Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32342d3234203d3e20323634383637.roa
File: 3136382e3230352e3232342e302f32342d3234203d3e20323634383637.roa (raw, json)
Hash identifier: YkUwu0io33bW9uYm4DkAQ2slZMCez/gh8SZeQQ7sSBw=
Subject key identifier: 9E:38:73:4D:AD:BF:22:B7:57:51:3C:1F:46:5B:98:E8:E8:D1:00:4A
Certificate issuer: /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Certificate serial: 55EF2C9FBF26EA1E2D5453B07108000CA7BC2127
Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32342d3234203d3e20323634383637.roa
Signing time: Thu 04 Apr 2024 15:05:54 +0000
ROA not before: Thu 04 Apr 2024 15:00:54 +0000
ROA not after: Thu 03 Apr 2025 15:05:54 +0000
asID: 264867
IP address blocks: 168.205.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ef:2c:9f:bf:26:ea:1e:2d:54:53:b0:71:08:00:0c:a7:bc:21:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Validity
Not Before: Apr 4 15:00:54 2024 GMT
Not After : Apr 3 15:05:54 2025 GMT
Subject: CN=9E38734DADBF22B757513C1F465B98E8E8D1004A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:51:ac:94:b6:e6:a2:7d:be:e1:f7:cb:4d:24:
be:98:b2:d8:b4:4e:cd:1e:2b:87:38:98:96:ec:5e:
fa:d2:d8:96:de:39:74:3a:17:67:b2:05:5e:9d:e1:
05:7b:f8:22:71:47:bf:e1:8f:4b:a1:54:6a:b3:83:
82:b5:05:1f:4e:c7:53:c2:c2:3e:02:60:93:70:fe:
97:43:4d:8b:97:73:47:54:bc:7c:13:a5:0b:e9:79:
5a:7d:b7:8e:b2:5f:91:62:04:6d:ed:ec:e6:d6:6f:
94:8c:48:57:7d:76:21:28:67:9a:cd:49:86:78:e0:
82:f7:db:7d:45:34:8a:fd:6f:ac:60:50:46:b5:71:
2a:e0:65:91:87:00:61:08:2f:37:9b:64:40:ee:00:
75:58:f7:08:e5:ce:f7:c4:99:82:14:f1:ee:d6:c8:
97:f3:db:11:23:af:bf:e3:cb:25:71:d6:0f:10:e2:
e1:d8:f5:ae:bd:6b:f5:fd:94:c0:54:6b:77:4b:51:
48:ec:14:f2:eb:be:59:27:d2:82:dd:b5:13:25:1a:
38:8f:0e:aa:5b:c3:a3:5e:f0:b1:80:d8:9e:b4:fc:
d4:01:af:63:10:83:a5:77:d3:95:81:e6:73:87:df:
53:7b:94:95:5e:b1:b6:0d:ca:73:88:e9:b1:31:2f:
da:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:73:4D:AD:BF:22:B7:57:51:3C:1F:46:5B:98:E8:E8:D1:00:4A
X509v3 Authority Key Identifier:
keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32342d3234203d3e20323634383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.224.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:a7:16:ea:d9:84:c1:70:0a:0c:03:01:7a:ac:7c:96:46:69:
42:68:6b:84:08:ba:61:4d:be:9e:fa:06:f9:0a:16:3a:1d:b2:
f3:43:d1:cc:4b:fa:d1:60:a9:31:62:b1:b5:b6:03:cd:ed:0b:
cd:4f:28:16:f1:64:36:07:86:01:89:d3:50:1e:fd:e7:91:ae:
93:21:57:a5:a6:4a:e9:1d:0d:4e:42:fa:63:26:c7:3d:b3:0f:
88:03:49:29:f0:c2:6a:b4:9d:72:14:b7:f9:6c:34:b5:f3:88:
9c:3d:76:69:6c:b4:52:a3:a7:c2:23:af:2c:bf:21:bd:1c:ed:
2d:f7:f9:38:bb:7b:44:f1:5e:46:23:e6:9b:1c:ee:90:65:34:
6c:96:b6:b1:46:99:35:8a:40:25:ad:76:fd:26:0f:91:d8:b5:
6c:f0:8c:fa:4a:0c:79:ac:a2:28:65:94:13:45:ab:e7:c7:7a:
6a:bd:12:14:5b:de:cd:5b:26:c9:ac:16:ac:85:5b:57:b3:04:
af:8f:7c:d3:bb:22:fe:b9:fc:8e:de:2a:d9:9e:f7:86:de:80:
36:1d:ff:73:2f:bf:57:30:4b:59:44:07:db:e8:3d:60:de:c5:
80:8d:6b:51:9c:3f:e7:01:c2:52:29:18:d1:27:72:bc:1e:cc:
02:75:70:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:34:48 2025 by rpki-client