Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/3137302e3234352e31362e302f32322d3232203d3e20323633393931.roa
File: 3137302e3234352e31362e302f32322d3232203d3e20323633393931.roa (raw, json)
Hash identifier: xphoa+sGaXPvdQnEkuvMAf7AnyjmRr2V/ad8sL0H4Wg=
Subject key identifier: 9E:F2:5D:B7:E6:2B:33:89:17:36:7E:20:A1:FC:02:DB:CB:10:B2:21
Certificate issuer: /CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
Certificate serial: 251EDD3B379C291FFF12FD04BDDE56F1BD7B972E
Authority key identifier: 97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/3137302e3234352e31362e302f32322d3232203d3e20323633393931.roa
Signing time: Thu 25 Apr 2024 19:52:21 +0000
ROA not before: Thu 25 Apr 2024 19:47:21 +0000
ROA not after: Thu 24 Apr 2025 19:52:21 +0000
asID: 263991
IP address blocks: 170.245.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 04 Jun 2024 17:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:1e:dd:3b:37:9c:29:1f:ff:12:fd:04:bd:de:56:f1:bd:7b:97:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
Validity
Not Before: Apr 25 19:47:21 2024 GMT
Not After : Apr 24 19:52:21 2025 GMT
Subject: CN=9EF25DB7E62B338917367E20A1FC02DBCB10B221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:d8:fe:09:6b:af:a0:8e:09:38:f4:b9:e9:
c9:36:94:3c:7c:3f:ed:6f:4f:bc:38:a3:d3:2d:6d:
a4:af:ae:8d:53:0e:32:9c:a1:27:d4:cb:29:61:11:
78:0a:36:a8:29:c1:94:48:d1:29:0b:61:79:d8:56:
d0:51:41:4b:1f:70:11:15:62:80:c5:16:38:ba:9c:
42:68:97:09:9e:98:0a:4b:45:36:9d:10:56:dd:94:
25:bb:a3:26:49:d3:49:e5:29:3d:22:56:ea:d4:e6:
36:dd:b7:a1:1b:38:30:bb:bd:17:9e:9d:8e:be:2c:
ff:a5:58:0e:7a:f9:6f:f3:2c:1a:eb:2a:ac:80:95:
6e:a1:91:e5:dc:4e:b2:40:39:7a:c1:f8:eb:68:9f:
85:6c:28:a2:1f:57:ba:dc:b8:74:7f:8d:38:8c:c5:
c5:70:23:a8:93:07:fe:05:96:de:69:e5:d0:72:0b:
bf:37:cc:87:fa:77:8f:93:cb:e1:3d:30:f4:03:aa:
57:79:48:0e:a8:0f:6d:3a:56:94:5c:f4:21:10:61:
09:9a:f4:66:85:17:ff:b8:7b:ca:2f:b6:49:81:7f:
01:c2:6b:f5:ff:10:9b:39:38:5a:50:30:1d:01:21:
e6:e2:a8:4f:05:10:c1:d1:94:b6:e8:df:1c:fd:34:
c1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F2:5D:B7:E6:2B:33:89:17:36:7E:20:A1:FC:02:DB:CB:10:B2:21
X509v3 Authority Key Identifier:
keyid:97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/3137302e3234352e31362e302f32322d3232203d3e20323633393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:76:de:cf:04:2b:bb:22:67:e0:ae:c2:50:50:6b:87:4a:9f:
1c:11:6f:8f:3e:2f:a6:f5:d3:a9:49:99:b9:d8:14:2d:16:4a:
fc:7c:56:ca:5d:bb:17:e1:85:a3:69:c4:e7:9a:29:4b:d0:bc:
89:0d:e6:be:56:41:ba:a9:3b:bf:e5:ed:94:83:e0:0a:b8:8f:
3f:23:e8:43:b4:d3:09:ef:95:1d:a2:a0:88:4f:b4:c1:d3:4b:
79:9a:c3:d0:ab:d6:22:a0:9f:66:27:f9:77:c2:30:bf:1e:fd:
85:5e:06:c7:c7:c9:37:9a:4d:33:8c:e9:93:5b:ad:0e:18:78:
fd:3f:7a:68:46:e4:85:3e:df:26:d8:55:0d:9e:bc:04:fe:96:
44:98:78:f7:eb:ba:0b:b4:22:e4:70:4e:b4:c8:39:7e:da:93:
11:96:0e:aa:e1:e9:0b:a2:a3:01:c4:7e:34:ba:08:23:eb:b2:
e1:c1:56:20:8f:a4:b1:0f:21:43:1c:e1:80:84:f8:09:c0:05:
1a:1c:eb:8f:14:e5:d0:92:34:ac:05:06:3b:70:a1:7c:ae:47:
9d:70:e0:42:9f:c0:05:09:cc:b5:5d:a6:29:21:cd:7a:31:ec:
69:63:0d:fd:75:2c:df:59:58:d4:9f:6f:37:eb:fa:5a:56:cb:
13:04:83:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:50:17 2025 by rpki-client