:30:c7:b8:58:b0:db:4b:d8:57:b9:0e:e5:37:
a7:59:fc:30:47:50:65:bf:cc:cb:1e:2b:e3:8e:99:eb:ad:be:
41:72:3c:bd:9c:7c:c4:f2:97:d3:c8:28:8d:28:95:8d:3e:e1:
ad:f4:94:ff:70:b5:dd:08:1f:a9:d8:04:d2:ff:ea:39:67:e8:
d6:d6:9b:d5:67:03:aa:bd:29:be:35:07:2f:12:0f:68:66:52:
51:65:18:53:43:1e:5d:84:0c:52:7a:2b:1f:7e:63:1b:70:3a:
53:17:44:a5:84:e8:9a:be:2f:6b:1a:fe:25:1d:1b:5b:a4:05:
d6:4b:e7:b0:ba:fa:10:e9:34:99:ed:cc:c6:af:18:c0:e5:a8:
dc:42:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:56 2025 by rpki-client