Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233302e302f32342d3234203d3e203532353332.roa
File: 3230312e34392e3233302e302f32342d3234203d3e203532353332.roa (raw, json)
Hash identifier: Y/oyop9vnaI9G/ffOm9mRaUlYW+pfGkBvuMusSs7yV8=
Subject key identifier: 96:83:B0:5E:90:C8:7D:0D:69:64:35:49:B4:36:64:DA:28:EE:91:D2
Certificate issuer: /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial: 20F58BE9DD2E80C8AC5C99668DF2717F7072B53C
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233302e302f32342d3234203d3e203532353332.roa
Signing time: Mon 13 Jan 2025 14:15:33 +0000
ROA not before: Mon 13 Jan 2025 14:10:33 +0000
ROA not after: Mon 12 Jan 2026 14:15:33 +0000
asID: 52532
IP address blocks: 201.49.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 12:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f5:8b:e9:dd:2e:80:c8:ac:5c:99:66:8d:f2:71:7f:70:72:b5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Validity
Not Before: Jan 13 14:10:33 2025 GMT
Not After : Jan 12 14:15:33 2026 GMT
Subject: CN=9683B05E90C87D0D69643549B43664DA28EE91D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:f0:de:9f:13:36:3b:d0:94:bf:8c:25:1a:
84:b0:08:8a:03:93:ed:70:69:b2:a6:4d:e4:db:52:
25:db:db:eb:cb:57:b8:4d:d0:49:f1:2c:9b:70:90:
bd:bd:a0:6a:bc:98:d0:dd:66:be:31:a2:13:18:97:
c9:a7:3d:ce:9f:d0:77:2d:0e:b8:4e:36:cc:bd:6e:
7f:6c:9d:53:cd:04:d6:81:2c:7f:84:72:0b:72:62:
ee:e2:77:05:14:0d:05:e7:f7:6d:2f:b2:23:30:66:
b9:33:fc:6d:18:6e:cc:c3:e6:db:79:d0:ea:41:4d:
2d:1e:6f:08:d1:ba:08:1b:14:be:af:18:65:7a:93:
06:e7:e8:10:9e:98:d1:94:24:43:b6:66:b5:ef:75:
16:e2:03:68:53:e8:15:b6:4e:95:3c:e2:15:73:43:
e7:ff:b0:f9:98:4c:e5:e1:71:9b:a0:d3:88:e2:61:
1f:d6:fa:72:82:f2:06:a6:6f:b5:10:95:2d:7b:55:
dd:52:8e:63:0c:ab:61:92:29:af:83:30:a5:de:fd:
ec:8a:b6:a9:d4:1b:90:bf:6c:26:d5:d0:cf:52:e3:
70:ea:80:32:c4:ec:66:9c:91:51:90:c2:eb:ac:77:
36:34:af:fc:15:fe:fd:98:ef:9b:3e:c8:da:4a:da:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:83:B0:5E:90:C8:7D:0D:69:64:35:49:B4:36:64:DA:28:EE:91:D2
X509v3 Authority Key Identifier:
keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233302e302f32342d3234203d3e203532353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c5:ca:fa:7b:1b:91:31:ef:9a:3b:e4:3f:c1:c9:cb:41:72:
49:00:37:d7:d5:00:55:ed:50:6c:93:a8:a9:3e:7e:4f:c5:dd:
a7:ff:b5:bb:f1:ec:c8:b0:c5:1d:b2:8b:fc:34:09:34:57:88:
04:12:32:b2:2a:ef:9c:60:c9:e9:07:78:0b:d6:09:bd:cb:46:
b7:47:d6:ec:73:28:72:79:7b:3e:84:98:e2:1e:20:0a:b6:43:
e0:c1:d0:2f:ae:04:d2:58:83:02:fd:ce:7d:dd:2b:b6:36:b4:
fa:f2:13:07:d9:e3:6a:d3:a5:a3:ac:87:74:c0:2e:17:37:4f:
59:ca:fa:44:78:5b:7f:ec:3a:7a:6e:71:f1:c8:12:2d:dc:b0:
1c:fa:32:c6:cf:9a:c3:b3:c3:db:9c:81:05:c1:0a:a8:ff:3d:
73:4c:f2:48:d6:69:53:93:6c:35:2a:5c:ae:d2:39:5d:6e:55:
02:42:40:97:83:de:f2:ab:d0:83:27:c0:3b:08:d0:61:ab:d6:
c6:f2:f4:50:4a:c9:3b:3d:3f:fd:88:d2:fc:2d:99:c8:c2:82:
e0:50:a4:be:d1:47:d1:35:e7:47:cc:1d:e1:8f:3f:f8:71:ab:
cf:e8:46:73:e6:41:d0:87:fa:49:1f:1b:d7:55:57:61:f0:39:
36:11:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:43:12 2025 by rpki-client