![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3137302e3233312e38382e302f32322d3234203d3e203533313936.roa
File: 3137302e3233312e38382e302f32322d3234203d3e203533313936.roa (raw, json)
Hash identifier: k5yC9/XWU4pZxQJU7c48yR8NXWXoJLQVUOIRH2e7SGc=
Subject key identifier: 63:29:FD:73:58:F4:00:82:8E:D7:26:2C:93:54:83:4A:3F:1D:84:38
Certificate issuer: /CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
Certificate serial: 0F85790608BC76BA3912411ADD23167BE503B381
Authority key identifier: 05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3137302e3233312e38382e302f32322d3234203d3e203533313936.roa
Signing time: Thu 09 May 2024 13:41:00 +0000
ROA not before: Thu 09 May 2024 13:36:00 +0000
ROA not after: Thu 08 May 2025 13:41:00 +0000
asID: 53196
IP address blocks: 170.231.88.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:85:79:06:08:bc:76:ba:39:12:41:1a:dd:23:16:7b:e5:03:b3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
Validity
Not Before: May 9 13:36:00 2024 GMT
Not After : May 8 13:41:00 2025 GMT
Subject: CN=6329FD7358F400828ED7262C9354834A3F1D8438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:ca:26:d5:75:5d:76:a9:8a:01:f9:f9:06:
e4:8c:76:2e:6e:13:67:1c:96:49:11:7d:7c:5f:47:
17:21:8c:8e:6b:fe:5e:a5:0e:99:17:35:9a:d8:f8:
75:9a:12:d2:fb:9c:5b:ce:93:29:e3:82:7c:f4:86:
32:29:66:dd:b5:ba:c2:4e:56:85:24:67:85:48:97:
bb:04:2a:76:d7:a9:de:6b:20:b6:28:47:a7:8c:c8:
a1:fa:f0:d3:ad:6b:91:33:9a:d8:e9:7c:43:6b:b0:
91:28:da:24:b4:9b:08:79:04:97:bf:81:bc:33:f3:
50:10:ca:54:97:84:d1:f8:d5:96:84:a6:e9:b7:5d:
8b:8b:e5:5f:7b:47:9b:46:2e:d9:82:0b:87:b0:f7:
16:d9:65:07:aa:d2:eb:57:ce:83:c5:55:61:f3:65:
08:76:3e:31:a6:da:76:78:66:67:e5:d6:e4:02:9b:
a6:c9:b7:4a:49:d8:ba:ab:75:7c:56:ff:c2:bb:aa:
5d:c8:54:a2:4b:86:64:7a:7b:47:16:a1:c9:cc:85:
2a:24:4f:58:1d:e1:ac:20:7e:3c:a9:06:96:18:87:
09:2f:7e:36:90:a8:5f:de:d2:c8:c4:a5:4a:86:79:
fc:48:62:9e:cf:39:b0:fb:98:b8:ab:1e:bd:58:db:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:FD:73:58:F4:00:82:8E:D7:26:2C:93:54:83:4A:3F:1D:84:38
X509v3 Authority Key Identifier:
keyid:05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3137302e3233312e38382e302f32322d3234203d3e203533313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.88.0/22
Signature Algorithm: sha256WithRSAEncryption
19:fc:9e:c6:39:fa:f5:4b:d7:db:e3:c7:37:34:72:32:90:49:
bb:d1:1b:d1:06:d1:1b:fb:4a:fb:16:db:6d:7a:57:68:bd:aa:
93:bf:ba:fd:f6:78:f2:16:4f:3b:09:9f:18:71:1c:ac:e7:7b:
48:f9:04:32:92:ea:4c:56:8b:15:a0:b5:d4:9f:3e:c5:cc:0a:
72:99:00:8c:c3:be:d1:6e:d8:f7:43:9a:3b:41:9a:d3:29:a5:
a0:2d:ec:e9:89:bf:65:a5:86:31:8c:55:8f:f0:9e:d5:57:ae:
11:9e:36:40:b4:bb:08:a0:4f:8f:38:a6:fd:1f:61:61:da:3c:
e2:5f:61:8d:0e:ef:de:06:4b:51:2c:32:8a:12:23:0f:6e:d2:
bd:09:d3:84:0a:2d:c5:1e:80:1d:fe:45:7f:aa:30:01:66:fe:
9d:01:a2:c7:83:27:07:1b:76:e3:88:78:21:cc:f5:49:9c:30:
3b:0f:bf:3f:3c:78:ac:16:58:5d:cb:26:9a:16:87:b1:ef:f0:
7c:95:9d:91:94:fb:ba:a4:f9:b1:f1:af:eb:59:af:53:d7:1d:
c0:3c:8e:13:f9:3c:4c:5b:e8:6f:aa:2f:ab:e9:c5:6b:33:d0:
0f:e2:a7:92:ff:69:43:97:25:05:81:e0:e5:fa:3e:e2:43:da:
d8:0e:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:35 2025 by rpki-client