Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e3234352e38342e302f32332d3233203d3e20323635303238.roa
File: 3137302e3234352e38342e302f32332d3233203d3e20323635303238.roa (raw, json)
Hash identifier: Ul24WXsUQqgqXexIUk8nY3aknFXM0CidFj2oZR/jgyg=
Subject key identifier: 87:31:FB:AF:B3:B3:B6:14:44:7D:E5:96:7E:C4:83:7A:CE:87:1A:05
Certificate issuer: /CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
Certificate serial: 19F48B5A57C7BDD9553F7C387786A245C5AA21B3
Authority key identifier: D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e3234352e38342e302f32332d3233203d3e20323635303238.roa
Signing time: Wed 09 Apr 2025 13:41:30 +0000
ROA not before: Wed 09 Apr 2025 13:36:30 +0000
ROA not after: Wed 08 Apr 2026 13:41:30 +0000
asID: 265028
IP address blocks: 170.245.84.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 09 Apr 2025 19:55:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f4:8b:5a:57:c7:bd:d9:55:3f:7c:38:77:86:a2:45:c5:aa:21:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
Validity
Not Before: Apr 9 13:36:30 2025 GMT
Not After : Apr 8 13:41:30 2026 GMT
Subject: CN=8731FBAFB3B3B614447DE5967EC4837ACE871A05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:5f:d5:25:42:97:dc:f1:5e:25:0d:66:b8:
75:be:a6:30:dc:7f:be:af:42:47:58:73:e0:13:37:
3a:7f:ed:08:03:96:27:a6:14:0a:cf:4e:91:fb:03:
7b:ae:6f:15:5e:94:ae:cb:a8:a6:d0:c3:cc:8d:0c:
41:bf:f9:21:f2:ce:05:d8:02:7f:d7:5b:81:43:13:
81:2a:07:18:79:08:6d:07:8f:4d:ea:1c:7a:b5:5e:
8a:1e:4e:e3:c4:b7:06:c8:51:cb:33:ce:03:14:52:
69:c7:22:19:b1:9f:3b:02:4b:82:fa:ac:00:e4:9b:
59:8d:7e:d4:17:56:29:7a:3a:02:cb:af:28:24:56:
26:75:4d:ce:93:b4:53:54:fe:3e:e7:f3:5a:ab:07:
ec:e3:d5:ec:92:5e:7a:7a:ba:b5:a0:8a:41:c8:68:
1b:f4:f4:8a:e2:7b:b3:fe:72:36:78:9a:1e:24:0e:
e6:d0:b5:99:63:92:fd:d3:71:e5:b1:fc:8f:42:af:
23:59:88:1e:00:94:62:a5:db:6c:d8:b2:1d:f7:71:
a2:56:01:65:7d:19:30:73:bc:56:68:04:ec:eb:31:
f4:b3:cf:14:b7:b3:55:10:55:4e:ce:6d:ed:7a:e3:
0e:6c:91:38:01:96:16:51:ce:fc:89:37:99:00:dd:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:31:FB:AF:B3:B3:B6:14:44:7D:E5:96:7E:C4:83:7A:CE:87:1A:05
X509v3 Authority Key Identifier:
keyid:D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e3234352e38342e302f32332d3233203d3e20323635303238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.84.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:fd:d5:fe:67:17:b7:15:ca:ab:5f:27:b2:8a:57:fa:f2:27:
89:39:e9:90:16:0a:77:1d:0d:84:61:91:57:e1:37:7e:2e:33:
9e:f6:58:00:1d:1f:2a:0e:23:e1:1f:f7:5a:1e:75:b6:53:66:
ac:ce:ea:81:a4:18:0f:63:d8:c4:13:51:ac:89:66:45:6f:b4:
44:0b:c1:f4:e6:85:9e:6c:d9:d2:63:93:a2:32:70:c0:76:f1:
13:07:c6:15:65:f0:ac:6e:c2:4d:5a:8b:38:6f:af:7a:74:ce:
5e:58:67:0f:df:8c:bf:e7:39:86:d9:17:74:3f:33:01:ad:5c:
fc:c3:de:8c:38:4a:68:9a:0d:81:2b:91:6e:e0:7d:0d:51:37:
4c:1f:31:83:5d:b1:8b:4a:96:e9:e3:12:24:4d:db:01:60:7d:
a2:68:88:19:69:c9:b2:24:fa:da:85:30:23:58:b6:8d:4b:31:
0a:96:60:c1:89:72:00:30:3f:13:c9:ed:d4:21:ef:85:7a:73:
97:30:f8:4d:92:89:33:c4:96:ce:d3:dc:81:24:c8:c8:9e:fd:
df:fa:a3:7a:0b:c0:cf:2f:d1:cf:ef:93:ad:d2:aa:13:5f:60:
3f:65:22:af:78:4d:78:05:fb:27:94:26:7a:31:49:40:14:31:
32:ba:f6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:44:26 2025 by rpki-client