Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3137372e3232332e33322e302f32302d3234203d3e203238323636.roa
File: 3137372e3232332e33322e302f32302d3234203d3e203238323636.roa (raw, json)
Hash identifier: O7POYAwRZi5/dEOdbcFHYXyPKmseEyR+SdPlnx9br0c=
Subject key identifier: 40:A3:01:B1:B1:F7:27:62:4D:EB:EB:EA:B8:53:43:01:06:45:70:8B
Certificate issuer: /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial: 2177A0F439F00F0E089361E25964DD429D32C1CB
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3137372e3232332e33322e302f32302d3234203d3e203238323636.roa
Signing time: Mon 27 May 2024 18:18:10 +0000
ROA not before: Mon 27 May 2024 18:13:10 +0000
ROA not after: Mon 26 May 2025 18:18:10 +0000
asID: 28266
IP address blocks: 177.223.32.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 01:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:77:a0:f4:39:f0:0f:0e:08:93:61:e2:59:64:dd:42:9d:32:c1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Validity
Not Before: May 27 18:13:10 2024 GMT
Not After : May 26 18:18:10 2025 GMT
Subject: CN=40A301B1B1F727624DEBEBEAB85343010645708B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:60:91:e9:f4:65:36:30:d5:ee:ae:98:17:
a3:47:80:ed:b1:cc:a2:30:72:b8:33:88:fd:4a:7e:
db:c8:73:ac:ae:30:20:de:d5:63:74:e0:62:ca:02:
f4:83:61:a2:dc:03:34:ac:c7:db:3e:f1:a5:55:42:
b7:04:04:50:99:21:a4:c1:84:99:f1:f0:c9:68:fb:
91:8b:3f:40:2d:eb:04:67:69:a9:1e:de:35:b7:ef:
57:62:c2:4b:3f:07:d8:02:46:7a:f1:9b:80:f2:e6:
b7:3c:3c:cb:40:0b:d6:f7:cc:db:00:f7:43:44:ef:
1f:4c:60:05:78:ff:51:59:0a:dc:76:bd:a9:d1:6b:
74:2f:b8:78:f7:97:a6:a4:73:7e:1e:e1:05:23:b2:
e5:49:0f:63:3e:14:55:a9:c2:69:50:fb:9b:4e:53:
69:4f:bd:0a:64:25:48:52:cc:27:bc:71:4b:9a:78:
4d:8a:99:e7:39:eb:97:3a:01:d1:1e:cb:14:31:67:
12:9a:b2:17:63:7e:29:a1:5e:0e:08:c4:2b:7b:7e:
2c:9f:d4:fd:8d:4b:ac:1a:6d:7a:9b:0d:21:08:eb:
c3:4f:8c:51:18:c2:cd:31:ae:c3:c9:e3:fa:25:27:
eb:e9:0a:eb:fa:d7:58:12:b0:e8:7f:14:6e:04:05:
2b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A3:01:B1:B1:F7:27:62:4D:EB:EB:EA:B8:53:43:01:06:45:70:8B
X509v3 Authority Key Identifier:
keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3137372e3232332e33322e302f32302d3234203d3e203238323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.223.32.0/20
Signature Algorithm: sha256WithRSAEncryption
17:55:98:d9:d3:d1:4d:9f:86:b9:7e:35:cf:69:eb:1a:ce:28:
d6:24:a4:23:c6:e6:82:23:62:b0:c5:71:10:ba:2a:bb:49:00:
0d:fd:25:b6:04:13:0a:da:20:db:f5:31:ac:4b:03:9f:78:67:
e5:4d:32:07:64:77:79:4d:e5:34:16:6e:05:ac:94:dd:43:03:
d8:14:2c:9a:50:7a:24:5a:53:30:f9:b2:39:8e:58:90:73:86:
0c:94:36:52:2c:e5:9d:39:34:f6:21:00:83:d6:7f:78:d3:2e:
78:8d:3d:f3:5a:81:c7:20:75:4e:36:6f:71:b8:74:7a:85:38:
e7:bd:22:e3:6d:7d:1b:f7:c5:6e:be:75:bf:21:2a:58:a2:05:
e3:e4:a7:45:e9:bf:7b:64:1d:ea:5a:38:01:1e:2c:62:60:39:
0b:4c:33:e1:85:a9:38:91:82:52:01:a4:53:5a:ff:22:18:23:
a0:32:e9:9f:52:77:1a:86:41:b0:ab:80:64:30:56:fb:f6:0e:
c8:5a:bd:cc:a0:33:1d:b2:22:f8:5c:2c:85:77:8f:3d:a4:b7:
0a:a6:b8:5c:99:39:b8:9b:b1:1f:36:a9:bd:16:f4:54:da:a5:
72:7c:cc:64:70:44:36:14:46:ee:83:88:55:bd:cc:6d:cc:17:
7e:3f:5c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:52 2025 by rpki-client