Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34342e302f32342d3234203d3e203532373936.roa
File: 3137372e35322e34342e302f32342d3234203d3e203532373936.roa (raw, json)
Hash identifier: iWOlP3YyWv18nwii+RxMhIBU92oLX7IlRzTwWvAIXHY=
Subject key identifier: 9F:19:9B:F9:81:E0:33:A6:D3:36:21:9E:C4:E3:B9:0A:B6:74:F4:FE
Certificate issuer: /CN=653D1900116E7E41CE869340B5477E400370D802
Certificate serial: 3E53D4DCF34E04FEA3CF59A49F58356EF38FA946
Authority key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34342e302f32342d3234203d3e203532373936.roa
Signing time: Mon 02 Sep 2024 19:00:58 +0000
ROA not before: Mon 02 Sep 2024 18:55:58 +0000
ROA not after: Mon 01 Sep 2025 19:00:58 +0000
asID: 52796
IP address blocks: 177.52.44.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:53:d4:dc:f3:4e:04:fe:a3:cf:59:a4:9f:58:35:6e:f3:8f:a9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653D1900116E7E41CE869340B5477E400370D802
Validity
Not Before: Sep 2 18:55:58 2024 GMT
Not After : Sep 1 19:00:58 2025 GMT
Subject: CN=9F199BF981E033A6D336219EC4E3B90AB674F4FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:3d:15:64:e1:64:dc:9a:4d:e7:5f:15:5a:
f4:e7:c2:b1:b7:cb:7a:12:b8:80:73:1d:a8:47:80:
5c:e4:0f:bb:a2:1e:f1:3e:01:81:81:6b:af:87:1f:
24:5e:66:ac:16:8a:54:cf:7c:89:5d:f7:0d:fb:cd:
ce:85:79:ef:08:7e:41:35:b3:38:06:d2:d1:31:55:
d8:4a:b6:db:34:08:e1:c4:ed:1b:94:c3:77:bd:cc:
10:c4:d2:73:2f:0e:23:c4:a7:55:6c:8d:03:c7:17:
c7:a6:d5:8a:47:29:49:66:63:6c:04:7d:fd:a2:7b:
e4:48:21:26:f6:34:21:34:5d:c8:dd:2a:fc:af:ab:
01:9b:2e:5c:a1:56:8d:32:42:9f:45:7d:c0:98:31:
e0:9d:f7:aa:db:3f:a9:0b:f7:e3:e3:6c:d6:38:d4:
7e:6c:64:90:81:84:22:d6:ab:cf:9a:2d:0c:e1:2d:
b3:00:73:1c:79:30:30:28:ab:5d:c2:1d:11:63:44:
ac:d4:60:68:71:27:19:39:dc:4a:32:93:b9:c4:1e:
40:38:f1:c8:23:9e:88:e6:96:24:39:e5:a5:cb:88:
e0:63:b0:55:55:dd:6c:a6:42:e0:73:2b:7d:88:d1:
11:f7:1a:cf:13:a8:24:51:3c:d6:0e:ac:84:c7:30:
06:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:19:9B:F9:81:E0:33:A6:D3:36:21:9E:C4:E3:B9:0A:B6:74:F4:FE
X509v3 Authority Key Identifier:
keyid:65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34342e302f32342d3234203d3e203532373936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.52.44.0/24
Signature Algorithm: sha256WithRSAEncryption
18:7b:a7:8c:0e:ab:8b:b9:f2:91:33:69:45:e4:e3:e0:92:72:
69:75:fd:a8:3d:ec:9e:b0:9a:91:cc:e5:41:a6:43:39:dc:ac:
d5:f6:87:d1:54:42:07:a9:4b:3e:cc:87:79:fa:71:84:03:0e:
16:e9:f9:20:6f:ae:cb:b2:77:c8:a7:61:5d:90:1a:40:59:a4:
cc:c0:80:42:23:94:2e:95:93:5c:b8:87:18:e8:91:97:0a:17:
e2:54:b5:ac:6e:22:d6:69:b3:d2:a4:02:b0:55:8b:9e:e0:8d:
82:d7:72:44:d7:e9:af:c1:ee:fd:94:5e:27:9e:8b:b6:56:d0:
ea:4d:98:c1:ca:ce:5a:5d:ce:1a:24:5e:db:f5:3c:d4:05:93:
3e:a1:2f:20:41:f6:1e:f5:df:ee:fd:1b:f9:76:3a:83:21:7c:
98:30:78:8c:2a:22:1c:d1:89:71:fb:47:8a:09:dc:cf:10:ca:
a9:0d:ab:23:c8:6c:66:ae:55:52:d1:f0:9b:6a:0c:2c:a8:65:
31:12:67:74:f7:b1:30:4e:90:e8:6c:1d:78:3e:f6:d7:b9:98:
af:34:7b:49:b7:9d:88:ca:17:15:f5:27:bc:25:1c:11:1f:45:
05:24:6c:e3:46:79:2f:43:6d:b3:66:1b:ee:b7:be:c7:6e:27:
90:cc:06:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:01 2025 by rpki-client