Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32302d3233203d3e20323632373932.roa
File: 3230312e37362e39362e302f32302d3233203d3e20323632373932.roa (raw, json)
Hash identifier: x/KqIMbbGYcc5bA+agRTQWwtvCDvIvyfn3Sl+MFwLkk=
Subject key identifier: 4D:D4:3F:0F:6A:B4:29:78:E0:7D:FF:42:29:CB:6A:8A:38:88:DE:8B
Certificate issuer: /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial: 1871664F8563A5EB5BB8E6838FFD9D4CC5513562
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32302d3233203d3e20323632373932.roa
Signing time: Mon 30 Sep 2024 23:10:02 +0000
ROA not before: Mon 30 Sep 2024 23:05:02 +0000
ROA not after: Mon 29 Sep 2025 23:10:02 +0000
asID: 262792
IP address blocks: 201.76.96.0/20 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Oct 2024 18:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:71:66:4f:85:63:a5:eb:5b:b8:e6:83:8f:fd:9d:4c:c5:51:35:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Validity
Not Before: Sep 30 23:05:02 2024 GMT
Not After : Sep 29 23:10:02 2025 GMT
Subject: CN=4DD43F0F6AB42978E07DFF4229CB6A8A3888DE8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:f8:53:c3:35:97:69:ae:bd:01:27:2e:14:
96:10:5d:f2:4a:d9:53:a7:be:39:49:87:92:c1:01:
85:4e:20:21:dc:f9:b8:33:3c:15:82:c9:a6:2d:cf:
eb:6b:16:5a:aa:c0:7e:34:3b:a9:6b:7a:6d:42:88:
c6:5c:5b:de:6d:7f:0b:e4:7d:66:37:99:86:8b:bc:
ab:25:0a:e1:8c:10:1d:2f:a1:53:c4:60:90:de:33:
5d:ce:e6:d8:9f:50:9e:cb:f3:ff:68:7b:b1:f3:31:
49:83:d9:99:56:07:22:55:05:ce:1a:96:3b:94:48:
94:84:fd:b5:94:3f:cc:ca:b3:ec:bf:13:9f:34:50:
d6:fa:11:b7:2b:3d:c9:3c:85:23:4f:e2:8a:63:e7:
0f:f1:56:15:02:4a:2c:86:b9:a3:25:fe:2c:84:02:
33:59:d3:e1:69:50:dd:42:97:2c:66:19:d5:39:33:
73:04:0b:63:40:9e:a3:79:06:ec:01:78:51:a6:e4:
2a:09:f5:4c:83:9c:07:e1:c2:12:d9:b1:89:88:00:
d5:04:51:cd:99:8e:4b:c5:da:ee:9e:07:6c:d2:97:
65:96:5d:56:48:a1:7c:0d:98:73:f6:84:2f:70:bf:
a1:bb:63:c9:79:1c:45:64:32:42:0f:23:5b:ad:ab:
d5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D4:3F:0F:6A:B4:29:78:E0:7D:FF:42:29:CB:6A:8A:38:88:DE:8B
X509v3 Authority Key Identifier:
keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32302d3233203d3e20323632373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.76.96.0/20
Signature Algorithm: sha256WithRSAEncryption
29:8d:c8:93:91:5b:78:89:4f:05:93:25:ca:d8:97:cc:74:52:
74:22:18:ab:fc:af:23:84:b3:d0:d2:3e:6e:44:c9:34:4c:8f:
29:b6:21:27:d1:e6:40:6b:84:45:05:3c:e4:94:02:20:45:e3:
03:5a:65:c3:fb:97:07:2d:cb:a8:c6:2b:41:8a:cf:df:55:8b:
93:63:a3:c5:36:c6:a6:b2:df:21:3c:93:f8:f6:7a:e2:5a:8f:
c6:8a:eb:a1:a4:3e:e9:17:b0:4c:0e:e1:f2:6a:51:79:0d:80:
bf:19:7c:ba:7d:36:b8:9d:92:82:38:11:b8:91:c2:8b:ce:e9:
29:7a:bd:72:54:2a:4e:75:b8:9b:97:bc:17:0d:5c:8f:af:92:
b7:e4:a6:fc:25:30:8d:5d:62:30:04:52:3f:d3:03:86:26:d3:
12:df:9b:2a:fb:db:0a:55:1c:a1:6d:45:15:87:b9:6d:ec:21:
91:05:d7:06:d0:91:53:2b:b7:40:1e:d6:f4:9c:2c:f8:fe:54:
85:fa:ce:99:84:55:9b:65:a5:e5:02:65:34:92:dc:b4:5e:d5:
92:ee:78:b3:c3:8c:0c:e9:ae:1e:21:95:d3:2a:32:64:33:4c:
49:dc:fe:6e:46:6e:21:10:71:47:30:15:dc:ce:6a:ba:0a:fa:
90:97:3f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:39:01 2025 by rpki-client