Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3232203d3e203238353834.roa
File: 3137372e3132392e3233362e302f32322d3232203d3e203238353834.roa (raw, json)
Hash identifier: +xfh3ezIy+aHExiAtLlZ8at/Z3ujqrzl28AhptoZ5LI=
Subject key identifier: DB:96:35:69:E6:FF:40:35:2A:B8:65:B5:50:E5:BB:BF:D7:55:24:8D
Certificate issuer: /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial: 506C63A849B353B7C158D6EAE875F6026117436F
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3232203d3e203238353834.roa
Signing time: Tue 08 Apr 2025 16:23:18 +0000
ROA not before: Tue 08 Apr 2025 16:18:18 +0000
ROA not after: Tue 07 Apr 2026 16:23:18 +0000
asID: 28584
IP address blocks: 177.129.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 08 Apr 2025 19:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:6c:63:a8:49:b3:53:b7:c1:58:d6:ea:e8:75:f6:02:61:17:43:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
Validity
Not Before: Apr 8 16:18:18 2025 GMT
Not After : Apr 7 16:23:18 2026 GMT
Subject: CN=DB963569E6FF40352AB865B550E5BBBFD755248D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:69:2e:db:6d:20:49:df:d2:cc:4a:11:96:
50:24:7a:e2:01:a8:a3:3f:5b:15:ee:11:80:a3:80:
5e:da:05:ea:9f:46:6f:fd:ee:70:6b:5d:e4:60:2e:
c6:4a:77:ac:a0:68:ae:3b:76:73:84:1f:56:d0:3a:
4e:3e:0a:cd:d1:18:2c:e7:a0:40:85:2a:11:9b:06:
8b:1e:c9:dc:e1:21:3b:62:f4:e1:f0:46:5f:75:ad:
3c:dc:6c:2e:89:90:81:8c:68:76:8e:51:92:e8:02:
18:14:6e:13:44:c6:a4:05:3d:eb:11:d6:f3:58:56:
05:d2:99:06:34:12:af:fd:ed:84:4b:67:92:4f:25:
7a:f9:a6:0a:e9:de:b5:c7:d5:32:87:03:a7:c0:82:
33:12:94:08:df:5d:9a:60:de:dc:1d:7f:39:0c:39:
21:fa:ef:c8:c0:87:9e:27:89:2c:08:b3:42:96:4e:
35:97:c5:6c:e1:c6:67:85:2d:8c:3b:b6:bc:a5:af:
ce:49:6c:2f:2f:70:e2:db:a2:c9:0d:f8:44:ae:21:
3a:18:1e:32:59:fd:f0:c8:2a:95:75:ac:74:49:a0:
05:56:fa:8f:d3:dc:b9:9d:aa:d1:d6:e2:8a:cb:d1:
b2:25:33:86:0b:08:13:0a:26:e5:59:90:28:c8:53:
1d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:96:35:69:E6:FF:40:35:2A:B8:65:B5:50:E5:BB:BF:D7:55:24:8D
X509v3 Authority Key Identifier:
keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3232203d3e203238353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.236.0/22
Signature Algorithm: sha256WithRSAEncryption
60:e9:6e:b4:7f:6c:ef:b3:04:79:29:78:ad:50:50:d4:ee:95:
e7:43:bb:a4:13:3c:ea:84:73:ba:6b:c1:c9:68:cd:1d:a5:35:
4f:43:ed:70:b9:1c:01:39:6a:04:1f:dc:f5:4c:9b:45:00:fb:
83:d7:45:7e:27:a1:b3:a5:8b:f3:da:83:64:b6:1d:8d:18:d5:
22:ab:c4:ce:0b:7c:2c:86:0c:be:0a:87:6e:25:0e:88:ad:96:
8d:f9:87:21:33:3f:ac:8e:f5:bf:e3:bd:f1:04:fe:a4:0b:c2:
a5:11:e8:6b:58:ea:f3:7e:fd:d5:d3:59:be:a4:87:b7:4e:6a:
a6:d1:18:d1:c6:7e:20:76:9a:5e:40:b8:66:9d:dd:1b:26:0c:
f6:b1:f4:22:56:c5:13:95:7e:99:8a:63:41:60:f9:05:1f:2b:
ec:21:b3:ee:09:2d:e1:3e:d8:a8:e2:c3:c3:76:16:95:a8:82:
04:64:7f:db:44:d2:3a:f2:40:f0:12:3e:ef:d0:0a:ac:cc:0c:
63:a5:fb:cb:ea:37:2a:af:c3:f2:22:cc:f6:c1:a0:12:f3:bc:
dc:4d:58:43:a3:f0:08:d7:11:0d:c1:e6:0b:a0:4d:e4:54:a2:
2c:c4:e8:5f:fe:d1:51:ca:00:8a:b5:c9:e1:b4:a4:51:3d:f7:
af:9d:79:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:36:22 2025 by rpki-client