Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31302e302f32342d3234203d3e203131393231.roa
File: 3230312e34392e31302e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier: SN0P0fSkAOAUsrwVJqGN9Pc0CsCqN0pkaGC1S6YD/YM=
Subject key identifier: CE:80:D1:DC:FE:A4:62:F2:3B:5D:F5:F4:A6:6B:83:DF:0A:85:05:9D
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 124E17A220F4E1FAE7EAEBF6BB7FBEDDFBB5D590
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31302e302f32342d3234203d3e203131393231.roa
Signing time: Thu 04 Apr 2024 23:21:44 +0000
ROA not before: Thu 04 Apr 2024 23:16:44 +0000
ROA not after: Thu 03 Apr 2025 23:21:44 +0000
asID: 11921
IP address blocks: 201.49.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4e:17:a2:20:f4:e1:fa:e7:ea:eb:f6:bb:7f:be:dd:fb:b5:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Apr 4 23:16:44 2024 GMT
Not After : Apr 3 23:21:44 2025 GMT
Subject: CN=CE80D1DCFEA462F23B5DF5F4A66B83DF0A85059D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:21:9a:1c:c1:6f:6a:7a:86:e6:0e:bb:e8:
e0:a4:1f:34:bb:c8:6f:e9:d0:23:a2:f2:73:e5:59:
58:5c:70:77:8f:54:2d:06:d6:85:c1:04:a8:04:b0:
79:05:be:77:c1:23:09:48:2b:2d:41:84:e6:c4:63:
e3:39:04:61:e1:76:a2:b6:17:8a:2a:52:99:93:b8:
48:ab:87:30:c2:08:50:aa:21:2a:11:57:16:e6:49:
61:02:cb:a1:14:49:d7:1b:55:b5:34:fe:3d:7e:57:
de:c8:b8:05:9d:53:ad:9f:d1:5a:41:41:d1:54:8b:
a7:d9:9e:37:88:00:fd:2e:8f:32:20:2d:59:7e:2c:
74:38:4a:fe:0d:ae:b4:50:aa:93:17:8a:7c:f1:0a:
8d:93:6a:65:dc:a0:81:4f:0c:7a:a9:52:7c:a4:ab:
b7:87:7f:08:d3:88:b5:89:1a:a2:95:04:35:1a:53:
27:0e:08:bc:20:43:bd:c1:5f:93:5d:31:24:85:42:
6f:c0:85:b6:3b:22:61:bf:12:c7:05:27:b1:b7:ce:
19:de:84:7f:9b:cb:5a:f8:ad:41:46:0d:47:c6:8b:
ec:81:cb:e9:4d:bd:f6:65:f0:28:49:ac:c6:fe:21:
63:b1:3f:e3:5c:ca:39:9c:35:d8:47:85:6d:4f:d3:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:80:D1:DC:FE:A4:62:F2:3B:5D:F5:F4:A6:6B:83:DF:0A:85:05:9D
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31302e302f32342d3234203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b3:10:f1:19:aa:45:1c:d9:53:44:13:bc:3e:e9:fe:ab:20:
dd:60:91:38:85:b2:13:42:66:13:c5:30:c8:e1:a5:97:b7:b2:
b6:b3:96:60:3a:42:0b:c1:50:be:70:4f:e0:4f:89:6a:ff:10:
db:cc:36:cf:b5:cf:80:2a:a3:18:fe:fd:60:82:69:40:0f:f8:
1f:5a:b7:a7:b3:e5:ca:7a:d9:69:e7:40:63:c0:32:58:03:ac:
13:86:1e:1e:e2:f3:e6:c0:ba:4e:28:74:7f:5e:43:4b:6c:94:
2c:9c:2d:b4:cb:04:fd:09:1f:c6:ca:a7:df:3a:54:a4:61:2e:
dc:09:08:3e:9d:21:25:08:58:47:26:0b:a4:37:2f:4b:39:c8:
74:64:f7:a0:f5:c0:e3:77:78:44:ec:f8:31:aa:2c:ff:15:4d:
de:2b:08:55:6c:3f:1d:1f:b0:d6:89:48:44:e1:e6:8a:26:b4:
4b:98:4d:65:69:eb:43:cb:c1:b3:8a:89:10:cd:4b:8e:d3:d1:
1b:bc:55:c8:37:20:76:8b:11:5f:92:3f:10:cd:4e:8e:36:65:
b1:1b:4b:67:e1:7b:5e:d5:fd:6a:64:37:2b:d8:d9:67:30:13:
e8:30:ef:c8:bb:07:01:e3:f9:d3:08:1b:f6:15:34:ec:39:d0:
f7:4e:68:37
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEk4XoiD04frn6uv2u3++3fu11ZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA0MDQyMzE2NDRaFw0yNTA0MDMyMzIxNDRaMDMxMTAvBgNV
BAMTKENFODBEMURDRkVBNDYyRjIzQjVERjVGNEE2NkI4M0RGMEE4NTA1OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XyGaHMFvanqG5g676OCkHzS7
yG/p0COi8nPlWVhccHePVC0G1oXBBKgEsHkFvnfBIwlIKy1BhObEY+M5BGHhdqK2
F4oqUpmTuEirhzDCCFCqISoRVxbmSWECy6EUSdcbVbU0/j1+V97IuAWdU62f0VpB
QdFUi6fZnjeIAP0ujzIgLVl+LHQ4Sv4NrrRQqpMXinzxCo2TamXcoIFPDHqpUnyk
q7eHfwjTiLWJGqKVBDUaUycOCLwgQ73BX5NdMSSFQm/AhbY7ImG/EscFJ7G3zhne
hH+by1r4rUFGDUfGi+yBy+lNvfZl8ChJrMb+IWOxP+NcyjmcNdhHhW1P0/4BAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUzoDR3P6kYvI7XfX0pmuD3wqFBZ0wHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMxMmUzNDM5MmUzMTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMTM5
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMkxCjANBgkqhkiG9w0BAQsFAAOCAQEAj7MQ8RmqRRzZ
U0QTvD7p/qsg3WCROIWyE0JmE8UwyOGll7eytrOWYDpCC8FQvnBP4E+Jav8Q28w2
z7XPgCqjGP79YIJpQA/4H1q3p7PlynrZaedAY8AyWAOsE4YeHuLz5sC6Tih0f15D
S2yULJwttMsE/Qkfxsqn3zpUpGEu3AkIPp0hJQhYRyYLpDcvSznIdGT3oPXA43d4
ROz4Maos/xVN3isIVWw/HR+w1olIROHmiia0S5hNZWnrQ8vBs4qJEM1LjtPRG7xV
yDcgdosRX5I/EM1OjjZlsRtLZ+F7XtX9amQ3K9jZZzAT6DDvyLsHAeP50wgb9hU0
7DnQ905oNw==
-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org