Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131342e302f32332d3233203d3e20323635303738.roa
File: 3137302e3233332e3131342e302f32332d3233203d3e20323635303738.roa (raw, json)
Hash identifier: KOQkq6hpDXRrlW+I4i2dgSnAVxJQs8YcRRHmbQOH2LY=
Subject key identifier: C6:D3:4A:7D:F4:A9:45:2D:8E:17:CC:48:2F:CF:C4:65:D2:A8:64:F7
Certificate issuer: /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial: 55A09E973564E776809250FE054CC4206BAC6A0A
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131342e302f32332d3233203d3e20323635303738.roa
Signing time: Mon 21 Apr 2025 12:53:42 +0000
ROA not before: Mon 21 Apr 2025 12:48:42 +0000
ROA not after: Mon 20 Apr 2026 12:53:42 +0000
asID: 265078
IP address blocks: 170.233.114.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 21 Apr 2025 13:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a0:9e:97:35:64:e7:76:80:92:50:fe:05:4c:c4:20:6b:ac:6a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Validity
Not Before: Apr 21 12:48:42 2025 GMT
Not After : Apr 20 12:53:42 2026 GMT
Subject: CN=C6D34A7DF4A9452D8E17CC482FCFC465D2A864F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:7a:a7:7c:e0:29:c1:8b:b0:e2:70:bc:56:
6c:4b:77:28:18:40:17:87:70:db:90:e2:b0:e3:4a:
e5:8e:bc:b8:04:53:bf:ff:11:2e:fa:c3:b1:86:4c:
76:67:95:54:ad:b9:b4:e6:b0:ff:ed:a0:4d:08:3a:
22:35:0c:a0:a7:59:c7:38:9b:f0:50:fd:2e:a7:8b:
89:00:c2:81:bf:00:12:bf:c7:f4:95:90:e9:41:7b:
c0:3f:71:2b:64:b9:bc:8f:2b:5e:cb:cb:55:eb:8c:
ad:b4:3c:97:a9:b9:6d:5f:54:b7:ba:9d:bb:17:b4:
33:93:ea:6a:e3:1a:aa:0d:13:da:5b:c7:a3:ce:6f:
c3:76:1a:5e:0d:cd:8d:db:fa:7a:77:4e:3f:15:53:
96:29:8b:8f:b7:e5:c5:c4:5d:5a:a4:a1:74:80:dc:
b7:fa:78:0a:12:5b:9e:a6:a2:93:4f:9e:84:64:e7:
33:f4:af:9a:b3:ea:8c:d3:51:cc:9e:69:b9:5b:4e:
3c:11:9f:54:4a:09:78:db:5e:de:5e:ea:e1:a9:fe:
5a:c7:38:de:95:0a:4f:68:09:4a:0c:95:a6:83:b7:
e4:e4:ce:2d:5d:a0:02:2d:fa:40:cf:05:d0:63:d0:
2a:39:fd:8d:03:98:e8:f2:3c:74:d5:08:76:4f:bc:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D3:4A:7D:F4:A9:45:2D:8E:17:CC:48:2F:CF:C4:65:D2:A8:64:F7
X509v3 Authority Key Identifier:
keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131342e302f32332d3233203d3e20323635303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.114.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:dd:73:90:90:6e:8a:4e:84:4a:d0:b3:e6:41:fa:e3:f8:36:
37:f0:e2:77:fe:4d:9a:dd:42:47:c4:50:51:4c:91:27:0d:ab:
0d:87:e8:a9:b1:47:c9:9c:b8:1b:04:2e:ec:86:bd:81:20:18:
e9:94:3e:0f:08:35:6a:2d:9d:ac:67:3f:55:5e:fe:aa:c3:9d:
18:b7:f0:91:7b:5a:23:b2:21:fd:3f:44:4f:44:7f:93:c2:04:
11:56:98:7d:81:5e:c5:a5:3f:44:76:bf:dd:e7:68:4e:f0:07:
77:1f:7b:33:a6:ac:c6:8d:4a:0c:ee:1e:37:e0:4e:bc:45:98:
20:31:44:09:85:82:1f:91:a2:b4:f5:40:eb:58:94:e0:63:79:
b2:e3:90:22:a5:a1:e9:50:99:b6:93:06:06:b8:e6:a4:66:9f:
e4:f8:39:30:64:f9:94:1b:1f:24:b4:44:59:39:78:13:d5:ee:
43:6f:2b:9b:9d:17:ea:ca:bf:c8:e7:db:80:a9:0d:c4:f8:a0:
f1:33:b8:51:c3:6e:c1:ba:83:31:ac:57:c3:e6:7f:48:29:21:
75:79:cf:0f:ab:a3:26:d5:ba:f1:e1:9b:75:3d:96:85:4b:86:
eb:d5:99:5b:1f:7c:52:a2:df:dc:7b:b1:e6:65:40:a8:61:1a:
3e:bc:44:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:14:00 2025 by rpki-client