Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232342e302f32302d3234203d3e20323634383836.roa
File: 3230312e34392e3232342e302f32302d3234203d3e20323634383836.roa (raw, json)
Hash identifier: OvEC0aM/TZdpat8TSpWiWZ8eEF4GPpsbsI6GM5ZnCi4=
Subject key identifier: B0:C7:09:65:FE:10:A2:7A:3F:68:2E:4A:3B:F1:5A:CB:29:EF:39:ED
Certificate issuer: /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial: 08B63B25DBBBDF7497C914AFC440AC5781F11AF7
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232342e302f32302d3234203d3e20323634383836.roa
Signing time: Tue 09 Jul 2024 13:29:10 +0000
ROA not before: Tue 09 Jul 2024 13:24:10 +0000
ROA not after: Tue 08 Jul 2025 13:29:10 +0000
asID: 264886
IP address blocks: 201.49.224.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 20:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b6:3b:25:db:bb:df:74:97:c9:14:af:c4:40:ac:57:81:f1:1a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Validity
Not Before: Jul 9 13:24:10 2024 GMT
Not After : Jul 8 13:29:10 2025 GMT
Subject: CN=B0C70965FE10A27A3F682E4A3BF15ACB29EF39ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:9e:37:36:5d:44:60:be:4e:b5:b2:ee:ae:
87:68:c3:14:7f:b4:b2:7d:32:b3:e8:e4:13:e8:49:
e3:7f:11:39:15:bc:d1:65:b6:93:11:72:28:5b:40:
9a:b3:db:96:f6:41:4c:f7:ef:8d:e2:d8:fd:48:d7:
6a:a3:67:03:a0:fc:49:f5:b6:94:75:42:fe:99:c3:
c8:5b:db:d3:f6:2b:f5:6a:87:f7:7c:a0:80:e1:39:
b0:15:12:0e:f5:7c:98:2d:07:f6:b1:9a:fd:bb:2b:
71:33:7c:31:3c:aa:2f:57:7f:c6:0e:c3:41:6c:5b:
00:a1:e1:8a:6d:00:62:39:d4:3a:3f:6d:6b:fd:76:
aa:a3:b4:f0:a4:1c:00:12:bf:80:b0:5f:9e:3e:e8:
69:34:86:07:97:5e:e7:9a:57:2e:58:7b:9b:0c:b1:
a6:71:17:51:54:d2:7c:9d:2a:25:fc:c0:8a:c4:3d:
9b:fe:6b:c4:85:ff:26:3b:8c:fa:54:c4:55:e8:7e:
0c:7b:cb:14:73:df:16:b2:bf:eb:07:8e:2c:93:32:
c2:af:cb:66:23:aa:76:55:53:32:c6:26:28:0a:3d:
6f:c1:46:b5:1c:9b:12:31:2b:8d:e9:7b:09:92:48:
9d:f9:d0:e3:d8:9c:f5:6b:2c:e9:47:b5:c0:0d:b1:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C7:09:65:FE:10:A2:7A:3F:68:2E:4A:3B:F1:5A:CB:29:EF:39:ED
X509v3 Authority Key Identifier:
keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232342e302f32302d3234203d3e20323634383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.224.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:63:70:ba:06:3f:4c:f1:19:1c:8e:1b:b7:f6:5a:f6:07:b0:
e6:e3:3e:4c:f1:9e:a7:26:ed:0c:7b:f8:c3:d8:54:dc:96:41:
1a:bf:d2:ed:e2:25:e0:cb:04:ea:b6:f1:03:d4:89:5b:9e:da:
f8:42:cf:d3:b3:39:8e:f0:bd:00:c6:e1:a6:6d:09:e5:30:bd:
ed:d9:ae:9f:39:6f:4a:ec:dc:b7:7d:d8:ab:ee:f0:69:7c:69:
49:ae:52:45:58:90:e9:4b:f9:c4:1a:c6:28:87:74:49:d8:04:
4a:17:62:59:21:7a:6d:7c:85:e1:ef:70:39:24:34:ed:7b:60:
a7:a4:c6:3e:42:a0:fe:d7:51:97:ce:3d:95:16:b8:99:83:62:
d6:fe:52:74:2b:09:8b:04:59:fc:cf:bc:f8:e9:ef:3a:b3:10:
6d:3a:8e:b2:87:08:ad:00:ce:78:a6:be:3b:14:3a:90:6b:6b:
14:aa:af:bf:f4:7c:a6:ec:2e:ed:ed:3f:1b:2b:fc:f8:d1:7a:
85:d9:3b:f8:ac:77:ec:ac:1d:90:a9:eb:f3:5c:97:dc:88:58:
f4:fe:1b:46:7c:bd:b1:7a:69:c6:e3:11:d0:15:78:d4:39:dd:
a1:f4:c3:e6:76:5b:1d:31:52:41:f3:1d:0d:a0:f1:c1:81:6d:
df:be:7f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 21:22:00 2024 by rpki-client on console-fra.rpki-client.org