Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32332d3233203d3e20323632353835.roa
File: 3230312e35352e3136302e302f32332d3233203d3e20323632353835.roa (raw, json)
Hash identifier: oDLyX/u5P4uw9H3VmD0tyY5jbxasqaJy7F+Dv3cBrKI=
Subject key identifier: E3:FD:95:F8:72:1E:1F:2F:0B:3D:A3:1C:49:25:85:76:76:1B:7E:C6
Certificate issuer: /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial: 35E7BA5BB1E957EFB87B2906EB05F7A3A95A14F9
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32332d3233203d3e20323632353835.roa
Signing time: Fri 29 Nov 2024 20:41:23 +0000
ROA not before: Fri 29 Nov 2024 20:36:23 +0000
ROA not after: Fri 28 Nov 2025 20:41:23 +0000
asID: 262585
IP address blocks: 201.55.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 27 Mar 2025 10:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e7:ba:5b:b1:e9:57:ef:b8:7b:29:06:eb:05:f7:a3:a9:5a:14:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Validity
Not Before: Nov 29 20:36:23 2024 GMT
Not After : Nov 28 20:41:23 2025 GMT
Subject: CN=E3FD95F8721E1F2F0B3DA31C49258576761B7EC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:12:16:c8:e9:0d:5d:9d:a5:7a:0c:30:52:
bd:e0:f1:17:95:08:20:d0:3d:db:cb:32:b1:1d:72:
de:dc:7a:1f:e1:7f:f0:52:6b:ba:67:94:fb:31:27:
8b:d7:69:69:ec:f6:b6:33:2d:b1:b4:e6:88:ee:0b:
87:76:ab:b9:3c:4b:95:35:75:9e:87:d3:83:4c:2c:
de:8a:11:1a:6b:44:7b:84:54:16:6d:c3:6c:4e:6d:
cb:36:4c:0f:51:15:7f:95:0d:17:5a:a5:0a:dc:5e:
82:39:19:0f:1c:0c:b2:a5:d1:25:94:58:bc:df:e2:
fc:72:67:85:af:72:c4:71:b4:33:ed:90:04:7d:8b:
22:0e:c7:bb:28:84:9b:d2:d0:21:aa:71:c0:9e:78:
37:32:08:7b:77:62:fb:04:22:d1:6c:e9:96:dd:3d:
37:d4:c4:39:3c:a6:47:40:44:e0:cb:3d:ed:67:4a:
0d:fe:32:66:72:b5:1f:bb:4c:62:ec:cf:3e:d3:35:
af:ee:7e:18:ef:dc:85:88:17:ab:cf:51:aa:b1:98:
4a:28:ef:02:c2:5e:49:35:50:c4:b2:bc:27:21:cc:
e5:47:82:5c:58:4e:0d:c6:c7:0b:f5:73:6a:a3:da:
31:0f:7f:7e:fc:8c:22:ef:15:45:22:75:6d:28:a3:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FD:95:F8:72:1E:1F:2F:0B:3D:A3:1C:49:25:85:76:76:1B:7E:C6
X509v3 Authority Key Identifier:
keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32332d3233203d3e20323632353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.55.160.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:d5:95:f7:1e:b1:21:28:3e:d8:8a:97:bc:27:95:81:a5:49:
0f:4a:95:e6:d8:1f:dd:75:ed:ff:bb:c6:ef:52:49:35:75:e9:
89:d2:e0:5f:34:de:66:de:b5:60:aa:02:75:36:4d:57:59:b8:
a4:de:89:ba:8a:33:f0:9f:7e:9e:69:5f:cb:d6:7f:16:38:64:
ee:bb:40:75:8f:f1:9a:23:92:05:1e:bb:59:a0:79:c4:f4:e3:
14:50:04:4a:44:9c:29:16:27:3a:e4:fb:59:02:1b:74:d5:8a:
63:b6:96:7c:10:f9:a2:83:d9:e9:96:85:de:14:2a:17:55:87:
f9:e2:bb:c7:5f:9e:c9:d5:2f:14:1c:e7:6f:54:40:0a:f1:98:
db:7d:56:12:e0:a3:17:96:ee:0d:93:41:5a:99:68:67:11:6b:
ec:91:28:1f:1d:30:f4:30:7b:9f:da:44:a2:1c:1a:28:4f:88:
44:6d:fe:d8:94:18:10:3d:e7:79:32:78:8c:99:92:81:9c:d7:
9e:bc:ff:6b:fe:43:2e:f7:98:e0:2e:88:6a:17:7c:79:79:ba:
85:3d:4a:ae:90:b4:01:26:3d:d5:2c:de:09:0a:08:09:f1:d1:
f7:ff:02:5b:af:96:6e:82:de:fd:74:4b:fb:40:d3:31:88:9a:
f1:09:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:36:06 2025 by rpki-client