Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32332d3233203d3e20323733363831.roa
File: 3230312e3135392e3131362e302f32332d3233203d3e20323733363831.roa (raw, json)
Hash identifier: zNnL9SzJt79ImD2uPViOKDodBSpJYWRPBrD4l8qGBb0=
Subject key identifier: F2:61:09:32:FD:55:80:39:EE:D1:78:4E:6C:F3:E1:F4:8A:59:D0:70
Certificate issuer: /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial: 0A340853613AE1A80A6B4C8F67930C2646F106E5
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32332d3233203d3e20323733363831.roa
Signing time: Wed 08 May 2024 12:08:32 +0000
ROA not before: Wed 08 May 2024 12:03:32 +0000
ROA not after: Wed 07 May 2025 12:08:32 +0000
asID: 273681
IP address blocks: 201.159.116.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 22 Jul 2024 13:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:34:08:53:61:3a:e1:a8:0a:6b:4c:8f:67:93:0c:26:46:f1:06:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28C772F802942018601488095AA6C547A3694782
Validity
Not Before: May 8 12:03:32 2024 GMT
Not After : May 7 12:08:32 2025 GMT
Subject: CN=F2610932FD558039EED1784E6CF3E1F48A59D070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:8e:45:f9:09:87:e3:64:39:bf:55:25:a9:
83:5f:b6:0c:d0:81:30:eb:27:c6:26:fb:3b:53:45:
a8:c0:4c:e3:b6:51:e4:bb:26:c8:fc:14:f8:b3:b1:
88:f1:be:a9:f5:7a:c8:c8:53:52:f8:67:1f:1a:ca:
17:8a:0c:cd:1e:c6:5d:b4:a7:b4:ed:cd:0b:cd:fc:
bc:41:12:70:bb:e4:af:c0:2c:2f:b2:41:6e:b8:e2:
e1:88:3d:74:6f:b5:3d:4e:19:54:fa:59:a8:e1:91:
a6:df:33:3e:77:b7:ab:f5:26:ad:66:e6:9c:a4:45:
6c:4c:92:33:99:24:40:8e:8e:93:68:1d:ab:ae:19:
50:6e:e3:b7:00:dc:6a:c0:e3:fb:a9:8d:de:4e:1b:
a5:f6:6e:46:74:34:4d:b7:1d:92:e9:96:3f:10:eb:
36:9f:9a:82:c4:69:19:bd:7d:3e:18:6b:a0:c1:a6:
cf:2c:6c:7b:62:99:99:8a:42:ef:68:3a:72:98:3f:
37:21:0a:b7:84:63:e0:8a:aa:0c:dc:96:12:9b:47:
e0:4a:7f:7c:8e:e8:c2:15:31:c0:c1:eb:61:16:38:
ea:bd:1c:4f:3c:8f:41:41:3b:c3:ac:cf:31:86:89:
54:14:2b:65:23:5d:73:00:3a:c9:34:0d:52:7b:04:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:09:32:FD:55:80:39:EE:D1:78:4E:6C:F3:E1:F4:8A:59:D0:70
X509v3 Authority Key Identifier:
keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32332d3233203d3e20323733363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.116.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:cc:86:3a:27:59:b8:a9:b0:49:2f:e3:6e:5e:ca:09:07:46:
7c:f1:6e:b0:04:42:88:4e:2d:a9:eb:5f:d7:fe:55:c3:36:48:
47:dd:ce:b2:24:37:8d:ff:5b:5b:b2:0c:be:9e:90:68:ed:6a:
4d:71:10:b9:88:4b:c3:bb:64:bd:92:5f:8a:94:07:99:5f:3e:
5f:9c:a3:2f:6a:bf:de:29:7b:02:c9:da:95:cb:db:3c:8e:0f:
f6:8d:a1:25:ae:f5:2c:c8:46:2f:c9:ad:a1:7b:a6:49:df:fc:
a3:a3:a7:75:d0:ae:2f:12:77:7d:57:0f:db:cc:cb:49:92:d3:
69:92:4c:43:ea:f2:f3:0e:18:eb:39:7d:d7:41:d4:44:71:76:
59:a6:e7:1c:0d:c8:5e:13:6c:e2:38:6a:a8:ad:c9:70:aa:7a:
a0:25:2c:c2:91:5e:e4:b9:a5:16:1f:b5:3a:55:8f:20:f2:8e:
d6:60:19:70:fd:cf:5a:41:b3:f5:24:e9:c5:12:aa:2f:a7:fb:
80:ea:32:14:4d:61:93:de:6f:bb:8a:68:5f:df:15:d0:30:e9:
d5:cf:f4:36:43:33:26:09:98:f9:f9:c1:0d:e6:3e:eb:f7:ff:
b5:57:20:d1:4f:a7:5c:4a:83:51:87:14:e3:d5:eb:55:ec:48:
b8:29:8c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:17 2025 by rpki-client