![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37342e302f32342d3234203d3e20323731323338.roa
File: 3139302e3137312e37342e302f32342d3234203d3e20323731323338.roa (raw, json)
Hash identifier: xT5zx7fr1hsXH8k4VfOcIGdQTgJ7klIuLqk0McVhsvw=
Subject key identifier: 00:C1:4C:D5:01:F0:03:2D:C0:BA:B5:39:09:C7:A6:8A:F1:DE:F9:22
Certificate issuer: /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
Certificate serial: 1AC6769D4C58C4E2CCE1141A1E55E8E4703DF68D
Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37342e302f32342d3234203d3e20323731323338.roa
Signing time: Wed 24 Apr 2024 14:35:25 +0000
ROA not before: Wed 24 Apr 2024 14:30:25 +0000
ROA not after: Wed 23 Apr 2025 14:35:25 +0000
asID: 271238
IP address blocks: 190.171.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 22:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c6:76:9d:4c:58:c4:e2:cc:e1:14:1a:1e:55:e8:e4:70:3d:f6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
Validity
Not Before: Apr 24 14:30:25 2024 GMT
Not After : Apr 23 14:35:25 2025 GMT
Subject: CN=00C14CD501F0032DC0BAB53909C7A68AF1DEF922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:83:ee:68:87:6a:05:14:de:6f:36:c4:b0:
5d:e7:59:a0:c5:19:78:81:12:bd:fa:4e:b9:fb:e6:
89:16:20:7c:2a:59:12:2c:7f:9f:b7:b6:7c:3e:71:
7e:6e:35:7b:d5:f0:5a:a8:58:e3:c9:b0:5b:4e:1e:
12:cd:28:38:d4:b6:78:f9:7b:c3:4c:7f:0e:a4:b0:
47:56:56:83:03:95:e8:2e:3d:21:2b:e9:29:f2:69:
75:71:f9:dc:b6:4f:3a:ed:d6:be:7b:57:08:c5:8d:
91:2e:8e:72:59:c1:24:e8:8e:6e:9c:1c:0c:9a:e6:
db:4d:8d:7d:7b:f7:f8:b2:0a:48:8c:c4:3f:fd:db:
b5:62:9a:a5:57:7f:0f:de:7f:99:17:61:4f:f4:07:
b5:e4:fe:b2:ef:6d:73:51:45:69:82:50:79:c3:17:
23:7b:ea:fa:4a:d8:c2:28:fb:0c:d8:03:e0:d8:43:
ad:09:c6:7b:e6:70:63:cf:ac:98:cb:95:1a:3a:e0:
7c:0c:6a:2d:87:f4:fd:a2:49:c2:c0:3c:47:a9:08:
1e:4a:fa:9e:9d:f7:64:e8:c6:b2:4b:46:d2:b4:2c:
0d:c3:dd:7c:3d:5c:a5:95:c5:48:c0:b0:84:d7:57:
03:1b:3b:8d:a2:f2:34:df:48:0a:72:d6:b3:98:13:
b0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C1:4C:D5:01:F0:03:2D:C0:BA:B5:39:09:C7:A6:8A:F1:DE:F9:22
X509v3 Authority Key Identifier:
keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37342e302f32342d3234203d3e20323731323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.171.74.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:2d:7f:e5:2c:95:4e:72:f4:d8:f6:cc:43:09:54:56:52:e6:
10:d8:48:5d:11:60:f0:6f:c1:0c:ff:7c:59:1c:56:8e:c3:1f:
53:82:35:e7:1b:a9:26:b6:02:b5:31:46:b5:e2:25:6d:fd:db:
74:9c:4f:cf:15:ce:4d:10:20:c0:e9:2b:3e:82:d6:df:ab:e0:
d7:2d:a5:14:7c:a2:6b:ce:29:02:50:7d:f8:02:70:e8:c3:52:
d1:97:c8:2c:28:1e:7e:b9:9f:23:ab:d5:bd:8e:3e:89:02:ce:
85:70:4c:fc:7f:d0:44:ec:0d:d5:ac:4a:8b:2a:99:5f:d9:23:
23:09:12:87:00:96:68:41:c0:aa:d4:b2:2f:95:5a:a0:e2:11:
00:b5:9b:7f:63:3b:d3:b9:c5:78:00:11:ed:e4:d4:36:cc:fe:
37:82:99:1c:ed:ec:9e:bc:48:94:97:c5:6b:22:a7:ab:2f:3a:
95:f3:41:74:2e:8e:c8:76:bb:28:e2:e6:ce:4e:84:59:f7:76:
dc:b6:a2:40:03:05:65:20:1c:08:f6:9b:55:09:9c:82:28:71:
ac:ae:c4:1a:6a:b7:e0:2f:57:6b:66:c5:a4:cf:1a:de:25:80:
6d:36:cd:c3:2d:ee:70:13:a2:88:f8:8b:80:53:79:f4:a9:e0:
52:f5:95:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:06 2025 by rpki-client