Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3136302e3134342e302f32302d3233203d3e203232313238.roa
File: 3230302e3136302e3134342e302f32302d3233203d3e203232313238.roa (raw, json)
Hash identifier: xr7NgNRq8ECHGTdFSar6h4TAobO+UKNhHP5ngrGLha8=
Subject key identifier: 8A:78:1A:C3:3D:A0:FB:43:6D:2D:16:DA:E7:90:B7:EC:EF:86:05:C0
Certificate issuer: /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial: 01470EED596BD6D5B5FEB44E06A0AB984AB0DA15
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3136302e3134342e302f32302d3233203d3e203232313238.roa
Signing time: Tue 08 Apr 2025 16:26:06 +0000
ROA not before: Tue 08 Apr 2025 16:21:06 +0000
ROA not after: Tue 07 Apr 2026 16:26:06 +0000
asID: 22128
IP address blocks: 200.160.144.0/20 maxlen: 23
Validation: Failed, certificate revoked on Tue 08 Apr 2025 19:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:47:0e:ed:59:6b:d6:d5:b5:fe:b4:4e:06:a0:ab:98:4a:b0:da:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
Validity
Not Before: Apr 8 16:21:06 2025 GMT
Not After : Apr 7 16:26:06 2026 GMT
Subject: CN=8A781AC33DA0FB436D2D16DAE790B7ECEF8605C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:0c:d3:aa:d4:ed:d5:d6:ab:10:c6:99:d6:
9e:0d:ab:fc:d7:52:50:7a:53:aa:c2:aa:85:e6:13:
b0:ba:1f:9a:bf:47:0a:3c:75:d8:b4:89:28:3f:f6:
87:76:5f:70:83:a0:8d:c0:51:bc:fa:8b:4c:56:d7:
d7:76:50:f6:82:48:dd:34:6c:5d:cf:38:37:0d:60:
44:54:e4:dd:80:5c:44:d2:b0:ec:4a:28:75:bf:7e:
00:64:3c:56:91:6c:c6:89:9f:d0:d5:c8:fd:3e:1c:
61:b8:ce:85:df:20:a2:1e:79:31:1e:a9:4b:34:7f:
fc:d1:f0:f9:fe:2a:20:cc:39:09:de:df:68:d7:f6:
f2:50:f5:08:1f:1a:aa:62:39:32:e4:01:4d:fb:0d:
ad:e6:99:f2:5d:19:91:c0:b2:cc:92:f9:14:12:2b:
c1:6c:5c:17:41:e4:7f:68:5b:27:70:1c:da:76:27:
a2:d6:08:e5:ed:09:0b:35:1c:8f:ab:af:f5:16:a5:
5e:b6:59:29:85:e0:51:6b:a5:b7:20:cd:25:a4:20:
e4:7d:87:cf:92:fa:25:71:53:ab:41:cb:9b:b0:89:
b3:2e:39:50:05:3f:fe:e8:da:31:e2:20:2d:f6:0f:
cd:e7:9b:4e:e5:cb:7a:ed:19:1e:7c:c0:cd:36:f8:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:78:1A:C3:3D:A0:FB:43:6D:2D:16:DA:E7:90:B7:EC:EF:86:05:C0
X509v3 Authority Key Identifier:
keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3136302e3134342e302f32302d3233203d3e203232313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.160.144.0/20
Signature Algorithm: sha256WithRSAEncryption
73:e2:da:ed:8c:d7:fb:fd:ed:5b:48:1d:c6:9f:c8:70:f4:4b:
79:0e:1f:c4:b5:a6:c5:e6:6e:a6:75:e2:20:e2:7a:47:4c:13:
22:b7:7b:d1:0f:64:36:d6:a3:fa:15:ea:33:e5:b6:20:45:b5:
1c:49:2b:5c:1f:9a:36:48:c1:c2:43:00:c8:9f:ee:20:d0:95:
7e:51:c0:98:f9:45:8c:00:a0:64:16:88:f5:2d:8e:c5:71:0e:
82:45:65:3e:a4:b0:bd:3e:3b:17:be:4c:96:52:61:54:3f:d0:
b2:5e:35:5c:7b:b3:da:46:bd:97:30:84:0d:48:cd:31:98:ac:
95:aa:f5:1a:7a:2e:fa:c2:3c:78:3c:57:42:aa:d1:90:bb:c0:
e7:a3:4e:0f:36:97:13:5a:08:ed:40:9c:d4:29:c7:89:ba:86:
87:f4:ea:cb:ea:49:0f:0f:6f:66:71:58:be:cb:6b:1c:60:be:
ab:7c:6a:81:8b:b5:8d:fc:41:3b:62:4e:19:91:d0:30:43:32:
44:9a:d1:1e:de:83:52:a5:a3:95:8d:3f:58:f1:8a:48:54:55:
35:65:b4:02:7d:ed:81:2a:a5:49:5f:5f:1d:f3:85:d5:00:2a:
a9:3a:1d:1a:38:20:cd:8c:d5:6a:36:0d:14:55:d1:24:03:29:
53:23:5d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:28:48 2025 by rpki-client