Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137352e302f32342d3234203d3e20323635333432.roa
File: 3136382e3138312e3137352e302f32342d3234203d3e20323635333432.roa (raw, json)
Hash identifier: UK2z9xxTgPogu0qpsBJxYqR0jx8XvRIjKHQBz7H/neM=
Subject key identifier: 14:F2:48:63:1D:7E:09:4D:B9:4E:FA:5A:2A:1E:E8:E7:EC:66:C7:D7
Certificate issuer: /CN=252608E1AF372BD4691CB17C734D43ADB468E835
Certificate serial: 7AEE1BFD62190D2039DC007B964740C3EE6971C8
Authority key identifier: 25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137352e302f32342d3234203d3e20323635333432.roa
Signing time: Mon 26 May 2025 13:58:54 +0000
ROA not before: Mon 26 May 2025 13:53:54 +0000
ROA not after: Mon 25 May 2026 13:58:54 +0000
asID: 265342
IP address blocks: 168.181.175.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ee:1b:fd:62:19:0d:20:39:dc:00:7b:96:47:40:c3:ee:69:71:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252608E1AF372BD4691CB17C734D43ADB468E835
Validity
Not Before: May 26 13:53:54 2025 GMT
Not After : May 25 13:58:54 2026 GMT
Subject: CN=14F248631D7E094DB94EFA5A2A1EE8E7EC66C7D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:1a:bf:c4:64:ea:64:9f:98:09:cb:47:a5:
c3:83:ff:32:68:b4:3f:42:de:a7:d1:1b:cb:94:6e:
98:1e:86:97:22:43:6c:e2:8d:6f:90:02:ad:55:e8:
54:c5:1b:f0:f5:a8:4a:fe:db:76:48:72:80:f1:8b:
6d:ff:00:a6:df:60:1b:68:14:21:c3:42:37:d1:55:
a2:27:bb:48:da:7d:a4:25:36:2e:b3:1b:d4:24:ed:
cd:18:de:ea:d5:5c:27:82:47:e2:bc:20:45:5f:59:
65:de:e6:6d:6c:c5:69:4b:ea:ac:03:76:33:03:24:
82:c9:4f:60:51:a9:0f:1a:a3:86:bd:8d:5d:c3:3e:
f0:28:e7:2b:79:da:79:07:7a:e3:a8:2f:bc:5d:c5:
9c:e4:6c:3e:03:46:ad:f7:1e:0f:ca:29:8f:1e:b5:
12:57:19:5c:ac:a2:3b:e4:0f:d0:ec:fd:26:06:27:
b0:29:cc:57:66:2a:b9:1a:38:da:db:81:34:b5:16:
8d:33:05:8d:37:5a:40:27:22:ee:f1:54:87:b6:49:
fd:2f:87:e3:1e:71:b5:c5:ed:66:17:0f:7d:7f:78:
8e:33:b1:79:4d:a5:85:db:92:31:06:1f:e1:ef:45:
c9:d6:c0:55:da:bd:c8:ce:1f:21:bb:1d:02:d8:40:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F2:48:63:1D:7E:09:4D:B9:4E:FA:5A:2A:1E:E8:E7:EC:66:C7:D7
X509v3 Authority Key Identifier:
keyid:25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137352e302f32342d3234203d3e20323635333432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ea:3a:1f:96:b0:1c:57:0f:7a:f9:a4:4b:e4:25:45:1d:b2:
06:80:84:41:05:60:c3:d7:5e:d1:86:00:db:0f:72:78:90:2f:
19:35:3d:df:3c:1f:77:c5:b4:73:07:9b:28:56:1e:3b:0b:e9:
9f:9a:dd:5b:32:6a:e0:9e:2f:c6:7b:9e:0e:15:a3:af:9a:04:
24:fb:b3:ec:cc:73:cb:78:3d:56:02:6e:d4:1f:06:ae:f3:6a:
ce:04:d6:7a:32:31:09:e5:5f:b6:90:13:21:3b:7e:a3:c0:86:
0e:d7:09:14:88:f9:2d:2c:94:34:31:76:09:f5:9e:90:29:ef:
4d:b0:06:0f:8c:8f:5e:bc:e1:08:e0:1f:2b:ac:00:cd:75:ef:
56:f8:fd:05:21:16:ca:42:43:4c:aa:23:8e:16:28:5b:8b:22:
fe:f6:ab:7d:b1:1b:9a:32:3d:71:62:e7:83:32:29:3e:0a:bf:
6d:1d:22:cb:53:02:33:95:41:3f:cb:10:dc:9b:29:25:6b:70:
71:e8:32:fd:40:70:da:3f:d4:d1:08:7d:1d:75:5f:14:44:f8:
dc:27:b8:fc:db:ef:00:c3:ee:28:88:e7:13:7a:d4:c7:19:aa:
e9:0e:26:b6:0b:82:20:70:f4:f6:d2:87:fd:48:e0:97:55:aa:
fc:cb:82:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:56:22 2025 by rpki-client