Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3136302e302f32302d3232203d3e203238353834.roa
File: 3230302e3135392e3136302e302f32302d3232203d3e203238353834.roa (raw, json)
Hash identifier: ArWPBwUPULjwvoEK/K8Rjv3gEtkYbhCPGPRVj7iL+DQ=
Subject key identifier: A0:00:B8:7A:82:E1:7D:5F:5D:4C:93:D1:19:FE:AD:37:1C:9D:33:BE
Certificate issuer: /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial: 2ED7A2DF309CE485F2FC49D2E088DFB30BD32486
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3136302e302f32302d3232203d3e203238353834.roa
Signing time: Tue 08 Apr 2025 16:22:23 +0000
ROA not before: Tue 08 Apr 2025 16:17:23 +0000
ROA not after: Tue 07 Apr 2026 16:22:23 +0000
asID: 28584
IP address blocks: 200.159.160.0/20 maxlen: 22
Validation: Failed, certificate revoked on Tue 08 Apr 2025 19:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d7:a2:df:30:9c:e4:85:f2:fc:49:d2:e0:88:df:b3:0b:d3:24:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
Validity
Not Before: Apr 8 16:17:23 2025 GMT
Not After : Apr 7 16:22:23 2026 GMT
Subject: CN=A000B87A82E17D5F5D4C93D119FEAD371C9D33BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b8:95:e9:81:b2:61:31:f7:c8:4f:ee:cd:11:
b9:92:cc:32:8c:15:d2:13:a4:47:92:a7:51:2a:c7:
ec:9a:31:41:f9:21:14:61:c2:08:4c:c2:fa:83:cf:
54:ba:d8:c8:34:35:bc:2f:5b:aa:73:0c:eb:2b:18:
e3:c4:58:1d:be:47:2d:28:ba:8b:6c:1c:35:59:b5:
52:37:24:83:7d:58:8f:7d:a5:48:7a:7f:3f:c5:3b:
37:04:8a:74:a9:c2:88:69:b0:55:ff:70:8e:ba:45:
d2:09:22:6a:77:ca:7b:a2:44:cf:9b:e3:94:29:40:
e2:c7:e4:e8:b7:54:72:5a:e3:b9:5b:52:c6:d6:d9:
1a:65:75:0b:4b:d9:38:dd:44:26:49:c9:d4:12:73:
e1:f1:16:87:60:43:a7:fb:09:fb:d9:3e:e9:2e:8a:
e9:db:f7:0c:ba:b4:d9:b9:20:ad:27:af:a2:b8:67:
96:50:73:cf:05:8b:55:5a:12:69:c3:18:6f:87:f9:
c2:98:05:5c:1b:a5:44:c0:b1:fd:8c:92:ef:a9:ea:
e0:c9:fc:03:fb:ec:ac:c9:77:d1:5a:32:98:6e:49:
09:43:ac:f5:5a:8f:04:3f:c5:7f:bf:12:b8:cd:ea:
f7:ce:e7:0d:37:0d:5d:b1:b3:2b:61:f6:39:8f:3b:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:00:B8:7A:82:E1:7D:5F:5D:4C:93:D1:19:FE:AD:37:1C:9D:33:BE
X509v3 Authority Key Identifier:
keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3136302e302f32302d3232203d3e203238353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.159.160.0/20
Signature Algorithm: sha256WithRSAEncryption
57:a1:ad:80:93:cd:8c:09:c8:90:a5:cd:1e:b4:ee:df:22:36:
55:5c:fb:e5:98:92:cf:64:b1:9e:38:95:dc:96:b0:d5:13:e5:
43:51:ba:5d:f9:bf:2f:46:1e:40:fd:97:82:70:cd:a1:6c:af:
e7:00:40:fe:be:2c:80:f0:03:c3:be:4e:7d:45:4d:92:6e:b9:
52:1f:9a:39:75:e2:d2:ff:69:c0:e0:56:e3:3a:ea:5b:d8:63:
67:46:d4:ab:b1:75:93:fc:d8:fc:b0:fd:89:f0:50:5c:94:b2:
47:a8:af:b0:9b:0c:76:fb:a7:11:b2:ac:c5:72:a0:9d:85:e1:
80:bf:70:9a:ba:57:e7:58:f7:b6:0d:9d:31:8b:c8:13:7f:f1:
a6:28:0d:8a:a5:40:bc:89:1d:7e:1e:12:c1:a4:a9:a6:cf:ce:
de:84:12:85:26:2b:72:85:8a:f6:e7:3a:8e:fb:a6:1c:2e:83:
8e:a0:7e:c1:86:22:6f:0d:d9:af:d8:68:fa:fc:1a:dd:c2:b9:
04:dc:68:3d:48:2c:f8:d4:77:48:55:70:9e:55:f2:ed:ed:6b:
d0:90:bd:ab:67:71:2b:72:99:dd:2a:48:e8:48:bc:b9:20:cc:
e9:69:de:fa:33:79:30:eb:41:f2:ba:08:f5:1e:ae:2d:c4:a5:
73:88:da:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:09:23 2025 by rpki-client