Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3233203d3e203238313834.roa
File: 3138392e38392e36382e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier: /5WzXOaGWY32Z9gNWhDXNmrzCrFNUOppd8HLa7bRcjw=
Subject key identifier: 3F:13:98:B0:9F:FF:F2:C0:7D:47:BF:C0:13:01:29:C6:76:06:27:6F
Certificate issuer: /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial: 22F7F0309E1B8313DCFF3F010ABF5AB9DE146D6A
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3233203d3e203238313834.roa
Signing time: Mon 17 Mar 2025 14:15:57 +0000
ROA not before: Mon 17 Mar 2025 14:10:57 +0000
ROA not after: Mon 16 Mar 2026 14:15:57 +0000
asID: 28184
IP address blocks: 189.89.68.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f7:f0:30:9e:1b:83:13:dc:ff:3f:01:0a:bf:5a:b9:de:14:6d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Validity
Not Before: Mar 17 14:10:57 2025 GMT
Not After : Mar 16 14:15:57 2026 GMT
Subject: CN=3F1398B09FFFF2C07D47BFC0130129C67606276F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:43:73:b3:9c:b0:93:d4:35:6b:37:36:13:
86:28:ea:2a:14:58:db:5e:0f:53:be:21:73:d8:dc:
07:22:5e:ca:b6:ae:ed:0e:06:8b:db:51:b2:1c:ad:
26:06:4d:8d:a0:41:f0:04:7d:37:b1:ab:16:7f:a9:
94:f4:79:6f:4f:b2:d3:97:53:7a:34:ed:cd:ca:35:
4b:5c:a6:10:07:68:5d:33:79:5d:38:a3:1c:d8:f3:
b4:db:fc:3c:74:36:9b:83:5e:a2:c4:7a:f8:e1:ef:
09:dd:ec:d6:d5:d6:aa:19:6b:b4:dc:35:dc:e0:9a:
63:de:40:88:3d:75:08:84:cc:17:7c:a0:0a:c0:1d:
e4:be:46:b9:98:aa:f2:ce:97:f9:0d:27:61:67:ca:
26:34:93:7d:a8:70:22:29:3a:c9:19:35:d3:96:db:
3d:40:10:24:e4:d9:91:cd:79:76:17:2b:87:20:94:
5b:59:46:35:48:cb:d5:86:73:e6:a2:d4:5a:ac:44:
57:80:01:20:9e:0a:ad:90:22:b3:d9:0d:1a:eb:c8:
6a:65:d4:3d:7b:a6:38:bd:09:d0:7c:c2:df:10:20:
0f:59:dd:3c:92:50:0a:02:a0:34:d5:78:ac:16:58:
3a:5c:1c:88:93:af:82:7b:43:dd:21:d6:26:02:21:
cb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:13:98:B0:9F:FF:F2:C0:7D:47:BF:C0:13:01:29:C6:76:06:27:6F
X509v3 Authority Key Identifier:
keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3233203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.68.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:08:d1:36:be:95:59:75:d7:c0:2b:45:d6:c1:bf:9c:5c:0c:
97:d5:00:6d:15:70:b1:65:69:a4:82:42:df:21:b4:3d:41:ae:
5b:68:cd:2b:08:a1:7c:f2:aa:a6:82:89:de:ce:6d:b6:d9:5a:
5d:2c:e2:f4:3d:bb:b4:1d:5d:1d:0e:a4:f2:77:a2:6f:cc:a7:
79:86:f0:b6:95:0d:a8:c6:14:ea:8b:c0:a8:46:1c:c8:95:a9:
4f:fa:02:0a:9e:da:50:e4:86:6a:5f:a1:f8:d8:37:d7:59:05:
b5:f4:b4:6a:c2:00:60:95:7d:bd:27:d5:23:af:18:dc:ff:b8:
b2:f9:a4:5e:29:d5:0e:9b:c7:73:24:a8:a9:5d:09:cc:a4:fd:
36:22:17:66:60:b2:8c:f4:14:12:18:d7:34:0f:de:bc:9e:06:
fb:d4:57:55:18:a1:3a:1d:b0:dd:f6:c8:07:79:55:3e:71:57:
67:d9:f5:68:d3:15:fa:2d:11:d3:40:f4:d9:08:26:4d:8e:70:
d8:ad:47:08:20:42:48:c7:f6:73:11:bf:98:45:54:8e:b4:59:
e0:c1:74:46:12:b5:b9:20:53:10:18:2e:b0:4d:e9:b5:27:c9:
03:2a:d8:08:59:23:10:05:b1:c1:10:13:18:45:6f:7b:71:2d:
01:ab:91:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:53:02 2025 by rpki-client