Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234342e302f32322d3232203d3e203532373538.roa
File: 3230312e3133312e3234342e302f32322d3232203d3e203532373538.roa (raw, json)
Hash identifier: j84xT44Qu48PI7F6Awt5YPvExL6bUS5a2vU25CAYI/A=
Subject key identifier: 01:D3:99:3D:A1:75:8B:4A:25:94:53:E2:DD:AD:D7:AB:29:F3:B4:E0
Certificate issuer: /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial: 0C3DD3706AFFA4CAAD959F04A0950648099BC67C
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234342e302f32322d3232203d3e203532373538.roa
Signing time: Fri 27 Dec 2024 13:18:18 +0000
ROA not before: Fri 27 Dec 2024 13:13:18 +0000
ROA not after: Fri 26 Dec 2025 13:18:18 +0000
asID: 52758
IP address blocks: 201.131.244.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 13 Mar 2025 16:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3d:d3:70:6a:ff:a4:ca:ad:95:9f:04:a0:95:06:48:09:9b:c6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Validity
Not Before: Dec 27 13:13:18 2024 GMT
Not After : Dec 26 13:18:18 2025 GMT
Subject: CN=01D3993DA1758B4A259453E2DDADD7AB29F3B4E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:e3:1d:3c:a7:b2:33:9d:8f:7f:9e:05:da:
88:ea:a7:37:c5:c2:25:a1:22:e0:ee:e3:29:ce:a5:
22:ec:e8:bf:67:0b:52:45:17:c8:f4:15:01:e1:7a:
41:8d:2d:cb:b4:0b:62:54:2b:5a:ab:b5:4d:e9:75:
24:6c:fe:1f:ef:02:54:db:d4:dd:9e:8f:32:99:6a:
f7:23:5d:4c:2f:ca:1f:b2:11:ac:09:14:32:f1:a6:
d3:a9:16:cb:9d:56:83:c2:94:58:44:b7:67:6b:61:
53:f1:cb:a4:1b:df:28:9f:df:c6:57:62:41:5b:92:
d6:87:01:d4:64:e4:01:72:10:e6:98:bf:39:92:4d:
8a:2b:cf:27:77:dc:57:ff:a8:80:f5:e8:ff:5f:cd:
0e:58:ab:a0:bb:29:43:b7:d5:3e:82:8d:5c:b3:f4:
de:81:92:1e:a4:bf:d3:69:43:44:80:02:80:32:b7:
3d:8b:30:00:7d:f9:ad:4a:b2:fd:03:d1:95:38:bb:
d8:7e:7a:e3:e8:71:99:c4:e0:b3:e1:5d:c0:8c:00:
11:65:aa:0d:7b:75:f8:84:c6:af:f1:5e:32:07:f0:
df:f2:fd:01:ea:20:ac:49:62:f6:76:52:76:6c:63:
f4:19:f1:c4:2f:b1:54:3c:ab:67:d7:d2:29:4b:bb:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D3:99:3D:A1:75:8B:4A:25:94:53:E2:DD:AD:D7:AB:29:F3:B4:E0
X509v3 Authority Key Identifier:
keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234342e302f32322d3232203d3e203532373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.244.0/22
Signature Algorithm: sha256WithRSAEncryption
50:b3:24:c8:29:14:8b:08:f4:1d:80:2e:8e:95:9d:6f:45:54:
19:9d:f8:52:4f:a1:7c:54:50:f7:17:0f:11:24:a5:d3:80:e7:
a2:8f:af:a4:81:00:0e:c8:7a:93:01:2f:3f:72:9a:22:a7:04:
07:96:dc:a8:76:6c:a5:cf:84:83:49:6a:c6:b4:be:7c:f9:78:
ea:f8:51:68:6b:3e:ac:17:2f:69:d8:48:de:f3:12:a7:11:d2:
8e:03:77:ee:0b:b8:e6:8f:76:fe:aa:54:81:ac:51:6a:3f:e5:
73:78:c6:72:25:9f:e1:d1:04:db:32:57:49:0e:ff:14:c5:39:
aa:c8:b0:7c:33:58:4a:62:e5:ac:92:3e:bc:97:04:fb:c5:04:
74:bb:df:d7:77:83:46:51:cc:52:d7:68:87:37:05:d8:54:45:
0d:cf:de:ab:35:6d:80:ea:6c:1f:4b:5c:d5:05:5a:92:cf:37:
12:45:6c:ba:0c:a8:f8:63:80:f8:1d:12:e4:f8:9f:a5:01:6a:
0b:df:21:d4:2e:fd:e2:27:2f:64:59:ce:f8:de:06:48:a1:aa:
4c:e4:7b:2d:b3:16:7e:ec:40:0b:d0:71:b6:1e:00:47:6f:23:
83:5d:0e:3b:ec:0d:81:7b:98:07:28:bd:5e:ac:57:d1:09:cc:
75:a2:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:07:52 2025 by rpki-client