Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa
File: 3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa (raw, json)
Hash identifier: kqLzHuG/s8RtXiqE2bFR1GiHjB806/TjKpktOGkISF8=
Subject key identifier: 56:E0:0D:F2:40:3D:A0:4C:74:4D:3A:09:37:A3:F5:D1:13:54:B4:56
Certificate issuer: /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial: 7AE7FEC7484AA4B667EB6E86E1139EE6ABBD4091
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa
Signing time: Mon 09 Dec 2024 12:27:34 +0000
ROA not before: Mon 09 Dec 2024 12:22:34 +0000
ROA not after: Mon 08 Dec 2025 12:27:34 +0000
asID: 263518
IP address blocks: 168.197.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 24 Dec 2024 13:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e7:fe:c7:48:4a:a4:b6:67:eb:6e:86:e1:13:9e:e6:ab:bd:40:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Validity
Not Before: Dec 9 12:22:34 2024 GMT
Not After : Dec 8 12:27:34 2025 GMT
Subject: CN=56E00DF2403DA04C744D3A0937A3F5D11354B456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:5a:92:3e:07:02:7d:db:63:88:84:45:f5:
86:18:fa:c3:5f:9e:fa:84:a5:2e:91:58:ed:38:8c:
fe:24:eb:7c:b2:d8:e2:6d:62:55:47:8b:73:01:78:
d6:51:2b:ae:ef:9b:17:2a:59:87:57:e4:f6:09:6f:
e9:d7:44:72:db:48:7c:d4:23:49:b8:0a:70:91:f1:
78:7d:0b:ac:e5:bc:78:71:fb:9e:69:d4:e3:9c:78:
6d:d1:8a:ec:5f:e1:50:d1:c0:b3:2d:13:82:f1:99:
e9:9e:b2:5c:cf:54:23:2e:9a:99:2f:b8:e2:04:9b:
1f:7f:8a:35:e1:13:c4:ed:5b:2e:be:3f:03:76:9e:
15:f8:93:95:9d:b8:6e:5b:d6:48:d1:d4:99:0f:5e:
37:75:65:98:1a:0f:5b:03:72:67:d9:ff:11:87:bb:
b9:eb:46:71:27:d3:5a:c9:fe:a1:3b:cb:27:d6:89:
8d:91:12:49:8a:f2:6b:39:bb:3a:89:2f:c5:71:a2:
a6:82:d4:cc:77:0d:6a:1f:a9:84:e4:66:f6:92:7e:
dc:2b:12:a1:c9:c7:00:d3:c2:a0:49:1b:8c:b7:6e:
59:5c:c7:b6:87:3b:cb:54:73:3a:80:e3:b8:70:ab:
35:12:37:d7:69:93:b1:65:1f:7c:9e:1b:52:f5:cd:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E0:0D:F2:40:3D:A0:4C:74:4D:3A:09:37:A3:F5:D1:13:54:B4:56
X509v3 Authority Key Identifier:
keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.84.0/22
Signature Algorithm: sha256WithRSAEncryption
59:d9:95:89:ed:51:12:8f:2f:6b:5a:bb:8f:db:e4:c3:35:84:
8f:4e:8a:45:89:a0:75:ef:da:63:21:48:59:bb:97:86:55:b8:
95:c4:2a:f5:ea:10:ff:bd:aa:8e:d6:7c:ab:40:6f:44:59:0f:
e6:87:82:ca:f0:f6:91:2a:d4:52:54:3c:1d:95:8a:6e:b0:92:
d0:08:18:f3:42:8d:51:ce:ca:14:d1:da:15:1c:33:e8:62:07:
4f:5c:33:bb:d8:5f:1f:ba:54:bd:19:1b:fc:84:c0:80:02:79:
1d:c9:d6:5b:52:f6:41:f3:5b:81:bd:5d:7c:c3:ac:84:13:4c:
9b:af:20:b0:0c:d9:52:4d:d1:76:68:c8:3b:e8:48:05:0e:ca:
73:f5:9a:c3:0a:40:da:33:a4:fd:19:65:f3:8d:32:ad:45:c3:
14:aa:07:6b:64:2b:44:bb:27:2c:ec:7e:04:31:60:28:ff:4b:
3c:3a:e0:aa:75:b9:e1:65:be:ad:fb:8c:0d:70:09:02:1d:f3:
2d:86:01:c5:ce:6f:8c:d4:98:96:f5:cf:7e:ca:d5:13:47:88:
a1:fc:d9:44:d6:84:3c:05:9d:bd:87:b3:93:b7:0f:4a:82:91:
3f:40:da:a5:a6:07:47:e9:da:00:03:f4:54:55:44:36:35:f7:
05:b6:c0:51
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeuf+x0hKpLZn626G4ROe5qu9QJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNDEyMDkxMjIyMzRaFw0yNTEyMDgxMjI3MzRaMDMxMTAvBgNV
BAMTKDU2RTAwREYyNDAzREEwNEM3NDREM0EwOTM3QTNGNUQxMTM1NEI0NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RFqSPgcCfdtjiIRF9YYY+sNf
nvqEpS6RWO04jP4k63yy2OJtYlVHi3MBeNZRK67vmxcqWYdX5PYJb+nXRHLbSHzU
I0m4CnCR8Xh9C6zlvHhx+55p1OOceG3Riuxf4VDRwLMtE4LxmemeslzPVCMumpkv
uOIEmx9/ijXhE8TtWy6+PwN2nhX4k5WduG5b1kjR1JkPXjd1ZZgaD1sDcmfZ/xGH
u7nrRnEn01rJ/qE7yyfWiY2REkmK8ms5uzqJL8VxoqaC1Mx3DWofqYTkZvaSftwr
EqHJxwDTwqBJG4y3bllcx7aHO8tUczqA47hwqzUSN9dpk7FlH3yeG1L1zSYHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVuAN8kA9oEx0TToJN6P10RNUtFYwHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzEzNjM4MmUzMTM5MzcyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxVQwDQYJKoZIhvcNAQELBQADggEBAFnZlYnt
URKPL2tau4/b5MM1hI9OikWJoHXv2mMhSFm7l4ZVuJXEKvXqEP+9qo7WfKtAb0RZ
D+aHgsrw9pEq1FJUPB2Vim6wktAIGPNCjVHOyhTR2hUcM+hiB09cM7vYXx+6VL0Z
G/yEwIACeR3J1ltS9kHzW4G9XXzDrIQTTJuvILAM2VJN0XZoyDvoSAUOynP1msMK
QNozpP0ZZfONMq1FwxSqB2tkK0S7JyzsfgQxYCj/Szw64Kp1ueFlvq37jA1wCQId
8y2GAcXOb4zUmJb1z37K1RNHiKH82UTWhDwFnb2Hs5O3D0qCkT9A2qWmB0fp2gAD
9FRVRDY19wW2wFE=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:54 2025 by rpki-client