Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3137362e302f32302d3232203d3e203238353834.roa
File: 3230302e3135392e3137362e302f32302d3232203d3e203238353834.roa (raw, json)
Hash identifier: qObJ5k3yHAoXilfvl+aA0jXrvDagsYhMZwQaUyARtuA=
Subject key identifier: A1:3F:D2:A5:1D:A5:EB:B5:6F:99:D4:04:1E:61:4D:01:5B:64:0D:11
Certificate issuer: /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial: 75DECD2B3DEF81C57B366F4278510CB211F2506F
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3137362e302f32302d3232203d3e203238353834.roa
Signing time: Tue 08 Apr 2025 16:22:37 +0000
ROA not before: Tue 08 Apr 2025 16:17:37 +0000
ROA not after: Tue 07 Apr 2026 16:22:37 +0000
asID: 28584
IP address blocks: 200.159.176.0/20 maxlen: 22
Validation: Failed, certificate revoked on Tue 08 Apr 2025 19:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:de:cd:2b:3d:ef:81:c5:7b:36:6f:42:78:51:0c:b2:11:f2:50:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
Validity
Not Before: Apr 8 16:17:37 2025 GMT
Not After : Apr 7 16:22:37 2026 GMT
Subject: CN=A13FD2A51DA5EBB56F99D4041E614D015B640D11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:d7:ab:45:66:ca:2f:53:ac:53:07:02:95:
e5:76:a6:25:2a:97:7f:b6:8b:aa:83:3e:1b:76:61:
15:9d:13:9b:1e:34:d3:cc:47:c9:e7:78:66:22:d8:
8d:4a:76:99:07:22:3a:63:46:8e:41:6d:cd:58:20:
4d:60:13:c4:b6:76:82:27:d8:b4:ca:8a:41:cc:ed:
0f:2a:14:b1:9a:d6:40:d5:dd:ba:83:a6:a7:1a:e1:
d2:af:d4:ee:b4:ab:78:a2:ec:af:89:aa:bd:3b:90:
2d:65:ad:57:05:07:36:4b:9d:bb:fd:f3:c9:3e:13:
81:f6:3f:7c:dd:5c:57:6b:fe:d9:5f:3d:25:09:6b:
a5:30:71:29:28:51:9a:9a:ba:19:94:2a:de:2f:63:
06:73:c0:c2:78:12:69:bc:77:26:06:8b:0e:1a:bc:
83:56:f0:82:19:3d:95:2d:cf:5c:ed:06:2e:85:46:
d8:0b:73:f5:b6:1b:40:81:c7:bb:fd:40:d4:78:84:
76:a6:e3:a3:22:3b:21:6d:81:b5:38:43:af:72:2f:
70:d1:4d:12:84:99:d9:ee:32:a9:e7:39:89:d7:25:
06:aa:4b:45:fb:1e:44:81:80:78:dd:ff:62:1f:11:
75:1c:da:00:f6:c7:1f:c5:0b:28:d7:39:38:83:f4:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3F:D2:A5:1D:A5:EB:B5:6F:99:D4:04:1E:61:4D:01:5B:64:0D:11
X509v3 Authority Key Identifier:
keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3137362e302f32302d3232203d3e203238353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.159.176.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:d4:96:37:3d:23:3a:55:2c:68:49:db:93:15:c3:af:c9:a7:
fa:48:8a:cc:b4:b9:96:b5:49:c7:9f:37:77:4d:44:d0:fb:de:
6b:ed:d4:35:ac:8a:c4:39:78:85:52:df:6b:6b:27:4a:cb:ae:
fc:58:25:5f:c7:0e:e2:07:ef:68:8e:d2:7d:d4:06:f4:99:05:
ff:db:18:82:b9:3d:18:68:ee:94:0f:2f:f2:b9:91:45:8f:40:
e3:5d:33:a0:85:56:38:ab:87:7c:21:4d:b4:80:2b:2a:4b:07:
c8:a0:f1:b3:b4:4e:17:8a:f1:8a:2b:0a:53:63:b2:b6:91:de:
3d:28:84:e4:87:76:26:fb:94:9b:e7:b8:23:cf:6b:8f:aa:47:
99:ae:85:35:5e:f2:50:45:f0:e4:ed:dc:27:07:86:61:49:26:
36:ea:0d:2e:de:02:e2:13:14:3c:cd:9c:d2:a4:dc:e4:a6:23:
f5:62:b5:a6:4f:01:3b:ae:44:76:e7:2c:b0:86:c7:b9:aa:99:
b1:da:24:2f:ff:5c:9a:33:c7:7b:a1:48:9d:7e:4d:61:ac:61:
c5:cd:34:cb:38:54:02:7f:36:65:39:f4:51:7b:2b:44:47:f9:
7a:e0:97:b4:ec:f4:9d:4a:0b:3d:02:53:73:82:58:b3:d3:c8:
f0:90:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:45:17 2025 by rpki-client