Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32332d3233203d3e203532373538.roa
File: 3230312e3133312e3234302e302f32332d3233203d3e203532373538.roa (raw, json)
Hash identifier: xFY6HbIVBZomjlmUCmYOj2kLrZR5HZkFV1P17WF6zos=
Subject key identifier: 2C:D8:50:24:BD:DE:8A:92:B0:42:CB:3E:38:87:79:61:2D:C3:F0:D1
Certificate issuer: /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial: 6CA26BE191F404C4ED7A75221DFD829243F6423C
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32332d3233203d3e203532373538.roa
Signing time: Fri 07 Mar 2025 14:41:01 +0000
ROA not before: Fri 07 Mar 2025 14:36:01 +0000
ROA not after: Fri 06 Mar 2026 14:41:01 +0000
asID: 52758
IP address blocks: 201.131.240.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 13 Mar 2025 16:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a2:6b:e1:91:f4:04:c4:ed:7a:75:22:1d:fd:82:92:43:f6:42:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Validity
Not Before: Mar 7 14:36:01 2025 GMT
Not After : Mar 6 14:41:01 2026 GMT
Subject: CN=2CD85024BDDE8A92B042CB3E388779612DC3F0D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:db:b5:59:ca:ee:91:69:b3:4e:38:bc:1e:
28:73:51:90:44:8f:89:9b:72:ba:f9:88:19:f8:cd:
2e:f9:dd:82:1f:3a:ae:9c:1a:dd:c7:ed:55:aa:67:
74:32:01:a1:46:c1:f1:08:3f:6b:0e:4f:1c:4e:49:
e9:c9:0c:43:8c:de:08:fd:f8:95:30:17:80:91:ff:
42:a1:a1:8b:a4:d4:f0:9c:db:17:12:71:b9:50:d0:
b9:ab:ed:10:07:2f:3c:56:7f:bd:5c:15:a7:66:91:
cb:6e:67:f1:11:c7:63:72:e7:c6:be:74:e6:53:45:
57:16:29:2d:ff:7c:c2:c3:a5:ee:d0:91:5e:38:d5:
77:25:c0:74:42:64:ab:6b:82:d7:53:07:52:15:f5:
dd:17:e5:76:bf:57:0e:da:9d:81:19:27:6c:4d:08:
56:97:7d:82:bc:e6:8e:fb:90:c0:dc:de:54:f2:ef:
72:70:ee:41:9f:55:09:d1:07:69:26:ce:68:2f:da:
00:af:3c:af:1e:72:32:e8:57:d2:d3:14:f7:81:fe:
d1:78:c9:98:c3:e1:57:ba:a6:aa:c3:30:0b:35:ff:
da:ec:68:b3:fa:b5:f9:3b:1c:8e:93:63:6f:a7:87:
52:b4:3a:17:5a:d4:c6:75:dc:a7:74:fd:6e:51:bb:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D8:50:24:BD:DE:8A:92:B0:42:CB:3E:38:87:79:61:2D:C3:F0:D1
X509v3 Authority Key Identifier:
keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32332d3233203d3e203532373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.240.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:9c:97:5a:96:5e:0b:57:85:89:90:29:3e:77:d8:cf:86:88:
d4:b6:c1:1c:19:c4:8a:bd:38:f5:c9:15:b8:3f:fe:45:c3:3b:
c1:ff:ec:78:d0:8a:ef:78:48:e4:01:b9:60:c3:d0:54:bc:d0:
c4:3f:a5:f3:0a:f7:ba:66:fc:7d:c2:7a:44:27:20:f4:31:0b:
2e:84:b1:e9:1f:2a:8a:77:d6:f0:61:be:a5:ce:05:e5:37:ab:
99:5d:59:b9:99:36:74:96:ac:51:5c:25:b2:52:7e:e5:bd:26:
d3:20:f1:a5:36:26:f4:36:af:82:a9:55:5b:46:27:ab:92:06:
cb:62:7d:fe:66:2b:73:3e:a2:24:0c:e2:2a:7a:9d:05:7c:cd:
4f:71:4e:c2:b6:22:21:ca:ff:22:00:79:2b:ca:d9:3c:9b:d3:
08:43:2d:d9:be:b7:d1:c7:ca:be:b4:d8:77:4f:ce:49:08:50:
a9:50:9b:27:45:83:28:17:e7:e5:ff:25:27:cd:06:81:07:68:
be:b8:41:3f:93:2d:43:59:03:a1:1f:85:df:6a:ff:ce:4a:ae:
3d:25:2d:57:35:86:13:1f:7e:fa:1d:7f:10:ce:df:14:f9:b8:
7e:de:d3:b1:c9:d7:0b:f4:4c:b6:a4:95:95:e9:a4:c2:8a:19:
6e:ea:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:03:28 2025 by rpki-client