Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/3139322e3134352e3232302e302f32322d3332203d3e20323731323936.roa
File: 3139322e3134352e3232302e302f32322d3332203d3e20323731323936.roa (raw, json)
Hash identifier: 2Z/G81mbrfBagTAIlVXkqYPDy7Jtn7Fuj904CvehtFc=
Subject key identifier: CE:D9:21:F9:27:E1:57:58:B5:50:B3:54:D8:21:10:BE:E1:8D:7C:D2
Certificate issuer: /CN=6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363
Certificate serial: 398C41C3283C0868C028824173B7EB0911B5E4CB
Authority key identifier: 6E:28:1E:13:B9:B4:E1:B6:E2:C7:5C:82:B6:D4:7A:A8:7E:9F:03:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/3139322e3134352e3232302e302f32322d3332203d3e20323731323936.roa
Signing time: Mon 06 Jan 2025 23:21:58 +0000
ROA not before: Mon 06 Jan 2025 23:16:58 +0000
ROA not after: Mon 05 Jan 2026 23:21:58 +0000
asID: 271296
IP address blocks: 192.145.220.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 27 Jan 2025 19:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:8c:41:c3:28:3c:08:68:c0:28:82:41:73:b7:eb:09:11:b5:e4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363
Validity
Not Before: Jan 6 23:16:58 2025 GMT
Not After : Jan 5 23:21:58 2026 GMT
Subject: CN=CED921F927E15758B550B354D82110BEE18D7CD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:9a:4c:f9:fd:5e:ad:ed:34:02:8e:2f:25:
b5:70:fa:e6:f5:f3:f7:0a:c3:cc:41:b6:fb:f2:ec:
e4:f4:23:41:cc:e9:13:b7:ea:96:26:31:f1:a1:0b:
94:79:ae:82:a7:d6:a1:f0:fb:e8:5f:07:97:92:b1:
77:fc:38:fb:0d:6b:4e:6e:bf:4d:15:ac:d3:88:cd:
9e:49:e2:a6:e2:30:77:8f:0d:1c:97:e1:94:eb:2e:
4a:1f:2a:80:86:c6:b3:bb:9d:68:b2:db:d2:ac:b8:
7c:27:e6:3a:7d:4a:cb:68:77:7f:e9:5f:b6:53:11:
a8:93:fa:e0:4c:14:72:99:76:de:20:23:0c:51:05:
41:59:dd:57:80:ab:cc:34:9b:ca:c2:6c:ef:83:91:
09:c9:e6:c0:67:4b:2b:1a:49:9e:da:d4:e1:80:a6:
bf:16:95:60:cf:2d:eb:7d:d8:c5:c1:04:36:af:b2:
31:ca:9f:2f:5d:7e:0c:1b:6b:30:b5:17:c0:a5:1b:
48:09:1a:e8:e3:61:f3:df:91:fb:6c:9a:cb:50:36:
13:a8:79:dc:19:7f:4f:a0:e3:0a:14:12:e8:77:4f:
03:d1:59:42:6e:9c:75:c4:79:f9:98:ed:86:88:c4:
b4:ed:6f:22:99:3c:fa:b0:64:94:82:0e:0d:cb:dc:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D9:21:F9:27:E1:57:58:B5:50:B3:54:D8:21:10:BE:E1:8D:7C:D2
X509v3 Authority Key Identifier:
keyid:6E:28:1E:13:B9:B4:E1:B6:E2:C7:5C:82:B6:D4:7A:A8:7E:9F:03:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/3139322e3134352e3232302e302f32322d3332203d3e20323731323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.220.0/22
Signature Algorithm: sha256WithRSAEncryption
11:8d:c1:b6:31:70:2a:a5:e2:a4:c1:a2:80:35:ba:ea:1f:f3:
c4:39:a9:f6:dd:9c:a0:9d:8a:21:55:25:ce:7a:c1:28:4a:c7:
ce:27:e8:df:8a:e6:fa:1e:cc:90:8b:3b:91:a9:ac:71:dc:22:
b2:f9:8e:13:84:b6:7b:25:fe:2f:e3:16:9f:af:16:89:7d:84:
97:81:99:c7:9b:cc:aa:80:aa:ab:92:ac:85:9c:6f:9f:86:ce:
9d:d0:aa:7b:06:57:20:f8:c5:b9:98:8c:60:f8:da:2b:93:5e:
67:f6:eb:3c:b7:e7:27:6f:45:8a:17:43:d9:07:55:a1:e2:29:
37:04:ad:6e:cf:6a:46:9a:19:e5:6e:e5:47:d9:90:34:e6:00:
65:68:0f:cf:7e:ad:4a:a6:70:7b:ce:97:43:f4:65:0a:3d:c1:
bf:47:05:08:05:33:57:e6:e9:df:f8:17:9a:2d:24:11:77:1f:
fc:93:eb:11:d5:db:89:20:58:fa:56:ab:b3:2e:48:63:5f:78:
1e:e2:b9:90:05:00:95:ce:94:92:3a:07:d8:87:e2:4b:5d:f9:
14:bd:06:32:25:b8:2f:a7:15:1b:17:b5:31:13:96:ac:d3:80:
73:91:75:99:09:44:19:d6:eb:e1:f2:23:57:33:f7:40:c8:7a:
26:b0:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:45:33 2025 by rpki-client