Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3139322e3131312e3233302e302f32342d3234203d3e203233303734.roa
File: 3139322e3131312e3233302e302f32342d3234203d3e203233303734.roa (raw, json)
Hash identifier: FjsLXyMwMCG01u0utTMKBN91dJ5nt7gLGoBpsxXOI1g=
Subject key identifier: 1A:F8:A4:95:53:57:74:4A:5D:72:6C:D0:A8:65:32:3F:65:21:3B:67
Certificate issuer: /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial: 235E26C360AEFC6F5AA427098ECD13DE90B605F8
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3139322e3131312e3233302e302f32342d3234203d3e203233303734.roa
Signing time: Wed 22 Jan 2025 14:08:36 +0000
ROA not before: Wed 22 Jan 2025 14:03:36 +0000
ROA not after: Wed 21 Jan 2026 14:08:36 +0000
asID: 23074
IP address blocks: 192.111.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Mar 2025 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5e:26:c3:60:ae:fc:6f:5a:a4:27:09:8e:cd:13:de:90:b6:05:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Validity
Not Before: Jan 22 14:03:36 2025 GMT
Not After : Jan 21 14:08:36 2026 GMT
Subject: CN=1AF8A4955357744A5D726CD0A865323F65213B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:4e:49:45:fa:46:b4:e2:d8:1d:28:79:7c:
71:67:bf:70:0c:90:bb:2a:14:ed:15:df:c2:ba:22:
ce:76:24:29:b7:95:37:d3:f5:3c:bb:67:32:cd:91:
7d:f2:8e:f4:83:c3:4b:73:80:9f:3e:b0:d4:27:ed:
7f:50:8b:1d:5f:ac:94:ee:d4:b1:7e:65:80:c6:a4:
6e:eb:90:4c:41:e4:e5:9a:3e:87:0d:3f:f6:8c:2a:
0d:7d:23:97:e0:34:ac:04:ef:e2:f8:a7:a2:f7:d8:
a6:59:d1:46:ae:32:cf:21:96:a6:b9:43:58:de:55:
f6:60:6e:c0:9b:38:1b:85:e3:1b:49:87:ac:44:45:
c5:08:0d:18:7c:63:2b:30:fe:f1:0c:15:e6:89:b3:
ad:8a:bf:96:d3:a5:c3:fb:fe:f3:b8:82:6c:57:0d:
5c:46:3c:1f:df:db:93:2c:23:05:dc:9f:31:d0:de:
be:57:d5:1d:75:1c:d3:6c:40:8e:1e:61:0a:f2:96:
38:50:8d:22:f6:d1:8c:07:74:63:5b:b5:a3:9c:2b:
0f:3a:3f:4f:88:9c:db:47:d8:50:bc:c3:e3:df:ca:
c3:f8:80:14:2f:79:0d:ac:96:1b:61:5f:f2:9d:24:
90:30:c7:c4:0a:84:d6:ee:ca:68:05:af:10:82:e9:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F8:A4:95:53:57:74:4A:5D:72:6C:D0:A8:65:32:3F:65:21:3B:67
X509v3 Authority Key Identifier:
keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3139322e3131312e3233302e302f32342d3234203d3e203233303734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.111.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:bd:f7:dc:6c:ad:5f:5d:59:e6:3e:4d:93:ad:28:18:4d:72:
9f:0d:de:28:3e:a9:60:0e:e2:6e:4c:ce:b9:25:5d:94:f5:d5:
67:bc:f3:42:ed:dc:10:2a:48:6f:05:5b:76:fe:ad:69:25:e2:
a8:e9:0a:39:e0:53:8e:32:41:77:1b:ea:90:d3:83:4f:e9:75:
ac:f6:ec:b2:a4:b6:5b:1e:01:5e:13:87:d6:b2:a3:28:b5:df:
e7:2a:bc:c4:00:47:87:07:bb:92:fb:de:64:22:ef:00:7e:8a:
7f:58:ac:59:f5:06:8d:33:7d:56:bb:07:57:6c:30:72:c5:f2:
9b:77:95:d9:1c:48:c8:55:5d:c8:30:cd:4a:18:62:50:53:71:
69:56:50:8a:5a:a4:8d:a2:b1:ea:15:c9:cc:31:6a:aa:c4:3c:
d4:31:4c:94:63:09:38:58:5a:b6:ac:66:6f:38:a3:a7:d8:35:
22:68:3f:4d:4e:f6:62:63:a3:7f:f2:e3:35:de:92:dd:ee:3b:
3c:74:bd:df:62:3f:b8:cd:d8:25:d5:27:37:81:c8:ff:41:ba:
88:d1:7b:87:27:62:2e:85:df:2e:c9:2e:50:80:31:0b:7a:58:
14:4e:b3:c1:9b:4a:c8:ae:57:a3:e5:99:c5:23:cc:43:49:ac:
c4:41:91:41
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI14mw2Cu/G9apCcJjs0T3pC2BfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDNjE0RTNGQUEyNUYzMUE1NkU5Q0YyRkVBNDc5QjFD
RjA4MDk1RDAeFw0yNTAxMjIxNDAzMzZaFw0yNjAxMjExNDA4MzZaMDMxMTAvBgNV
BAMTKDFBRjhBNDk1NTM1Nzc0NEE1RDcyNkNEMEE4NjUzMjNGNjUyMTNCNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4E5JRfpGtOLYHSh5fHFnv3AM
kLsqFO0V38K6Is52JCm3lTfT9Ty7ZzLNkX3yjvSDw0tzgJ8+sNQn7X9Qix1frJTu
1LF+ZYDGpG7rkExB5OWaPocNP/aMKg19I5fgNKwE7+L4p6L32KZZ0UauMs8hlqa5
Q1jeVfZgbsCbOBuF4xtJh6xERcUIDRh8Yysw/vEMFeaJs62Kv5bTpcP7/vO4gmxX
DVxGPB/f25MsIwXcnzHQ3r5X1R11HNNsQI4eYQryljhQjSL20YwHdGNbtaOcKw86
P0+InNtH2FC8w+PfysP4gBQveQ2slhthX/KdJJAwx8QKhNbuymgFrxCC6VbVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGviklVNXdEpdcmzQqGUyP2UhO2cwHwYDVR0j
BBgwFoAU0MYU4/qiXzGlbpzy/qR5sc8ICV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0t4ODhOZjN0TFBFcFpFSzYzUTdTa1hRU1BOYnpmdzdSSE44bUtHSmdn
MVcvMC9EMEM2MTRFM0ZBQTI1RjMxQTU2RTlDRjJGRUE0NzlCMUNGMDgwOTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQzYxNEUzRkFBMjVGMzFB
NTZFOUNGMkZFQTQ3OUIxQ0YwODA5NUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLeDg4TmYzdExQRXBaRUs2M1E3U2tYUVNQTmJ6Znc3UkhOOG1LR0pnZzFXLzAv
MzEzOTMyMmUzMTMxMzEyZTMyMzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzMzMDM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAb+YwDQYJKoZIhvcNAQELBQADggEBAIy999xs
rV9dWeY+TZOtKBhNcp8N3ig+qWAO4m5MzrklXZT11We880Lt3BAqSG8FW3b+rWkl
4qjpCjngU44yQXcb6pDTg0/pdaz27LKktlseAV4Th9ayoyi13+cqvMQAR4cHu5L7
3mQi7wB+in9YrFn1Bo0zfVa7B1dsMHLF8pt3ldkcSMhVXcgwzUoYYlBTcWlWUIpa
pI2iseoVycwxaqrEPNQxTJRjCThYWrasZm84o6fYNSJoP01O9mJjo3/y4zXekt3u
Ozx0vd9iP7jN2CXVJzeByP9BuojRe4cnYi6F3y7JLlCAMQt6WBROs8GbSsiuV6Pl
mcUjzENJrMRBkUE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 20:46:24 2025 by rpki-client