Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e312e302f32342d3234203d3e203131393231.roa
File: 3230312e34392e312e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier: EJ6S4iBrFCdO0OX2o3XcCYY4qvonIo+mUJi7Cx+hPSM=
Subject key identifier: DF:1A:C5:E1:9C:D4:C3:6A:EF:33:3E:6B:BC:AE:17:5A:35:64:C3:79
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 6B404839F473610E7E1DB9236697E740A0BECB1D
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e312e302f32342d3234203d3e203131393231.roa
Signing time: Wed 31 Jul 2024 13:42:48 +0000
ROA not before: Wed 31 Jul 2024 13:37:48 +0000
ROA not after: Wed 30 Jul 2025 13:42:48 +0000
asID: 11921
IP address blocks: 201.49.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:40:48:39:f4:73:61:0e:7e:1d:b9:23:66:97:e7:40:a0:be:cb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Jul 31 13:37:48 2024 GMT
Not After : Jul 30 13:42:48 2025 GMT
Subject: CN=DF1AC5E19CD4C36AEF333E6BBCAE175A3564C379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:c7:58:31:9f:49:d2:81:3e:cf:08:c0:f3:
be:69:e9:d7:b7:9e:7d:8c:da:8d:54:61:c5:e6:4a:
94:f3:09:f8:03:ba:4a:74:74:f2:2d:0c:29:43:8f:
8f:4f:8c:ab:90:2f:a3:c6:38:76:7a:9b:e4:7a:85:
83:be:be:35:4c:66:83:33:4c:69:55:f6:0f:f3:f9:
23:04:5e:33:5c:cc:b8:5c:0e:04:44:f5:89:45:e1:
e3:7f:b1:17:a5:df:d9:bf:fa:94:ff:37:e7:83:ef:
4f:07:94:40:4b:44:52:f0:35:b4:cd:cf:17:b2:0f:
56:e3:8d:3c:3d:3f:dc:95:98:de:b3:67:ff:90:56:
55:24:6d:79:b1:a1:bc:8e:23:6c:c3:28:65:ec:97:
49:ea:05:d6:03:91:ee:b3:5d:ce:b3:e2:fb:94:6d:
43:07:cf:9b:3b:a2:4f:f8:aa:78:8b:75:b9:0a:f6:
78:fd:3e:b8:4a:37:8d:c9:db:bc:99:f9:a6:da:3b:
ec:c1:40:a0:73:30:72:2f:e3:2d:67:bb:87:d4:e0:
cf:5b:b6:fe:f0:20:08:72:be:9a:8c:b8:97:0d:49:
cc:54:78:a7:ac:40:e0:af:0a:2a:a6:ae:35:d8:a4:
2e:db:ca:08:34:d1:d2:66:4d:fe:73:22:42:00:04:
2d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1A:C5:E1:9C:D4:C3:6A:EF:33:3E:6B:BC:AE:17:5A:35:64:C3:79
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e312e302f32342d3234203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.1.0/24
Signature Algorithm: sha256WithRSAEncryption
86:80:1d:b4:43:84:07:bb:eb:e0:d5:f1:15:48:3b:8d:bb:b1:
fa:82:b0:31:68:2c:ea:a4:c8:fe:fe:0b:ae:70:80:ce:58:9d:
38:e4:21:75:74:12:9c:ab:d9:79:71:17:53:28:d0:ac:80:67:
ad:68:29:76:e0:ee:e9:fe:5c:5e:5c:0d:e0:f2:c8:11:6a:c0:
c8:65:71:df:23:b7:81:b4:04:36:44:85:c1:22:e3:6f:6b:48:
97:96:08:bb:57:bf:53:a4:55:0b:c3:54:83:5e:a4:7c:f8:31:
8d:dd:7a:f3:7b:1e:dd:9f:7e:63:2e:0f:34:05:66:a6:28:24:
24:fd:71:22:3f:64:4d:70:65:aa:65:95:8c:78:8e:b1:90:03:
d5:8b:80:64:90:37:92:34:c7:4a:98:d1:35:3c:3f:fd:40:7c:
c9:ba:d5:c0:75:d0:1c:e0:f1:95:ab:3a:f0:5d:ed:16:2e:a6:
4e:66:cf:6a:66:e6:21:be:c4:2f:8c:eb:33:43:24:21:6a:7a:
a6:bb:13:11:d0:7c:26:46:0f:e4:3e:37:1a:5f:ec:70:90:cc:
94:bd:52:9a:fc:18:bf:ce:c5:d1:0d:a2:a7:00:08:a6:c0:f2:
30:5c:f6:4f:89:f7:31:b2:ac:e1:61:2c:0f:5b:12:13:d6:a0:
6a:59:77:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net