Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa
File: 3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa (raw, json)
Hash identifier: o8sUby1PXPCi8aqpRRUD0mFQojN/4E8JfZMuDaHzr+g=
Subject key identifier: 3B:1F:33:6D:8E:C7:CA:82:AC:4B:CB:42:CE:56:7D:EA:85:84:63:74
Certificate issuer: /CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
Certificate serial: 6138BCF46BB40F10FC936433B94AF61299C4B336
Authority key identifier: C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa
Signing time: Tue 02 Jul 2024 18:08:56 +0000
ROA not before: Tue 02 Jul 2024 18:03:56 +0000
ROA not after: Tue 01 Jul 2025 18:08:56 +0000
asID: 265419
IP address blocks: 168.195.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 14:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:38:bc:f4:6b:b4:0f:10:fc:93:64:33:b9:4a:f6:12:99:c4:b3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
Validity
Not Before: Jul 2 18:03:56 2024 GMT
Not After : Jul 1 18:08:56 2025 GMT
Subject: CN=3B1F336D8EC7CA82AC4BCB42CE567DEA85846374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:12:94:de:7b:19:c7:c3:89:70:89:c8:13:
81:65:ad:db:7d:6f:34:27:38:e7:d6:14:21:2a:16:
35:d5:d3:53:72:5b:55:59:cd:f3:b8:73:50:b9:c0:
88:67:05:d1:36:e2:3f:f2:e8:19:ee:37:51:22:81:
5b:8f:8b:4b:5c:01:e0:3e:42:12:25:85:26:e4:18:
74:d2:2c:b1:4c:b7:7c:5d:f6:70:83:f1:81:c4:3f:
27:3d:b2:cb:a8:af:ca:60:25:36:01:68:90:b8:07:
0d:c1:88:bb:01:50:2f:63:2e:4c:aa:59:b7:7c:36:
60:d1:48:46:2b:b5:2c:73:67:2a:f1:a4:42:e0:43:
07:2f:24:c0:79:3d:a4:c0:0f:ca:17:80:13:29:a3:
8e:ed:63:9d:f3:43:64:db:6a:7f:1d:66:27:63:e7:
62:59:60:e0:95:c6:b9:79:5d:4a:44:76:0f:70:d8:
0e:dc:f8:b1:65:ac:50:70:e3:14:40:2f:5c:9e:8f:
b1:bc:62:0a:42:fe:63:8b:f8:78:3b:41:90:77:80:
5c:d4:b5:a2:c6:fd:fe:a3:9a:83:d8:e8:e9:c6:20:
7c:ae:66:95:e5:37:2f:78:38:85:a8:ad:35:3f:60:
9a:e9:45:23:13:37:71:32:da:1e:84:8b:b9:6e:42:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1F:33:6D:8E:C7:CA:82:AC:4B:CB:42:CE:56:7D:EA:85:84:63:74
X509v3 Authority Key Identifier:
keyid:C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.23.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a0:ea:0b:ec:c7:6c:2b:b5:5b:7b:05:5e:07:51:91:1f:ca:
c8:9d:18:d6:41:db:16:02:bc:bd:30:b4:ee:24:07:92:6b:7e:
7a:94:54:4b:3e:83:6e:4e:85:de:77:a9:51:3a:95:fb:5e:1e:
3d:b8:36:27:12:4a:f0:4c:15:0b:74:b2:d0:66:6d:ad:1a:8b:
c4:6a:83:28:fc:6c:18:3c:e0:ad:fb:a8:ba:bf:8f:13:5e:ba:
88:0f:39:f5:cb:b0:da:fa:15:71:8b:a7:26:dd:7d:12:10:1a:
ef:0a:ca:39:90:a5:0f:fa:48:1f:62:76:d6:d4:ad:34:49:56:
24:de:fc:81:91:6e:13:a8:1c:9a:40:f6:23:7a:e0:37:1e:9c:
04:6a:73:0a:a3:72:4b:89:9a:f4:1f:5c:9d:a2:25:3c:86:57:
87:a1:7c:12:2c:77:2b:4f:30:5e:74:57:1b:da:5d:e7:0e:bf:
af:59:96:1d:03:f5:d1:5c:8f:c9:7f:1e:56:22:e8:fa:84:7f:
eb:74:3e:7b:10:ea:c5:75:58:62:bf:33:01:74:7b:c6:51:9e:
6b:f6:7c:df:06:a8:b9:06:72:0c:0c:40:0a:79:87:0c:94:e0:
37:30:11:ba:50:19:d9:51:cd:2a:fc:bd:a9:d2:b1:b1:df:48:
0f:82:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:45:16 2025 by rpki-client