Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130312e302f32342d3234203d3e20323632373932.roa
File: 3230312e37362e3130312e302f32342d3234203d3e20323632373932.roa (raw, json)
Hash identifier: dQ0TtbzxUZieAaD+ZztaKTIdBcIdPbPH3dRo9OqUeAg=
Subject key identifier: EB:DD:E5:78:05:11:C4:CB:18:00:A2:F7:C0:09:26:BC:38:F4:8A:70
Certificate issuer: /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial: 4FCADD3AEE0CDF7CD78EE8B637D7265385BDB1CB
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130312e302f32342d3234203d3e20323632373932.roa
Signing time: Tue 01 Oct 2024 18:35:13 +0000
ROA not before: Tue 01 Oct 2024 18:30:13 +0000
ROA not after: Tue 30 Sep 2025 18:35:13 +0000
asID: 262792
IP address blocks: 201.76.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 18:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ca:dd:3a:ee:0c:df:7c:d7:8e:e8:b6:37:d7:26:53:85:bd:b1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Validity
Not Before: Oct 1 18:30:13 2024 GMT
Not After : Sep 30 18:35:13 2025 GMT
Subject: CN=EBDDE5780511C4CB1800A2F7C00926BC38F48A70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:1c:d0:2e:70:46:9a:66:f7:37:b7:5b:0c:
8a:c0:f6:ea:92:7a:fe:34:a6:df:a5:6f:06:83:b4:
6f:2c:62:fe:c1:56:15:d5:31:29:9d:a3:f3:ea:4b:
2c:ac:55:e1:ff:ce:de:c0:04:10:fa:0b:fb:72:07:
1c:7f:ac:b0:c3:dd:0b:4b:34:24:31:65:b7:e5:dd:
f4:25:fb:b7:11:d9:42:06:dc:23:6d:59:8c:ab:b1:
55:df:2c:2b:c0:39:68:37:9d:a8:45:d3:3d:78:67:
f8:52:79:64:80:f2:fa:1a:11:7c:6c:b1:4e:60:4d:
6a:7a:97:92:53:33:89:8f:05:ce:ca:c1:81:65:92:
52:3a:c6:95:98:4b:3f:71:92:f4:4d:a8:4a:58:16:
bb:8a:f0:fe:60:8c:ed:8b:ee:da:f8:07:e6:ec:3b:
7f:f8:63:25:b0:d4:ef:28:24:c5:b4:2b:2f:ca:aa:
0b:ee:1e:18:ef:5f:69:4e:58:02:42:79:bd:1c:3f:
99:31:43:a7:34:84:f8:85:4b:20:ee:4c:66:5f:eb:
28:8f:33:04:2e:0d:43:48:e2:f9:90:32:15:9d:29:
20:10:c1:4d:04:5f:05:9c:95:1c:21:1a:15:af:6c:
29:ae:eb:bc:0c:51:0b:f2:47:2f:a5:fe:de:ed:21:
e4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DD:E5:78:05:11:C4:CB:18:00:A2:F7:C0:09:26:BC:38:F4:8A:70
X509v3 Authority Key Identifier:
keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130312e302f32342d3234203d3e20323632373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.76.101.0/24
Signature Algorithm: sha256WithRSAEncryption
55:42:7c:ea:1d:44:d9:ad:08:11:02:27:97:38:d0:be:44:da:
7a:33:c6:3e:06:d7:15:ec:46:d7:be:20:76:7d:23:cb:90:2e:
70:95:0b:49:87:6b:23:2e:0a:67:81:0c:bc:60:ed:8d:c2:36:
ff:4b:1f:dc:e3:24:85:23:74:83:60:5f:90:ba:75:1f:d3:56:
66:f7:7b:9f:6f:f3:86:76:fc:02:3e:10:b1:c8:64:4e:c6:8e:
3a:8b:1c:11:ec:30:60:d3:5d:35:24:fd:eb:00:0c:10:b0:38:
cb:f4:0d:ea:f8:15:6c:33:ee:59:d0:e8:e3:bd:a6:82:4c:da:
af:f2:1c:11:20:0f:9b:cd:c3:31:a8:31:50:f8:b2:fd:03:37:
f1:ba:98:89:bd:9a:4e:fd:6b:c9:2b:76:21:2d:3a:51:d8:78:
ac:39:62:fc:04:58:ed:61:c8:cd:a4:5e:8b:5b:29:3a:3b:c5:
1e:d4:64:b0:f7:35:00:39:58:05:57:de:1d:93:7d:f3:df:4b:
f4:40:b0:63:fa:88:b5:23:f0:b9:1d:f4:a2:35:c3:d9:56:74:
be:27:1b:5e:2e:69:e2:eb:18:59:ab:5d:a0:00:08:d9:e5:49:
2c:10:63:94:1e:68:6d:75:7c:c6:b0:ee:ea:a5:09:35:53:f5:
13:3f:af:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:51:15 2025 by rpki-client