Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234372e302f32342d3234203d3e203532373538.roa
File: 3230312e3133312e3234372e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier: 3cvnJJ3PPH9dGS+3sgKN4REEzZSwdBSn1Wtlnkipca0=
Subject key identifier: CA:2D:DC:78:39:C3:F0:5B:53:1D:D4:7F:9A:8E:AA:30:AE:B7:44:95
Certificate issuer: /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial: 7CCFC5053368D30188A6C59BE44EF8DD8BA5DBB1
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234372e302f32342d3234203d3e203532373538.roa
Signing time: Fri 07 Mar 2025 14:41:00 +0000
ROA not before: Fri 07 Mar 2025 14:36:00 +0000
ROA not after: Fri 06 Mar 2026 14:41:00 +0000
asID: 52758
IP address blocks: 201.131.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 18:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:cf:c5:05:33:68:d3:01:88:a6:c5:9b:e4:4e:f8:dd:8b:a5:db:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Validity
Not Before: Mar 7 14:36:00 2025 GMT
Not After : Mar 6 14:41:00 2026 GMT
Subject: CN=CA2DDC7839C3F05B531DD47F9A8EAA30AEB74495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:2d:d9:11:8b:2f:8e:fe:0c:17:7a:96:62:
c2:df:fd:ca:bd:54:65:0b:ad:83:92:8c:c4:7f:12:
8b:87:a7:ee:01:ea:8b:85:cb:27:03:a4:c9:a8:55:
c5:7e:92:04:dc:a4:75:1b:b5:d7:7c:0d:76:97:6a:
7c:f3:22:64:a8:07:ea:e6:09:2d:68:36:4c:78:76:
45:bf:5c:82:3a:87:bc:01:7b:4b:4e:65:cf:4c:0e:
19:07:df:af:6e:5b:5e:e0:53:45:f9:41:48:57:85:
ec:b3:1c:ba:bb:94:83:f1:0e:72:3f:6e:ab:13:2b:
d3:84:ff:b7:fe:bf:4f:79:8a:85:1f:6b:df:6b:25:
0a:a9:11:92:82:5a:86:9f:2a:56:9d:87:a7:c1:6a:
f3:10:f9:87:9b:52:77:4d:df:e9:33:0a:a5:a6:78:
b9:a4:e9:1c:88:65:10:f1:fd:47:7f:a8:85:a7:7f:
f7:f8:18:e7:f8:60:30:c4:3a:b7:cd:da:4e:40:a6:
62:1b:0c:21:31:93:e0:d2:72:a7:22:9f:eb:eb:3f:
a1:64:bf:5d:06:87:ee:cd:c9:29:1c:4e:18:44:d7:
3c:59:97:35:aa:d9:cf:67:79:f7:d7:ab:a7:66:5e:
d4:fe:51:1b:31:b6:48:bf:e4:a7:44:e9:17:fa:0f:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2D:DC:78:39:C3:F0:5B:53:1D:D4:7F:9A:8E:AA:30:AE:B7:44:95
X509v3 Authority Key Identifier:
keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234372e302f32342d3234203d3e203532373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.247.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cf:8e:24:0b:84:05:f9:7b:19:34:b2:bc:e9:34:ab:87:f5:
2f:22:f4:d7:e7:00:11:45:19:0c:eb:06:cc:e9:88:a4:33:6f:
53:0c:3f:5b:48:e1:86:34:cc:de:48:79:ad:18:2e:bc:04:1a:
60:5d:c3:64:8c:d5:87:6a:41:e7:ff:03:f3:74:d1:0e:4b:29:
69:7e:5e:6b:93:59:5b:95:13:f2:6e:6c:70:ff:48:e3:8f:00:
e0:46:e7:64:40:e8:25:91:0a:c0:84:c5:59:13:2d:5b:f5:a2:
8b:bc:3c:89:0d:55:bb:97:bb:6a:a0:0d:77:65:71:0a:ba:93:
1d:44:cc:50:8d:0f:c3:d9:ff:7d:bd:ab:70:40:71:bd:b0:8d:
18:2c:e2:69:4d:7d:8f:65:3c:2d:4d:f7:6d:3f:03:ec:df:69:
e1:68:6f:c4:b8:ec:c4:eb:b1:f6:23:a7:ce:7c:4f:64:15:bb:
11:4d:53:93:16:f5:51:51:2c:51:c5:47:a6:5f:09:dd:c0:90:
ce:4f:71:a1:7a:73:2e:ae:58:a0:a9:4c:b6:8b:cb:5f:24:83:
b4:cb:55:04:27:fe:fa:81:25:78:9a:70:6f:e9:ae:51:4b:66:
8e:9f:62:9d:b4:49:ec:c0:3e:47:cf:0d:ce:18:8c:65:c9:b6:
ef:c4:eb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:27:53 2025 by rpki-client