Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233342e302f32342d3234203d3e20323635343836.roa
File: 3136382e3139372e3233342e302f32342d3234203d3e20323635343836.roa (raw, json)
Hash identifier: Vx3sPoC4mRAtfsTBkNya6XlHtD0t+jIacd0qa9bZ6TE=
Subject key identifier: AF:6A:19:D6:90:C2:7E:2E:51:D6:B4:19:4C:DA:9B:AC:74:CE:7F:7A
Certificate issuer: /CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
Certificate serial: 633AD74D92B989D0823E2F8088B5BBA6E4345708
Authority key identifier: 27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233342e302f32342d3234203d3e20323635343836.roa
Signing time: Thu 09 Jan 2025 22:18:13 +0000
ROA not before: Thu 09 Jan 2025 22:13:13 +0000
ROA not after: Thu 08 Jan 2026 22:18:13 +0000
asID: 265486
IP address blocks: 168.197.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 22:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:3a:d7:4d:92:b9:89:d0:82:3e:2f:80:88:b5:bb:a6:e4:34:57:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
Validity
Not Before: Jan 9 22:13:13 2025 GMT
Not After : Jan 8 22:18:13 2026 GMT
Subject: CN=AF6A19D690C27E2E51D6B4194CDA9BAC74CE7F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:58:50:61:41:d3:c0:08:1c:7a:e8:6a:27:
7a:77:6b:11:56:b2:a9:ed:6b:f7:dd:7a:4d:3d:a6:
e2:0a:ab:e7:8b:67:f2:35:73:64:80:7e:7d:25:7f:
34:f7:e0:9f:2b:59:59:06:8e:93:a0:62:13:1d:45:
f5:98:a4:e3:f7:4c:81:1b:b3:c4:58:86:ed:55:b9:
82:c7:a5:b0:d5:73:31:25:f4:1d:31:65:94:9d:85:
24:62:4d:e8:c7:b1:da:b2:0e:93:69:dc:6e:c1:86:
30:05:e1:c4:9d:f3:c7:c8:c2:d0:8a:68:9d:e4:fd:
96:3f:18:20:6f:03:0e:25:ea:be:ad:fb:a5:94:15:
8a:00:a7:eb:11:0d:56:0c:42:48:da:8c:c8:f7:ec:
6a:41:1e:78:a7:58:36:ee:76:99:b5:a7:13:b8:19:
58:40:15:d4:62:d7:b4:82:f4:01:f8:82:1c:64:ee:
e4:8a:e5:ff:e2:93:d2:bd:58:bb:60:f8:12:63:0c:
6c:27:63:db:b1:99:62:b1:81:91:3b:d8:1e:9a:00:
b8:61:a6:4b:df:9c:c3:79:66:9e:61:30:ec:56:72:
ca:b0:c7:8c:ec:e1:ab:08:8a:f2:4d:94:d8:1d:53:
75:fd:08:bf:be:13:ae:6b:49:40:c7:50:e8:f7:70:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6A:19:D6:90:C2:7E:2E:51:D6:B4:19:4C:DA:9B:AC:74:CE:7F:7A
X509v3 Authority Key Identifier:
keyid:27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233342e302f32342d3234203d3e20323635343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.234.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0d:83:0d:46:d7:ef:d6:f3:78:e6:e5:02:59:32:dc:29:ae:
aa:63:33:d5:ac:9d:fb:29:18:3e:f1:71:88:ef:38:6f:a1:97:
89:9a:35:32:bb:bb:3d:c6:7f:7f:b2:20:7e:bd:c6:60:06:79:
92:9b:f1:85:7e:72:14:64:4b:e8:3e:d4:16:a0:bd:52:45:ff:
40:64:c8:04:b5:39:8b:a9:80:df:33:eb:7f:5e:14:f0:20:d2:
9d:47:c6:d1:59:ca:87:15:2e:4a:24:8f:a4:8f:93:97:6f:e3:
69:99:24:84:1f:78:6d:c5:cc:49:d1:fb:33:8a:60:45:68:82:
3a:67:3b:c6:3c:cf:b9:c3:e8:85:8e:f1:9f:6d:ad:54:22:4d:
b6:0a:61:27:13:f1:d4:fa:78:7c:82:3e:76:0d:6c:bb:7a:9f:
fe:cb:4b:0f:15:76:45:20:13:f4:a6:cf:5d:de:d9:13:ba:ba:
e4:9d:bb:03:4f:ae:82:ef:35:fe:32:d5:bc:9e:63:62:dd:be:
ba:28:25:c9:1d:c2:85:4c:89:0e:d7:80:1a:5c:85:b6:f1:25:
da:37:2e:dd:4a:6e:c9:97:08:fe:2b:69:30:d7:66:76:92:02:
af:a8:51:64:de:88:eb:8d:fa:d4:7c:cb:da:fc:74:7f:82:be:
a3:a4:73:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:15 2025 by rpki-client