![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135392e302f32342d3234203d3e203631383035.roa
File: 3230302e3232392e3135392e302f32342d3234203d3e203631383035.roa (raw, json)
Hash identifier: E6GJPShYqe14fA8l8uXEanoCcEXX4Gq6cCVRQL3uVds=
Subject key identifier: 31:7F:4C:CF:98:1D:6A:D9:77:30:8A:0F:13:57:D9:D6:0B:5B:E0:3A
Certificate issuer: /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial: 442101279945940B06D0042365C58F5731A6DBA0
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135392e302f32342d3234203d3e203631383035.roa
Signing time: Thu 25 Apr 2024 19:33:12 +0000
ROA not before: Thu 25 Apr 2024 19:28:12 +0000
ROA not after: Thu 24 Apr 2025 19:33:12 +0000
asID: 61805
IP address blocks: 200.229.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 18:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:21:01:27:99:45:94:0b:06:d0:04:23:65:c5:8f:57:31:a6:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Validity
Not Before: Apr 25 19:28:12 2024 GMT
Not After : Apr 24 19:33:12 2025 GMT
Subject: CN=317F4CCF981D6AD977308A0F1357D9D60B5BE03A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:a9:04:cb:c4:3c:7c:af:5a:38:a8:bb:42:
5d:61:15:d6:7f:b3:a1:49:c6:bc:e5:73:60:ab:c9:
ce:91:e9:da:10:92:9e:bd:9f:34:bf:75:91:3a:67:
e8:39:50:5a:b5:73:3a:9c:a6:49:fb:0d:93:ab:48:
29:5c:be:13:b5:a3:30:9b:91:d8:2f:4d:ca:df:d2:
aa:ba:19:10:44:01:0a:78:08:7e:b3:d9:f6:59:e7:
fc:2e:9f:0a:ad:ba:ba:cf:fb:31:8e:d3:d4:0d:97:
39:b0:8e:49:e4:0e:90:82:62:c7:13:4b:96:ec:84:
4e:b9:83:b7:c2:1c:a9:11:07:3e:55:95:29:1d:5f:
88:4d:77:28:25:39:f1:e4:01:34:bf:21:57:59:f2:
83:d7:b6:21:de:df:81:05:bc:6b:13:f6:ce:8f:49:
d8:9b:9c:9e:69:5c:71:5e:40:5c:93:8d:d5:c1:83:
27:7e:7a:fb:4f:12:45:7d:e9:76:cf:5c:5e:77:06:
1e:f1:f8:a8:ee:38:de:72:1b:0a:ca:a7:d4:c2:6d:
42:c7:ca:b4:dc:59:09:4e:dd:38:dc:6b:dd:21:9b:
44:15:f7:9e:05:bf:43:83:63:95:47:0c:81:fe:49:
9e:b9:51:b5:6a:14:01:9a:04:d8:35:30:ee:57:4c:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7F:4C:CF:98:1D:6A:D9:77:30:8A:0F:13:57:D9:D6:0B:5B:E0:3A
X509v3 Authority Key Identifier:
keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135392e302f32342d3234203d3e203631383035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.159.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:7b:b0:6a:b7:6b:2e:1e:70:59:87:85:e8:2c:41:d8:6c:28:
21:49:30:22:76:cc:96:7d:68:93:01:73:a2:05:25:43:b1:f2:
4a:a6:ce:6a:1c:a9:b8:bd:cd:dc:21:40:f0:ac:14:0a:a8:ca:
df:4c:56:79:30:6c:be:41:6e:45:a4:df:fe:a8:ac:f1:18:18:
d4:eb:e6:fc:81:13:26:2c:e8:f2:c3:d8:cc:b0:43:c9:0f:54:
69:78:96:73:3f:ab:b0:78:73:f2:aa:da:57:65:2c:b0:16:a3:
81:4d:43:9e:aa:ba:24:79:ea:24:36:6f:7a:1a:23:a9:21:76:
b1:7b:7d:31:4e:10:a6:0a:cc:86:08:0f:64:b1:34:e5:ca:dd:
7d:2f:05:72:b6:55:45:31:55:6d:72:f0:cf:16:84:85:5a:7d:
64:3c:a9:24:6b:90:f0:69:07:ee:56:62:fa:90:5b:25:68:83:
ee:c1:05:b0:08:98:54:2f:44:8a:53:fe:be:cd:d7:36:36:23:
e3:56:c1:79:1a:a8:df:bb:8c:37:7c:e2:11:37:9e:b6:b8:1c:
26:da:65:98:14:f2:28:d5:89:81:59:c1:e4:37:50:7c:6d:9c:
c4:f8:1f:21:9b:45:67:06:d8:37:65:05:44:ef:87:57:47:19:
96:23:60:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:17 2025 by rpki-client