Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3138362e3139352e3136302e302f32342d3234203d3e20323634343936.roa
File: 3138362e3139352e3136302e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier: /rNxHL2ZrCZupCuJabGFIAb64sep9bH+WNptJ/URA6Q=
Subject key identifier: 0D:7C:B4:DA:AE:99:6B:F6:4F:DF:64:87:59:EC:1D:8E:39:B9:45:65
Certificate issuer: /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial: 6E7412BD9AD28BB4B8CE050C4F24D1C6AE654887
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3138362e3139352e3136302e302f32342d3234203d3e20323634343936.roa
Signing time: Tue 25 Feb 2025 10:18:10 +0000
ROA not before: Tue 25 Feb 2025 10:13:10 +0000
ROA not after: Tue 24 Feb 2026 10:18:10 +0000
asID: 264496
IP address blocks: 186.195.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 14:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:74:12:bd:9a:d2:8b:b4:b8:ce:05:0c:4f:24:d1:c6:ae:65:48:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Validity
Not Before: Feb 25 10:13:10 2025 GMT
Not After : Feb 24 10:18:10 2026 GMT
Subject: CN=0D7CB4DAAE996BF64FDF648759EC1D8E39B94565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:93:2f:26:cf:38:44:cf:24:f1:64:57:62:02:
5d:fe:1a:3d:71:0c:01:c8:f9:cb:53:51:81:f7:f2:
5c:60:31:d6:e8:64:63:69:f4:cd:13:d7:04:0f:b8:
e7:f3:fc:09:b2:54:65:cc:53:0c:05:d7:a2:67:4f:
b4:6a:f9:57:f9:0c:0f:c8:aa:5c:48:9e:94:43:b6:
89:2c:02:bf:e2:d8:3d:b2:35:56:f3:8f:e8:42:e1:
e8:53:63:d1:a6:7b:1b:b0:b4:7f:90:1c:53:cd:da:
1d:09:7b:74:d1:ad:cb:f0:44:36:5f:b8:08:08:db:
37:90:3c:99:8c:88:43:db:52:ab:7c:83:f0:e5:a8:
27:e4:a3:8b:98:ff:9a:a3:97:4a:5c:55:85:0a:7c:
48:37:6a:66:39:87:82:6b:39:b5:37:d3:47:ce:ec:
6c:73:b3:4f:c8:f1:16:55:67:a1:ca:e8:a9:97:a4:
71:ca:d2:f9:53:1f:98:12:d2:0b:52:ab:bc:c0:2d:
4d:ce:17:18:6a:8a:b7:53:5d:2b:4f:c6:4e:9a:82:
62:22:09:18:e6:81:db:b5:14:d9:31:39:cb:cc:5f:
1e:45:55:1a:d6:8c:dd:d0:23:28:e5:dc:07:b6:93:
5e:03:33:bb:0c:0f:3b:16:49:54:7a:56:7b:0d:60:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7C:B4:DA:AE:99:6B:F6:4F:DF:64:87:59:EC:1D:8E:39:B9:45:65
X509v3 Authority Key Identifier:
keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3138362e3139352e3136302e302f32342d3234203d3e20323634343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.195.160.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a4:d3:7a:3b:fc:f8:0a:a5:75:23:a0:bf:0b:03:dc:d9:56:
b9:cc:4c:84:70:a2:c9:8b:da:2d:cd:f0:7a:e0:d2:7c:44:7b:
10:86:2d:f2:1c:60:6b:9e:78:80:07:cb:d4:83:69:e0:3a:e2:
23:85:93:4a:05:b9:8e:20:6f:5b:bf:f0:86:d7:bb:0b:bf:2e:
13:3e:f6:20:94:79:4d:e5:52:7c:bb:a6:6b:ca:1b:d8:5b:c7:
62:bf:16:8c:bd:62:f7:8f:49:10:d2:fe:43:1e:a3:1b:f5:66:
6a:1c:12:ee:4a:15:12:9b:39:52:fa:9e:5b:51:bf:58:fe:47:
97:41:cc:cd:78:ef:a4:19:88:a7:e1:fb:0d:5a:ca:67:d9:22:
2f:fb:bb:7c:eb:9b:28:7f:af:e8:ee:d4:fb:b8:a5:d6:1a:5a:
c9:0c:98:86:f8:7b:c6:ff:59:18:93:8e:82:b5:49:32:ff:0f:
8d:31:fc:2a:7d:51:9f:9b:ce:22:3e:15:0a:2a:eb:59:29:ed:
6b:2d:37:6f:58:d7:4d:2a:47:92:26:72:3f:3c:f2:7a:66:c8:
9f:35:f4:f9:47:71:b6:47:30:1f:c9:8e:0d:a5:a2:7f:4c:df:
d6:f2:d6:d2:41:80:c0:88:46:51:57:0e:20:38:a0:41:17:de:
5e:63:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:52:42 2025 by rpki-client