Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232382e302f32342d3234203d3e203532353332.roa
File: 3230312e34392e3232382e302f32342d3234203d3e203532353332.roa (raw, json)
Hash identifier: /lmLSqH6zet8IXQCoJaCZziYT6wp/p9VaLWFC8iQyjY=
Subject key identifier: 60:A6:15:5C:82:A3:97:5B:47:43:6F:99:91:B0:C9:5D:3D:D8:82:3D
Certificate issuer: /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial: 563BBD1B4AD446FCA0680E2A46BB76E85D6FE7F9
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232382e302f32342d3234203d3e203532353332.roa
Signing time: Mon 13 Jan 2025 14:15:30 +0000
ROA not before: Mon 13 Jan 2025 14:10:30 +0000
ROA not after: Mon 12 Jan 2026 14:15:30 +0000
asID: 52532
IP address blocks: 201.49.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 12:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:3b:bd:1b:4a:d4:46:fc:a0:68:0e:2a:46:bb:76:e8:5d:6f:e7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Validity
Not Before: Jan 13 14:10:30 2025 GMT
Not After : Jan 12 14:15:30 2026 GMT
Subject: CN=60A6155C82A3975B47436F9991B0C95D3DD8823D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:5c:e4:ec:23:d4:cf:65:b5:9e:d4:22:79:
a8:80:5f:96:39:01:6c:d4:8b:8c:52:d4:8f:1f:74:
60:5e:0b:87:c7:6b:6e:ee:7b:86:d2:58:38:76:45:
b2:61:c3:8c:c8:7d:90:1b:c1:51:a8:2e:9d:a4:1d:
9d:b2:5d:ae:0d:ec:f5:53:cc:57:72:4d:fb:f6:4e:
7d:21:b9:7f:47:5d:2e:d2:95:69:7e:2f:a2:1a:0a:
76:db:88:ae:55:c3:3d:32:b4:f0:07:e8:46:54:70:
d0:63:d3:e0:48:63:79:43:02:db:35:e8:28:e7:b5:
c6:52:2f:68:80:5a:3e:ca:1f:42:ee:16:2d:91:b2:
a3:43:f2:0c:fd:fc:26:be:95:b6:92:07:75:1d:c2:
ce:43:89:b9:5f:e2:28:d9:bb:44:18:b1:c0:79:cc:
82:89:6d:df:cc:d6:7f:40:08:57:11:f2:e5:e1:bd:
51:af:49:44:40:e4:a2:12:4f:02:3e:f2:6a:02:3b:
e4:80:b5:35:c3:42:4c:fa:95:fd:ee:32:d5:9b:75:
5e:fc:ba:7a:bf:32:fa:fd:63:a7:a5:79:ed:a7:d2:
34:96:3e:e3:b1:08:46:8a:7d:69:77:ab:62:69:b8:
ee:ca:78:2c:df:04:29:20:49:2a:e1:fe:ea:8b:6a:
19:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A6:15:5C:82:A3:97:5B:47:43:6F:99:91:B0:C9:5D:3D:D8:82:3D
X509v3 Authority Key Identifier:
keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232382e302f32342d3234203d3e203532353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.228.0/24
Signature Algorithm: sha256WithRSAEncryption
00:95:af:e8:2b:4e:b2:49:46:0a:2d:dd:3f:bf:c0:09:0f:6b:
90:0f:85:4a:f2:a2:07:ee:a9:10:a5:00:29:5f:56:3f:e0:d8:
2c:a1:52:2f:1a:db:4a:2f:a6:0d:59:13:4a:38:3d:73:c1:c9:
ff:83:e6:88:f2:27:d0:73:0f:fe:95:67:05:c5:ba:39:e6:a6:
86:2b:75:0a:03:89:13:3f:63:4a:bd:f1:56:91:fc:4a:70:d8:
ad:3a:55:5c:63:be:b6:28:1b:38:15:e5:d6:5b:c1:26:35:3e:
9f:00:fb:b0:a6:64:79:5c:ce:e6:c9:8b:56:6c:65:76:c0:b0:
de:8f:db:d2:b9:79:a6:bc:8b:f8:f7:93:84:a1:90:38:f2:aa:
dc:68:f2:2e:aa:3b:9e:58:a0:28:98:13:c2:3b:d6:ce:d9:13:
2d:df:9c:70:35:a4:c4:89:ef:83:bf:df:b7:77:3a:2f:62:78:
e5:62:73:19:5b:43:de:fe:07:b0:a5:06:40:53:0d:fe:6d:42:
7d:2e:10:4b:c7:b3:4b:0d:65:5e:47:06:78:62:bb:55:d0:62:
a4:38:25:b8:2f:1a:99:9e:22:d2:62:81:c1:f4:e8:97:1e:35:
aa:e2:50:86:e0:06:65:b6:59:ea:3f:f4:26:42:40:5d:ba:88:
c7:0c:50:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:40:54 2025 by rpki-client