Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135362e302f32342d3332203d3e20323633343530.roa
File: 3136382e3233322e3135362e302f32342d3332203d3e20323633343530.roa (raw, json)
Hash identifier: guTcpJRLZ72nORn5ULFxq0rkGxjj6IhhSS7sUTdJwKw=
Subject key identifier: 7D:01:68:DA:7D:29:9E:25:A0:3D:D5:F7:49:FB:1B:50:93:DB:89:3B
Certificate issuer: /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial: 2C377CBFCBB9F86FDDDE8474B54DF7BF4ADFC17D
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135362e302f32342d3332203d3e20323633343530.roa
Signing time: Wed 05 Feb 2025 13:10:46 +0000
ROA not before: Wed 05 Feb 2025 13:05:46 +0000
ROA not after: Wed 04 Feb 2026 13:10:46 +0000
asID: 263450
IP address blocks: 168.232.156.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 06 Feb 2025 14:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:37:7c:bf:cb:b9:f8:6f:dd:de:84:74:b5:4d:f7:bf:4a:df:c1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Validity
Not Before: Feb 5 13:05:46 2025 GMT
Not After : Feb 4 13:10:46 2026 GMT
Subject: CN=7D0168DA7D299E25A03DD5F749FB1B5093DB893B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:e2:3e:17:ba:d3:d9:53:b5:a5:52:25:ae:
24:2e:e5:e4:02:4a:43:7a:cc:37:b6:34:fd:1f:35:
7c:35:77:1b:ed:b6:75:13:7f:bb:24:ca:d5:4c:6d:
73:40:d3:27:f1:ca:0b:f1:64:4c:fe:46:34:00:04:
33:1c:eb:bd:6b:fb:6d:b9:04:05:aa:88:95:71:34:
6c:94:45:87:1b:b5:e7:e3:ad:87:ec:55:a4:12:56:
4e:79:96:30:d2:de:ed:17:2b:ff:9c:29:86:3d:82:
92:03:cf:12:b5:a3:17:60:f8:5d:17:08:3d:21:0b:
11:a1:0d:64:6a:db:da:4f:95:7a:c3:70:fb:15:39:
a3:ea:12:e3:3b:14:89:b8:ad:17:ac:93:b3:e9:61:
63:d4:82:b4:a2:de:31:98:dd:bd:30:e1:78:1d:c6:
35:b6:61:9e:cc:fe:7b:46:9e:02:a9:61:e2:b4:42:
ae:2f:2a:05:84:ec:c7:45:1a:89:54:bb:a2:14:ca:
f3:31:a3:b3:50:b5:e8:87:83:93:8f:ef:3f:2a:50:
c7:f9:1f:4d:34:04:1b:0a:3d:75:d0:ef:03:87:5d:
ac:8e:68:18:3e:19:72:a9:40:cb:ad:11:20:db:86:
8b:5b:33:97:1a:ce:1d:cd:2e:aa:3f:41:ac:2b:95:
cb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:01:68:DA:7D:29:9E:25:A0:3D:D5:F7:49:FB:1B:50:93:DB:89:3B
X509v3 Authority Key Identifier:
keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135362e302f32342d3332203d3e20323633343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.156.0/24
Signature Algorithm: sha256WithRSAEncryption
26:05:3f:a8:96:f1:9d:63:9e:e9:52:bc:01:e0:b7:b4:c9:62:
12:b6:4d:59:9a:2e:5d:e5:b0:35:b4:80:9d:f5:fa:29:0d:f5:
52:44:4f:02:07:78:2f:30:76:40:49:19:8d:08:db:77:15:6a:
e3:88:06:15:12:3b:ca:87:ca:64:6e:b4:11:ed:8e:7a:fb:1f:
9c:7a:be:2f:42:db:e4:cc:8e:5b:61:4f:ab:aa:ed:f0:2d:9b:
4e:86:59:29:8e:66:6e:14:eb:33:a4:a0:e0:a9:a1:be:87:9e:
97:cd:ae:18:5c:d1:6c:bc:69:0c:bc:cf:15:07:f0:0d:b6:a1:
ea:af:0e:11:a5:04:94:31:cd:bb:9b:3e:1a:9a:e0:77:ea:7c:
52:ec:d8:cd:80:b3:7f:19:63:36:5e:b7:87:7c:7d:94:b9:fa:
08:6e:4a:0f:a4:d8:ac:ca:f4:53:ba:df:c8:8d:10:47:95:39:
d3:2b:33:ea:c8:46:9d:5b:f2:32:c3:1e:79:d7:c7:d3:3d:55:
52:4e:2b:1f:26:ff:01:52:08:31:2a:ab:6f:6a:29:2b:10:cd:
28:95:f7:08:0a:b0:29:91:af:e6:1f:fc:2e:3f:13:f9:4b:b1:
bf:0b:a6:82:b6:d8:52:48:c2:3a:d6:de:3a:12:95:c6:33:ef:
5f:df:e1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:14:58 2025 by rpki-client