Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31352e302f32342d3234203d3e203131393231.roa
File: 3230312e34392e31352e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier: fmZuY3x2Un29z66qdwBC0UexWvOYevoh3GWR3VxwLe0=
Subject key identifier: 02:5A:6E:A3:71:48:2E:F2:61:B5:9A:40:EA:58:00:0B:94:BE:7D:DB
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 092B81052CD360AA8D65F9B8CF556C9642DBAAFD
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31352e302f32342d3234203d3e203131393231.roa
Signing time: Wed 31 Jul 2024 13:42:54 +0000
ROA not before: Wed 31 Jul 2024 13:37:54 +0000
ROA not after: Wed 30 Jul 2025 13:42:54 +0000
asID: 11921
IP address blocks: 201.49.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:2b:81:05:2c:d3:60:aa:8d:65:f9:b8:cf:55:6c:96:42:db:aa:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Jul 31 13:37:54 2024 GMT
Not After : Jul 30 13:42:54 2025 GMT
Subject: CN=025A6EA371482EF261B59A40EA58000B94BE7DDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:be:8b:50:e1:03:1f:b2:1d:09:ae:ef:9c:
fe:68:81:90:57:7c:fe:9c:d3:fc:6f:c6:10:18:07:
97:9a:7c:4d:24:8e:93:47:e4:d1:98:d2:58:86:08:
65:a1:76:0b:a0:2a:08:fe:e6:d6:49:7e:70:cf:6d:
a4:0e:ae:a6:48:a4:f6:ad:e6:98:e3:18:7b:7f:2f:
3d:d6:9b:76:ed:10:4f:3f:03:2e:53:6a:dc:38:7a:
67:af:70:af:d3:ef:87:5f:9a:71:6a:22:7e:12:1c:
09:81:f9:12:d2:8c:5b:94:a7:d2:5c:fa:2b:dc:af:
65:36:53:9f:bb:c2:21:6d:b5:d5:59:19:51:27:55:
2c:c4:09:7d:37:fe:84:8d:ce:ac:e5:0b:d2:bb:1d:
c4:fe:9a:2c:fa:ba:56:67:84:ee:23:5f:c4:54:10:
11:07:f9:c6:b7:ef:c7:f2:e0:86:a0:0f:30:6e:de:
5f:ec:7f:0f:68:fd:57:2e:af:0f:69:ab:a9:c5:ff:
0f:76:a4:4e:de:16:f5:6a:5e:4c:7f:13:fc:e1:9f:
dd:bb:6a:b3:41:95:aa:a9:63:b9:c2:47:51:7e:62:
9c:22:9f:4e:e4:23:15:ba:fa:b5:03:ee:88:d2:1e:
55:56:2f:37:b0:59:fa:d6:c9:3f:bb:72:c0:86:4d:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5A:6E:A3:71:48:2E:F2:61:B5:9A:40:EA:58:00:0B:94:BE:7D:DB
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31352e302f32342d3234203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.15.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e1:d7:0e:ee:f8:08:da:b6:b2:fd:b2:c5:31:bb:1d:4d:4a:
97:ee:d8:c1:c3:8c:d4:5b:31:94:a7:2b:d2:c0:66:62:62:a4:
85:e6:42:75:e7:c5:91:3e:0a:7d:ae:55:9a:d1:c3:87:b6:1d:
da:f9:93:d1:25:9b:ba:27:66:f5:27:c5:8f:96:ef:24:e9:7f:
91:c8:02:3b:9b:28:7b:03:6b:c0:31:6a:1f:8c:6b:3d:f8:94:
b9:f5:bb:64:00:be:ef:2b:7c:1c:56:1e:69:16:80:c1:f8:ce:
32:e6:5c:af:68:d4:10:01:0f:97:70:14:4a:14:76:c3:57:93:
45:bb:8d:3d:a3:77:cd:ba:df:d2:4a:ac:c5:14:4d:05:0d:b0:
c9:3a:c7:28:c5:ba:78:9f:67:0c:a7:9d:44:97:8e:49:29:b4:
19:0e:ff:76:b4:33:12:75:cf:7c:0a:72:18:1b:9f:11:8f:74:
6c:86:e3:d4:11:c3:78:60:36:bb:d7:bb:00:a5:85:2c:1b:1c:
36:e9:16:4a:28:6b:f8:b4:18:00:2b:86:24:7e:65:c5:46:99:
4a:a7:3d:1f:f1:11:98:95:a9:64:9f:7c:d5:14:04:a3:fa:b0:
21:58:e8:7f:c0:35:da:ce:b0:dd:82:86:28:14:9a:58:b2:86:
87:ad:a1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net