• Our software update is now concluded. You will need to reset your password to log in. In order to do this, you will have to click "Log in" in the top right corner and then "Forgot your password?".
  • Welcome to PokéCommunity! Register now and join one of the best fan communities on the 'net to talk Pokémon and more! We are not affiliated with The Pokémon Company or Nintendo.
    Register

Research: Pokemon Bank Protocol

Full Metal

C(++) Developer.
810
Posts
16
Years
So apparently today the Pokemon Bank is available to Americans.

I want to know how it works. Obviously, this implies some sort of packet sniffing, etc. As of right now, I'm downloading the app onto my 3DS and just installed Wireshark & WinPCap. The end goal of this project to be, of course, running our own personal pokemon bank servers.

Just thought I'd post a thread to spark interest, and organize results. :)
 
Karjam

Karjam

AKA KarjamP
22
Posts
17
Years
First and foremost, we need to know how the 3DS connects to Nintendo Network, since Pokémon Bank needs it to work. (Even if it's just for logging in or for obtaining information about the user in order to match up with its own record of your stuff.)
 

Full Metal

C(++) Developer.
810
Posts
16
Years
Well my first attempts were fairly disappointing. I ran the packet sniffer, and I found my 3DS when it tried a connection test, and when it did street pass data. But as far as I can tell, my 3DS must be picking up some other source of wi-fi when connecting to the pokemon bank services. ie: I could not find any packets with my ds's MAC address or local IP. Much less determine where the heck it was making requests to/fro. Perhaps it disguises itself on the network as if it were actually two machines? I dunno man.

????????????
 
Lucariokid13

Lucariokid13

44
Posts
12
Years
  • Seen Feb 16, 2018
I've got a question what will be achieved from figuring the Pokemon Bank server out? I mean it's not like Gamefreak/Nintendo will abandon it when gen VII comes out, because they stated that Pokemon Bank will be the new method of bringing pokemon from older games to the current games.
 

Full Metal

C(++) Developer.
810
Posts
16
Years
Full Metal said:
The end goal of this project to be, of course, running our own personal pokemon bank servers.
Click to expand...

See the above quote. Honestly, if we are able to get this figured out, or if there are any changes to the GTS, we could potentially make a better version of the GTS for the pokemon games without needing to touch the ROM at all.
 

Chaos_Darkrai

173
Posts
12
Years
  • Seen Jan 2, 2015
Full Metal said:
See the above quote. Honestly, if we are able to get this figured out, or if there are any changes to the GTS, we could potentially make a better version of the GTS for the pokemon games without needing to touch the ROM at all.
Click to expand...

Yes! I would LOVE a gen 6 spoofed GTS! Gen 5's was good, but now it is impossible, because "craptendo" had to disable Wifi features for gen 5 and under. :( But lucky for me, I still can do hacked 'mons! With AR!! I would love to see this project get somewhere. Good luck to you!
 

3dd13

Leader of the Fallen
96
Posts
15
Years
well, if you fill me in on how to configure things to get going, i wont mind doing some sniffing on my end for ya. My router has the ability to log all data going through it.
 

Full Metal

C(++) Developer.
810
Posts
16
Years
3dd13 said:
well, if you fill me in on how to configure things to get going, i wont mind doing some sniffing on my end for ya. My router has the ability to log all data going through it.
Click to expand...

I was using a program called "Wireshark". However, your router is probably a bit different. If you figure out how to use your router for collecting data, let me know and give me some sample data, and I'll tell you what the various things are / what they mean.
 

Full Metal

C(++) Developer.
810
Posts
16
Years
* bump *

Okay guys, I've started looking into this again and I've actually got some data that can be worked with. [Here] is the packet capture file I got. I haven't had time to look at any of the data that was actually exchanged, but I did notice that the more things I did, the more packets were transferred so I know [ with tentative evidence ] for a fact that I'm capturing the data that's being communicated.

If anybody wants to look at this data [ it may be a few days before I can ], here's a description of what I did:

1) Got to the home screen
2) Started Pokemon Bank
3) Auto signed in. User name is FULLMETAL9725, and my nickname is "alpha" ( It's an inside joke with my friends. bite me. )
4) It took me to my boxes. This is where the most data was transferred, I think.
5) I moved a pokemon from box 2 ( Array aligned box 1 ) into box 1 ( Array aligned box 0 ). This pokemon was a Furfrou, iirc.
6) I exited / saved.

As a casual glance, anytime it made sense for data to be transferred, I noticed lots of UDP [ as opposed to TCP / TLSv1.1 ] packets. Anytime there was verification, there was a surge of TCP and TLSv1.1 - so it would make sense to think that authentication is done on Nintendo's servers, and then actual Pokemon Bank communication is hosted elsewhere.

Speculatively, I think the data is transferred in bulk rather than a streaming setup. ie: The 3DS requests the current Pokemon bank, and then the server responds with the entire storage. The user then can mess with the stuff [ this is trusted by GameFreak as much as they trust Nintendo to keep us out of their games. ] and then sends back the modified bank.

I'll outline the IP's I found using the UDP protocol:

http://who.is/whois-ip/ip-address/118.151.128.40
Code: 
[span="font-family:monospace;font-size:10pt;line-height:12pt;"]00000000  ea d0 01 1b 00 00 a1 af  90 00 00 00 00 00 cb 0c ........ ........
00000010  04 97 01 39 b4 a4 31 3b  27 5f b2 91 ac cc 00 04 ...9..1; '_......
00000020  02 00 00 00 01 10 b6 70  60 cf 88 a1 69 04 37 e5 .......p `...i.7.
00000030  f6 77 a1 30 60 51 04 01  00                      .w.0`Q.. .
00000039  ea d0 01 1f 08 00 a1 af  91 00 70 00 01 00 9b f3 ........ ..p.....
00000049  4d df 9d ae e3 38 55 fd  c1 1d 5f bc 96 68 00 04 M....8U. .._..h..
00000059  02 00 00 00 01 10 00 00  00 00 00 00 00 00 00 00 ........ ........
00000069  00 00 00 00 00 00 03 02  a0 9c 04 01 00 04 00 00 ........ ........
00000079  00 a2 d1 fc f7                                   .....
0000007E  ea d0 01 03 69 00 a1 af  e2 00 70 00 01 00 51 e6 ....i... ..p...Q.
0000008E  b6 f7 b4 86 cd 41 2c a1  97 14 56 5f 4b f8 02 01 .....A,. ..V_K...
0000009E  00 76 f1 a4 2e f1 50 23  a3 fe e5 54 7c 67 c7 1e .v....P# ...T|g..
000000AE  c9 8b 6c 41 cc 2c b5 b1  5e 7f 04 4f 00 00 d1 8b ..lA.,.. ^..O....
000000BE  99 1b 2e 19 45 f0 aa 79  a1 df 0c 50 2f 1c f4 de ....E..y ...P/...
000000CE  6d 73 13 51 08 cd f1 fb  2b d8 86 3a a8 c2 0e 5a ms.Q.... +..:...Z
000000DE  21 c3 6a 93 c8 bc 79 5e  7f 65 0f 36 7e cf 67 5a !.j...y^ .e.6~.gZ
000000EE  b6 08 47 14 a2 f0 4b 9f  75 c0 25 e4 9e 90 5a af ..G...K. u.%...Z.
000000FE  2b 87 ef 21 9e b3 69 9a  ee 1f                   +..!..i. ..
00000108  ea d0 01 03 04 00 a1 af  82 20 70 01 00 00 e4 db ........ . p.....
00000118  59 b0 6e 5b 41 f6 f2 ae  54 10 cc ed ea bd 02 01 Y.n[A... T.......
00000128  00 00 00 02 00                                   .....
0000012D  ea d0 01 03 30 00 a1 af  e2 00 70 00 02 00 07 a0 ....0... ..p.....
0000013D  ab 3e 8e 78 fb 22 77 bd  19 97 ce b5 d6 ac 02 01 .>.x."w. ........
0000014D  00 42 d3 a4 06 85 cd 60  2e b4 57 a6 0a bc 65 c9 .B.....` ..W...e.
0000015D  ee 8a 9b 68 d4 8f e2 11  50 29 29 6d 30 e1 72 e8 ...h.... P))m0.r.
0000016D  5c 73 cf b6 dd bb b3 4a  f1 6b bb 6a 3e 79 b6 90 \s.....J .k.j>y..
0000017D  9a ea d0 01 03 04 00 a1  af 82 20 70 01 00 00 82 ........ .. p....
0000018D  08 04 71 ab 85 e5 32 5b  5e f6 c8 a0 d2 eb 91 02 ..q...2[ ^.......
0000019D  01 00 00 00 03 00                                ......
000001A3  ea d0 01 03 18 00 a1 af  e2 00 70 00 03 00 c0 7c ........ ..p....|
000001B3  7d 58 eb 9e bf bb ae e6  e0 63 f2 e4 c4 d6 02 01 }X...... .c......
000001C3  00 d8 18 83 48 11 37 8a  4e cd 09 40 7b c5 64 c6 ....H.7. N..@{.d.
000001D3  69 2e 44 f3 7c 81 2d fe  91                      i.D.|.-. .
000001DC  ea d0 01 03 04 00 a1 af  82 20 70 01 00 00 d5 33 ........ . p....3
000001EC  98 f9 22 16 25 56 ab 30  e2 ed 78 8c 65 9f 02 01 ..".%V.0 ..x.e...
000001FC  00 00 00 04 00                                   .....
00000201  ea d0 01 03 52 00 a1 af  e2 00 70 00 04 00 47 a6 ....R... ..p...G.
00000211  5e 83 90 1e 84 88 fb bd  3f 33 52 df 71 86 02 01 ^....... ?3R.q...
00000221  00 14 42 89 e5 fa cf d6  b9 ad 80 04 23 83 6e 53 ..B..... ....#.nS
00000231  e8 68 b0 5a a4 ca 09 87  aa 86 e8 1b a8 fc 0a bc .h.Z.... ........
00000241  ca 08 d9 94 1e e6 50 05  97 2a c1 d4 0c 4a 6f a5 ......P. .*...Jo.
00000251  a1 90 fe 05 e9 84 cb d3  06 ed 24 b9 1a 46 b7 c5 ........ ..$..F..
00000261  03 30 77 56 53 91 f5 34  21 17 3d 14 1f 0e 1b c4 .0wVS..4 !.=.....
00000271  48 65 16                                         He.
00000274  ea d0 01 03 04 00 a1 af  82 20 70 01 00 00 d6 39 ........ . p....9
00000284  50 af c3 81 ec 9e 3e 28  5e ca 07 3e 04 8d 02 01 P.....>( ^..>....
00000294  00 00 00 05 00                                   .....
00000299  ea d0 01 03 40 00 a1 af  e2 00 70 00 05 00 fe df ....@... ..p.....
000002A9  fd a3 c6 1b 10 dd 56 10  03 50 43 c8 cb d4 02 01 ......V. .PC.....
000002B9  00 c3 c5 9f 33 11 3a 15  07 77 c0 0c 61 f6 fe ea ....3.:. .w..a...
000002C9  ce d0 56 7a 6e da 91 a7  d1 e8 a8 c8 f3 f5 1f df ..Vzn... ........
000002D9  bb 4d 34 82 03 cb ca f8  b8 76 8e 84 e7 c5 0d 2a .M4..... .v.....*
000002E9  19 a4 8b d9 8e 66 3c 06  f8 7f 78 e8 c9 08 a0 a2 .....f<. ..x.....
000002F9  87                                               .
000002FA  ea d0 01 03 04 00 a1 af  82 20 70 01 00 00 c4 28 ........ . p....(
0000030A  ff 46 9a 3e 8f b8 82 05  54 21 3c 58 f0 3f 02 01 .F.>.... T!<X.?..
0000031A  00 00 00 06 00                                   .....
0000031F  ea d0 01 03 04 00 a1 af  82 20 70 01 00 00 2b e9 ........ . p...+.
0000032F  ac 53 23 f9 7c bf 18 6e  e4 b2 ae e8 72 df 02 01 .S#.|..n ....r...
0000033F  00 00 00 07 00                                   .....
00000344  ea d0 01 03 04 00 a1 af  82 20 70 01 00 00 18 4e ........ . p....N
00000354  a3 16 0f 7a ff bb 11 b9  ee 2b 44 dc f7 fc 02 01 ...z.... .+D.....
00000364  00 00 00 08 00                                   .....
00000369  ea d0 01 03 42 00 a1 af  e2 00 70 00 06 00 67 c2 ....B... ..p...g.
00000379  2b f6 58 33 02 c2 b1 5e  1b 12 e5 ae 12 62 02 01 +.X3...^ .....b..
00000389  00 47 20 39 eb c4 d7 32  78 5c 3f 45 4f a3 b8 64 .G 9...2 x\?EO..d
00000399  a5 a8 86 d8 f3 14 50 e7  e8 cf a4 32 53 61 35 12 ......P. ...2Sa5.
000003A9  4f 23 c2 41 27 28 5a df  d3 7c 18 63 e2 b9 7a d3 O#.A'(Z. .|.c..z.
000003B9  12 78 53 bd 92 93 23 57  c1 73 92 53 81 a3 80 5d .xS...#W .s.S...]
000003C9  fc 80 6a                                         ..j
000003CC  ea d0 01 03 40 00 a1 af  e2 00 70 00 07 00 68 f0 ....@... ..p...h.
000003DC  dd a5 55 17 ba 61 d1 70  37 2b 54 7e 4b e0 02 01 ..U..a.p 7+T~K...
000003EC  00 69 1c d1 19 14 06 2d  03 39 8f ea 25 21 85 64 .i.....- .9..%!.d
000003FC  ae 00 32 e0 d1 27 4c 1c  7f fe 93 a2 f4 93 32 14 ..2..'L. ......2.
0000040C  84 ee 7f 22 70 19 da a6  eb af 6b d3 0b c7 6a 9a ..."p... ..k...j.
0000041C  99 70 98 b9 d2 31 35 47  e3 4c cd 0a 0f c8 ba 19 .p...15G .L......
0000042C  3b ea d0 01 03 04 00 a1  af 82 20 70 01 00 00 94 ;....... .. p....
0000043C  3b ba 4c ab 79 1e 90 2a  8f 57 33 e4 05 6b cb 02 ;.L.y..* .W3..k..
0000044C  01 00 00 00 09 00                                ......
00000452  ea d0 01 03 04 00 a1 af  82 20 70 01 00 00 96 a3 ........ . p.....
00000462  91 6d 52 76 4c 11 31 1a  2e 24 94 6d de f0 02 01 .mRvL.1. .$.m....
00000472  00 00 00 0a 00                                   .....
00000477  ea d0 01 03 04 00 a1 af  82 20 70 01 00 00 a4 0e ........ . p.....
00000487  80 35 da b4 34 0e 46 81  d4 8b 05 ba 59 4e 02 01 .5..4.F. ....YN..
00000497  00 00 00 0b 00                                   .....
0000049C  ea d0 01 03 18 00 a1 af  e2 00 70 00 08 00 75 b8 ........ ..p...u.
000004AC  86 b0 c7 f3 48 f7 54 29  b7 1c c9 b2 cf 59 02 01 ....H.T) .....Y..
000004BC  00 43 0a ee da c2 c3 fe  b3 7d f0 3d 8a ac fc fa .C...... .}.=....
000004CC  b5 7a c3 5d b7 e6 9f c5  41                      .z.].... A
000004D5  ea d0 01 00 00 00 a1 af  94 00 70 00 01 00 f3 66 ........ ..p....f
000004E5  b4 e6 8c a1 f1 c2 93 fa  1b 3d 0d c8 36 e1       ........ .=..6.
000004F3  ea d0 01 00 00 00 a1 af  94 00 70 00 02 00 05 98 ........ ..p.....
00000503  c2 94 87 4f 0c 16 fe f1  fe ab 1d ee c5 3c       ...O.... .....<
00000511  ea d0 01 00 00 00 a1 af  94 00 70 00 03 00 21 2b ........ ..p...!+
00000521  ab 0b ed e0 7b 61 06 a9  a3 1c 09 e3 e4 1f       ....{a.. ......
0000052F  ea d0 01 03 0e 00 a1 af  e2 00 70 00 09 00 6e b2 ........ ..p...n.
0000053F  5c fe a5 95 03 bb 4f 3b  d5 e3 c4 76 32 fc 02 01 \.....O; ...v2...
0000054F  00 75 69 05 20 3d c8 27  06 7b 59 e5 4b a0 c5    .ui. =.' .{Y.K..
0000055E  ea d0 01 03 04 00 a1 af  82 20 70 01 00 00 cb 7e ........ . p....~
0000056E  ea 65 2e af 76 ac 35 9b  dd 99 4f 34 1a 91 02 01 .e..v.5. ..O4....
0000057E  00 00 00 0c 00                                   .....
00000583  ea d0 01 03 04 00 a1 af  82 20 70 01 00 00 91 f4 ........ . p.....
00000593  e9 d4 d5 8a cc 40 77 4b  8d 20 d8 54 52 13 02 01 .....@wK . .TR...
000005A3  00 00 00 0d 00                                   .....
000005A8  ea d0 01 03 f8 00 a1 af  e2 00 70 00 0a 00 15 03 ........ ..p.....
000005B8  69 a5 12 2f ab 0f 0f 52  fc 66 e3 ed ef ca 02 01 i../...R .f......
000005C8  00 05 6d 53 b1 5c 39 41  b5 6c 42 dc 54 83 8a 31 ..mS.\9A .lB.T..1
000005D8  f0 30 56 7c 84 31 4a db  c5 79 0a 0b 42 b5 e8 52 .0V|.1J. .y..B..R
000005E8  57 23 70 b7 84 3e 48 57  8c 69 21 2f b9 ff 0a 78 W#p..>HW .i!/...x
000005F8  b7 d6 f6 96 43 bc 72 b5  a9 19 39 2a 51 eb 38 4c ....C.r. ..9*Q.8L
00000608  f0 8b 74 f8 45 7f a4 94  bb c5 b6 49 4f 90 55 17 ..t.E... ...IO.U.
00000618  2a f4 0d 1d 2c 59 70 82  5e 93 e4 01 2f 8e 1b 1a *...,Yp. ^.../...
00000628  d4 a8 26 a0 41 0f d0 ab  22 8b 61 4c 06 9f d9 1d ..&.A... ".aL....
00000638  28 5f d9 83 73 5f 21 df  d5 ba bb 4f 51 c4 ce fe (_..s_!. ...OQ...
00000648  1a d7 3d eb 1c 8e 2c 9c  75 a7 50 f3 8b fd 80 af ..=...,. u.P.....
00000658  70 fb b3 17 d5 3c f6 06  7b 4b 03 45 81 be 53 be p....<.. {K.E..S.
00000668  43 22 14 ba 1d 64 d2 ad  2e 3e b3 2f 2c 3f 38 fb C"...d.. .>./,?8.
00000678  41 9b 91 09 2d 6f 68 59  e6 3c aa 06 b6 0c c1 34 A...-ohY .<.....4
00000688  7e af 9d 3d 0f fd b4 10  f9 46 21 45 4e a4 77 36 ~..=.... .F!EN.w6
00000698  a8 50 2b dd 45 43 4c 60  68 e1 fc 3f 4c ca 42 d1 .P+.ECL` h..?L.B.
000006A8  ce 6c b7 62 48 6e ff 84  fe ba 35 4d 35 92 35 4a .l.bHn.. ..5M5.5J
000006B8  50 fc ad 88 5a ce 7b 74  70                      P...Z.{t p
000006C1  ea d0 01 03 04 00 a1 af  82 20 70 01 00 00 83 58 ........ . p....X
000006D1  aa 45 bb 79 f7 35 f1 ea  cd 8a 78 bf ad 0b 02 01 .E.y.5.. ..x.....
000006E1  00 00 00 0e 00                                   .....
000006E6  ea d0 01 03 0e 00 a1 af  e2 00 70 00 0b 00 08 c4 ........ ..p.....
000006F6  ec 04 84 2c 7b 13 11 7c  e9 fd f9 b5 52 ad 02 01 ...,{..| ....R...
00000706  00 5d 09 a4 03 4c 2b e7  86 77 94 f4 42 5f e1    .]...L+. .w..B_.
00000715  ea d0 01 00 00 00 a1 af  94 00 70 00 04 00 eb 26 ........ ..p....&
00000725  d4 fd 87 90 78 ed ee 9e  d5 8b ad b6 0a 61       ....x... .....a
00000733  ea d0 01 00 00 00 a1 af  94 00 70 00 05 00 5b b9 ........ ..p...[.
00000743  3d 54 7e 3e 82 35 cc dd  0d 44 66 d7 fc f5       =T~>.5.. .Df...
00000751  ea d0 01 00 00 00 a1 af  94 00 70 00 06 00 8b ba ........ ..p.....
00000761  44 37 be b4 be 6f 50 f3  be d4 20 5c 79 23       D7...oP. .. \y#
0000076F  ea d0 01 00 00 00 a1 af  94 00 70 00 07 00 5d 0c ........ ..p...].
0000077F  b8 e0 59 10 f1 ae 5f fa  82 73 da 64 0a 86       ..Y..._. .s.d..
0000078D  ea d0 01 03 92 02 a1 af  e2 00 70 00 0c 00 b8 51 ........ ..p....Q
0000079D  a1 e1 57 54 bc 75 46 9f  65 a8 0a 53 20 b2 02 01 ..WT.uF. e..S ...
000007AD  00 27 49 f6 2b 7a 5b fb  81 34 0a db 8f 26 22 3f .'I.+z[. .4...&"?
000007BD  93 18 7e 40 98 96 cd 6f  52 6a 39 bb 40 be 69 ef [email protected] [email protected].
000007CD  70 d3 7b 28 1b b1 8b 6c  b8 0e 57 0a df 37 ff a7 p.{(...l ..W..7..
000007DD  b2 93 d7 f9 c3 b1 4e 56  0f 89 e2 3c aa ea 24 32 ......NV ...<..$2
000007ED  79 3c 75 e9 63 a3 6e 6c  01 dc 0f 21 e2 36 f4 aa y<u.c.nl ...!.6..
000007FD  b8 84 c5 3d ce a8 b7 b9  31 77 d7 8f 45 37 c8 d0 ...=.... 1w..E7..
0000080D  10 99 50 0e c6 9f 52 cf  7d e4 34 bb 8b 1a 6a d3 ..P...R. }.4...j.
0000081D  15 4a 2b 30 ff af f6 bd  5c 7a 26 9e 63 19 9b 54 .J+0.... \z&.c..T
0000082D  41 de 54 b8 3f f5 47 ff  7b 23 d9 d6 62 6f 95 70 A.T.?.G. {#..bo.p
0000083D  46 f9 24 1f b7 d5 4d 98  d6 24 f6 1e 53 2d 94 d6 F.$...M. .$..S-..
0000084D  eb a1 6f 76 59 6a 13 86  bc 6d 91 01 a8 c9 46 d9 ..ovYj.. .m....F.
0000085D  e4 4a 75 46 83 8e 0c ec  62 be 79 5b 17 74 cf b7 .JuF.... b.y[.t..
0000086D  f9 62 a6 aa 35 c2 40 2d  69 16 6c 60 bc a7 d7 81 .b..5.@- i.l`....
0000087D  39 f5 d0 6a c6 fa c1 db  cb 88 93 48 b0 a4 5f 32 9..j.... ...H.._2
0000088D  58 61 b4 68 f7 cc db b3  6a 14 78 7b fe f3 21 77 Xa.h.... j.x{..!w
0000089D  47 d5 c5 26 c9 9c 97 5f  04 77 ca 54 31 07 bb 3a G..&..._ .w.T1..:
000008AD  e7 33 74 61 22 41 76 cc  4b b6 a7 c9 54 df 54 3d .3ta"Av. K...T.T=
000008BD  2b 45 56 a4 29 13 1e 99  e7 eb 33 9c 2d fc dd 8a +EV.)... ..3.-...
000008CD  9d a9 38 be 3f 54 4d 89  64 69 a4 b3 f6 dd 7a f5 ..8.?TM. di....z.
000008DD  44 e1 5e cc 6b 65 b2 b7  74 fa 0b c4 75 da b2 66 D.^.ke.. t...u..f
000008ED  4e bb 8b 2e 79 c5 12 c5  0f 3b f7 72 88 4f 03 93 N...y... .;.r.O..
000008FD  55 5e be 8c 22 85 c7 38  9a e6 f5 ed 62 a1 e3 33 U^.."..8 ....b..3
0000090D  be e0 bf 9a 19 aa 87 27  47 41 52 bc 83 33 39 d1 .......' GAR..39.
0000091D  e7 dd 05 eb 68 a4 74 b3  87 66 6e 4b 16 b3 a4 bc ....h.t. .fnK....
0000092D  07 df af 38 f9 93 01 4b  72 17 63 7c b2 e8 a0 6c ...8...K r.c|...l
0000093D  a0 7c 25 56 08 4f 25 87  ed 9e 71 89 39 c8 d0 21 .|%V.O%. ..q.9..!
0000094D  24 6e d2 98 5c b4 99 e1  f3 63 d5 34 b3 91 03 7c $n..\... .c.4...|
0000095D  93 82 01 91 82 c8 4b 58  55 8d 90 2d e3 3a d4 81 ......KX U..-.:..
0000096D  9f 52 84 8c 7d 4c 3d 45  39 f0 34 7d 6d 38 36 eb .R..}L=E 9.4}m86.
0000097D  98 6d 0c 74 2e 3f 09 f0  c8 49 9a 43 f2 ed 9f b8 .m.t.?.. .I.C....
0000098D  a4 81 cc 13 20 87 40 26  0f 20 18 01 1a 41 68 38 .... .@& . ...Ah8
0000099D  90 05 9d f2 5f 8d 4f 01  03 f6 08 95 31 fb b3 6c ...._.O. ....1..l
000009AD  50 cf 37 5f 11 af 57 1b  57 1f f1 0b 57 fc 66 b6 P.7_..W. W...W.f.
000009BD  a8 0c 55 76 f4 77 49 94  3b 99 a2 df 0f 1f 6a 43 ..Uv.wI. ;.....jC
000009CD  9f 76 cb c5 96 53 bc e7  15 40 c7 4d 1c 60 de 3a .v...S.. [email protected].`.:
000009DD  2d c8 00 fa 50 72 df c9  a9 26 35 fb 22 7d c7 c6 -...Pr.. .&5."}..
000009ED  05 31 80 62 b2 3d 09 d7  83 7f 10 9b 49 e6 03 fa .1.b.=.. ....I...
000009FD  9b 82 bd 41 af f8 23 48  a1 88 c8 11 1c 5d bf c7 ...A..#H .....]..
00000A0D  2b f4 85 34 69 f7 9f ad  ab 18 92 f1 c6 58 91 9d +..4i... .....X..
00000A1D  20 dc d0 6d 04 8d f3 f5  b6 24 d2 b9 43 9c f4 f9  ..m.... .$..C...
00000A2D  9e 21 e4 5b 9f b5 15 4c  79 45 50 74 0e 5a 31 2f .!.[...L yEPt.Z1/
00000A3D  70 fa 5d ea d0 01 03 04  00 a1 af 82 20 70 01 00 p.]..... .... p..
00000A4D  00 f0 1c 23 8a 22 29 57  c5 94 48 24 d7 41 02 a9 ...#.")W ..H$.A..
00000A5D  95 02 01 00 00 00 0f 00                          ........ 
00000A65  ea d0 01 00 00 00 a1 af  94 00 70 00 08 00 b3 71 ........ ..p....q
00000A75  51 d4 f6 3a bf e5 a3 eb  58 8c 52 50 9f 42       Q..:.... X.RP.B
00000A83  ea d0 01 00 00 00 a1 af  94 00 70 00 09 00 ce e0 ........ ..p.....
00000A93  5d 40 51 b5 cd 79 83 0d  b1 cc cd 56 f6 c8       ]@Q..y.. ...V..
00000AA1  ea d0 01 00 00 00 a1 af  94 00 70 00 0a 00 e0 62 ........ ..p....b
00000AB1  45 5e 72 ff f4 70 33 dc  33 07 6e fe 3f cb       E^r..p3. 3.n.?.
00000ABF  ea d0 01 03 0e 00 a1 af  e2 00 70 00 0d 00 f4 2d ........ ..p....-
00000ACF  8d 01 ce 3e c0 4f d7 c7  b2 3f 68 4d f8 ab 02 01 ...>.O.. .?hM....
00000ADF  00 79 26 1f 27 91 82 9a  90 99 7a 85 72 62 d4    .y&.'... ..z.rb.
00000AEE  ea d0 01 03 04 00 a1 af  82 20 70 01 00 00 9d 77 ........ . p....w
00000AFE  be 4d 4a 69 49 6a 1d a6  f8 b9 7f f1 d3 59 02 01 .MJiIj.. .....Y..
00000B0E  00 00 00 10 00                                   .....
00000B13  ea d0 01 00 00 00 a1 af  93 00 70 00 11 00 1d 8c ........ ..p.....
00000B23  29 70 5f 9e c9 70 46 19  5f aa 1e f1 ee a9       )p_..pF. _.....
00000B31  ea d0 01 00 00 00 a1 af  93 00 70 00 11 00 1d 8c ........ ..p.....
00000B41  29 70 5f 9e c9 70 46 19  5f aa 1e f1 ee a9       )p_..pF. _.....
00000B4F  ea d0 01 00 00 00 a1 af  93 00 70 00 11 00 1d 8c ........ ..p.....
00000B5F  29 70 5f 9e c9 70 46 19  5f aa 1e f1 ee a9       )p_..pF. _.....
[/span]

http://who.is/whois-ip/ip-address/203.180.85.73
Code: 
[span="font-family:monospace;font-size:10pt;line-height:12pt;"]00000000  a1 af 10 00 00 00 00 00  00 00 00 2c af a2 8b 6f ........ ...,...o
00000010  a1 af 11 00 1f fb 91 7d  ed 01 00 00 00 00 00 04 .......} ........
00000020  00 00 00 a5 b0 46 ac cb                          .....F.. 
00000028  a1 af 12 00 1f 78 56 34  12 02 00 00 9f          .....xV4 .....
00000035  a1 af 62 00 1f 4e e1 4d  0a 01 00 00 31 95 67 2e ..b..N.M ....1.g.
00000045  f4 bb 1d 4b 78 f4 ac b8  7a fb 8f d3 ce a8 b4 15 ...Kx... z.......
00000055  7a 93 7e a4 20 5e 87 10  84 58 ae ab a8 2c 5e bc z.~. ^.. .X...,^.
00000065  2f e5 76 d0 1a b0 1b 9a  58 84 43 27 62 5e 08 1c /.v..... X.C'b^..
00000075  64 2f ce 87 07 8b 67 4a  42 1a 39 35 02 30 82 9c d/....gJ B.95.0..
00000085  9a 07 1a 59 c1 c5 a7 a9  3a ba d9 cc b5 91 94 0a ...Y.... :.......
00000095  1b 23 ba ed 2e 92 dc 81  94 4e 72 7b 95 f7 d4 26 .#...... .Nr{...&
000000A5  4f 59 be 3d cd bb                                OY.=..
000000AB  a1 af 12 00 1f 78 56 34  12 03 00 00 a0          .....xV4 .....
000000B8  a1 af 62 00 1f be c3 9c  32 02 00 00 12 9d 4e bf ..b..... 2.....N.
000000C8  f0 f7 b6 c7 9d 52 4a 5e  34 6b 86                .....RJ^ 4k.
000000D3  a1 af 12 00 1f 78 56 34  12 04 00 00 a1          .....xV4 .....
000000E0  a1 af 62 00 1f 97 dc 32  32 03 00 00 2f 5c 99 36 ..b....2 2.../\.6
000000F0  90 a8 25 60 8c 2f 4a f7  5b 25 b3 4d ea 87 e0 99 ..%`./J. [%.M....
00000100  40 f2 c1 14 59 5a 94 a9  34 1d a8 11 50 bc 90 3f @...YZ.. 4...P..?
00000110  4d 10 49 d7 51 83 5e 1f  8e af b8 46 84 4b 49 f4 M.I.Q.^. ...F.KI.
00000120  82 91 c2 64 45 0a 79 4a  80 48 c6 4b 16 ff ce 7a ...dE.yJ .H.K...z
00000130  c0 9e 46 e7 43 21 9f 55  e5 52 d2 c1 27 84 f6 06 ..F.C!.U .R..'...
00000140  fd 8c d1 67 6b 57 06 d6  fd 83 68 3c 9e a2 cb 2e ...gkW.. ..h<....
00000150  c0 93 e8 c3 77 0b 15 56  e4 57 e7 96 1e d7 06 41 ....w..V .W.....A
00000160  57 e6 bc 5f a7 27 51 e4  4c ee ec 04 d5 f6 f3 85 W.._.'Q. L.......
00000170  6d 1e ac 1a 01 43 64 56  a6 ae 2e 54 c8 ee 3e bb m....CdV ...T..>.
00000180  d9 2c 0a a6 0e 79 3a 21  e7 c6 0c 92 61 32 fe 14 .,...y:! ....a2..
00000190  57 04 d1 5c cd ff 6b 31  1a ea df 02 7f 21 44 99 W..\..k1 .....!D.
000001A0  22 52 90 6a fe 4c 1e 84  04 0a 1a ba 1c d2 15 59 "R.j.L.. .......Y
000001B0  16 f6 ae 05 a2 34 d0 de  84 7c 2e 72 92 c5 8e cb .....4.. .|.r....
000001C0  4c 9c 0a f3 dd b2 4f 9f  40 14 bd 3e 28 e7 b7 05 L.....O. @..>(...
000001D0  34 8d 9b 18 ab 72 45 b6  57 a6 57 73 09 5f 58 79 4....rE. W.Ws._Xy
000001E0  51 f5 b3 c5 ef 2a 19 7d  60 f4 46 1c c7 45 18 0b Q....*.} `.F..E..
000001F0  4f 7c ab bb cb ef 7b bb  c7 8c b5 ec 3d 06 6b c4 O|....{. ....=.k.
00000200  bd 22 90 fe fb 2d e3 9f  cb 96 8d 44 97 5c fe 6f ."...-.. ...D.\.o
00000210  7f 5d 24 dd fe 3b fe 33  a5 23 57 c3 85 0f 98 9d .]$..;.3 .#W.....
00000220  3f 7e 32 e3 4f 1d cc 61  68 68 ca cb 43 80 07 22 ?~2.O..a hh..C.."
00000230  9c 9a a6 97 c6 3b 7d 6d  b6 6e a9 a3 7c b5 ce 05 .....;}m .n..|...
00000240  d9 88 8f 40 bb 47 03 d0  91 64 af 4e 62 ea a7 05 [email protected].. .d.Nb...
00000250  8f 26 0f c5 f2 d8 42 15  cb 7c db c7 eb 4b 13 27 .&....B. .|...K.'
00000260  cd 59 09 b3 5a 90 83 2d  33 bb d0 59 ba 5d 5e f4 .Y..Z..- 3..Y.]^.
00000270  42 36 d0 07 19 9d 4c 67  a3 d0 80 fc ee 80 ad 14 B6....Lg ........
00000280  aa 8e ec ec a9                                   .....
00000285  a1 af 12 00 1f 78 56 34  12 05 00 00 a2          .....xV4 .....
00000292  a1 af 62 00 1f ec 96 ec  80 04 00 01 1f 3b 2d 9f ..b..... .....;-.
000002A2  7a ee be 27 22 6d 15 82  2f f3 29 6a 67 25 f9 e3 z..'"m.. /.)jg%..
000002B2  da ed 0b a6 79 da d2 d2  96 51 c9 e9 64 7a 84 7c ....y... .Q..dz.|
000002C2  18 b0 7c 61 46 fc 6f 1a  1b da d0 6f d7 95 20 cd ..|aF.o. ...o.. .
000002D2  f2 0e 4d 47 7d 4d 97 cf  bf 78 d9 ab 63 0a a7 e9 ..MG}M.. .x..c...
000002E2  ce 67 78 55 90 c4 fb 41  af 6f 9e 5e b4 25 c8 b1 .gxU...A .o.^.%..
000002F2  23 8c f8 ce 5e c3 43 cc  b5 5d 27 1f 2e 4f e9 42 #...^.C. .]'..O.B
00000302  ce c1 2a be 25 88 87 f1  fb ca f4 0a 4a c1 6d 58 ..*.%... ....J.mX
00000312  1f 0f 5d 22 99 b3 c4 1e  01 9b 2d 5d 1f 50 46 b3 ..]".... ..-].PF.
00000322  d2 ef 64 3c 74 7f 8b eb  69 df 68 ff a4 48 10 7e ..d<t... i.h..H.~
00000332  23 bb 54 71 b6 99 7e 8c  0b 94 eb c4 53 52 6b ad #.Tq..~. ....SRk.
00000342  c1 96 4b eb 20 15 3c d7  68 f5 ca a6 3a 28 ea 09 ..K. .<. h...:(..
00000352  7b 40 87 49 97 65 64 bb  61 25 85 47 7c e5 47 9d {@.I.ed. a%.G|.G.
00000362  b2 fe ab 1b 42 56 95 10  62 7f e6 a3 47 27 30 c2 ....BV.. b...G'0.
00000372  ee 4c 2a ef c4 7f 18 3d  20 f5 2f a2 9f cd 0a e2 .L*....=  ./.....
00000382  0d 1d 39 3a 9b 55 bc 70  c8 fe 5f 11 83 de a4 56 ..9:.U.p .._....V
00000392  62 09 24 37 75 33 f0 31  88 73 99 1d 06 f9 53 c5 b.$7u3.1 .s....S.
000003A2  0c 77 ec 27 7e e4 af 35  b7 80 94 0a a1 64 b9 0e .w.'~..5 .....d..
000003B2  fd 83 c0 ca 10 25 24 ad  1c f0 67 8a c4 6a b4 01 .....%$. ..g..j..
000003C2  bb 54 19 c3 e0 e2 7b fa  02 19 3b 4e a5 b4 31 00 .T....{. ..;N..1.
000003D2  e0 90 5c cc 66 db 90 fe  59 14 07 f5 e7 33 14 10 ..\.f... Y....3..
000003E2  e7 a2 1f 12 6d b2 91 ea  42 48 5c 0e 0d 94 b7 e7 ....m... BH\.....
000003F2  d8 db cb 59 b7 0a c4 df  7e f2 6f 6c c7 08 9d db ...Y.... ~.ol....
00000402  02 69 f6 4b 87 58 69 c1  e7 eb 06 51 41 47 19 28 .i.K.Xi. ...QAG.(
00000412  00 41 9c eb 28 94 db c1  00 23 bd a0 77 00 8f f4 .A..(... .#..w...
00000422  5b 50 00 aa 68 49 9b 99  b8 85 93 59 5f cf 19 4f [P..hI.. ...Y_..O
00000432  b1 b3 a4 87 57 55 a7 10  67 c3 0d 08 82 a9 e2 80 ....WU.. g.......
00000442  93 da 6d ed b6 ac c2 cf  37 56 ac 16 70 60 cd 17 ..m..... 7V..p`..
00000452  99 c3 8c 1a a1 83 cd 53  06 76 43 8b 97 e1 57 b9 .......S .vC...W.
00000462  23 a2 96 05 e6 bd 6b 7a  b5 4e 91 a6 5a fc 63 06 #.....kz .N..Z.c.
00000472  a2 20 b0 ea f0 65 5f 97  ee ae 67 e1 07 83 ac 82 . ...e_. ..g.....
00000482  02 a4 4a 30 10 99 94 77  25 db 4e 0c dd f3 9b df ..J0...w %.N.....
00000492  6c c2 db 37 c5 e4 a2 02  88 b3 7c 50 d3 71 16 20 l..7.... ..|P.q. 
000004A2  3f 64 03 f0 85 bd e9 91  8b 98 8c c4 cc 27 c6 32 ?d...... .....'.2
000004B2  f4 7e bf f0 e3 7d e0 54  d8 98 03 fd 79 88 52 9c .~...}.T ....y.R.
000004C2  0e b9 7e 53 e0 ec 61 12  f5 25 0b 88 44 a1 15 cf ..~S..a. .%..D...
000004D2  f3 45 3c fc 7f af 69 82  89 e6 1c ed cc ab e0 db .E<...i. ........
000004E2  76 a7 2d 30 80 73 92 5d  84 2e d0 ab 24 7d 1d b1 v.-0.s.] ....$}..
000004F2  3c 82 e1 07 54 a1 7f b2  55 c7 bc 31 2f 84 08 35 <...T... U..1/..5
00000502  0b 15 b2 d6 48 87 bd a5  59 1a c0 b7 75 0a 96 6d ....H... Y...u..m
00000512  86 e6 9c f6 30 90 a6 da  f1 09 31 a6 32 e0 89 40 ....0... ..1.2..@
00000522  fe 78 52 d0 44 91 17 7e  48 eb 72 99 c5 26 76 ca .xR.D..~ H.r..&v.
00000532  51 4e 52 90 97 95 e2 34  42 58 ff 90 d2 b3 c0 6b QNR....4 BX.....k
00000542  b2 d6 f4 7a 94 25 e9 72  c1 a1 17 50 d1 59 6d 38 ...z.%.r ...P.Ym8
00000552  6d f1 22 cc 94 67 25 26  fb 68 43 3a 27 93 3e 27 m."..g%& .hC:'.>'
00000562  1e 9f c5 f5 f7 c8 0c b3  24 ec 8a c4 fd ef 7c df ........ $.....|.
00000572  23 62 ad 6f bc 53 be c1  df dc ca f7 64 b4 c8 fd #b.o.S.. ....d...
00000582  79 bf c5 07 c2 16 09 8c  ad 01 e1 ec 7a 8b ef 93 y....... ....z...
00000592  63 b8 39 a6 31 cc ca 0d  62 a6 1d 2e 9c c2 4c fe c.9.1... b.....L.
000005A2  be d0 de 0a 96 4a 33 45  25 58 d5 76 11 92 e9 7c .....J3E %X.v...|
000005B2  b8 23 96 77 85 f6 2c c2  f7 7d f2 8a 56 e7 7b b2 .#.w..,. .}..V.{.
000005C2  57 1d f1 1e cc e9 bd 2f  7c bb 63 6c f3 99 f9 47 W....../ |.cl...G
000005D2  b6 dd bf e5 e4 0d 11 17  46 9a 8a d8 da d4 b3 9f ........ F.......
000005E2  67 c3 e4 0c 97 1f e2 bd  30 89 a4 57 75 61 6d 01 g....... 0..Wuam.
000005F2  8f 12 f0 53 e1 21 ab e2  2f 15 05 4a 9e 29 3b 01 ...S.!.. /..J.);.
00000602  e1 7d 37 13 fc e2 9f 96  df 4a db ee 9c 5d 87 96 .}7..... .J...]..
00000612  91 29 40 96 78 26 57 d5  6d 64 7a 69 bc de 03 c8 .)@.x&W. mdzi....
00000622  63 4b 46 f7 be 23 93 3e  75 39 ab bf 05 ab 66 dd cKF..#.> u9....f.
00000632  0b c1 1d bb 69 32 b0 d5  24 b7 93 d2 69 0e b2 8f ....i2.. $...i...
00000642  7d b8 c9 f9 c5 4a 89 6a  97 67 06 a1 07 a8 ee 9f }....J.j .g......
00000652  7e 3c e4 b1 ad 10 87 3e  d8 1b a3 63 af 66 f1    ~<.....> ...c.f.
00000661  a1 af 62 00 1f a0 48 60  da 05 00 00 25 f4 0b ad ..b...H` ....%...
00000671  ae ec e2 7c 22 1c b4 ce  67 a0 5e 35 63 c7 ed cd ...|"... g.^5c...
00000681  60 06 81 e6 a4 c4 4b 5f  67 da 0a 71 c9 fe 61 ca `.....K_ g..q..a.
00000691  0a fc 74 f4 be b0 73 7f  08 8b 59 95 5f fc c1 8b ..t...s. ..Y._...
000006A1  e6 f4 0c 03 73 35 53 1a  5b 9b 37 fb c8 25 15 fd ....s5S. [.7..%..
000006B1  66 12 48 95 e9 e8 bc 3f  e5 c9 2b 00 75 3a 45 20 f.H....? ..+.u:E 
000006C1  8f 46 c9 fb f6 81 83 4f  bd 4c a5 f8 c5 7a 4d 95 .F.....O .L...zM.
000006D1  9d f4 14 dd aa ca 42 73  3c 34 08 06 03 f8 16 cf ......Bs <4......
000006E1  fb 68 b7 c5 ab 2c a9 16  d2 d6 43 85 aa 96 0e 1c .h...,.. ..C.....
000006F1  af d9 02 0a 5a e1 c1 d2  1d eb 62 46 bc c5 cd 35 ....Z... ..bF...5
00000701  9c 1b 4b ad 38 b4 ad 1b  f4 80 a4 ff 19 55 4e 8e ..K.8... .....UN.
00000711  e5 23 37 3e 39 c1 97 f7  87 cc b0 c4 7e 39 95 29 .#7>9... ....~9.)
00000721  8b e8 25 94 5e 6e 6a db  d2 f7 c2 9a 81 04 d5 0c ..%.^nj. ........
00000731  fc 30 c0 8c a7 f3 cd ec  71 89 0c 09 5c 0f 9b 01 .0...... q...\...
00000741  d5 8d a7 58 5c 1b 80 d1  d6 80 68 99 53 fb d4 91 ...X\... ..h.S...
00000751  0b c2 58 16 1c 0b 1f c9  81 1f 3f 0a 0a 24 91 07 ..X..... ..?..$..
00000761  24 3b 7c 4c 77 a7 63 27  43 41 7f de 9b dc 53 1c $;|Lw.c' CA....S.
00000771  fd 5a ba 42 0e e6 95 34  e8 3f 5c 37 a3 44 6b 15 .Z.B...4 .?\7.Dk.
00000781  b8 bc 9f fa 56 4d 7b 3e  2c c3 14 90 be 94 96 02 ....VM{> ,.......
00000791  cb 28 9d c8 e3 03 a3 44  fa f8 c9 49 97 75 5d 12 .(.....D ...I.u].
000007A1  1c 73 f5 d8 86 26 cd 08  44 62 07 b9 6a 00 fc b4 .s...&.. Db..j...
000007B1  b2 54 23 7b dc 95 8e 35  b9 84 ad 59 64 5c b5 e2 .T#{...5 ...Yd\..
000007C1  09 1b 97 3e e9 2e 66 d0  94 b2 ac 8c c6 d4 62 9c ...>..f. ......b.
000007D1  85 00 b7 26 51 be d6 42  cb 09 ae a0 7e a5 5e b7 ...&Q..B ....~.^.
000007E1  0d 55 36 6d 28 85 50 97  4e d6 86 db 7c b6 96 ac .U6m(.P. N...|...
000007F1  34 b2 19 c5 8a 50 f0 3c  a6 ef a9 ee 0d 7d 87 3f 4....P.< .....}.?
00000801  12 e6 b3 fd f3 29 7b e1  d2 a0 ed 77 f1 9c 77 6f .....){. ...w..wo
00000811  3b 94 21 46 2b b6 6d 58  0c 6f a4 36 7d f7 db d0 ;.!F+.mX .o.6}...
00000821  35 84 67 2f 61 9b 57 5c  45 9d 9a d0 76 ba 7c 69 5.g/a.W\ E...v.|i
00000831  ca 3b 1f d2 94 fa 4e f8  09 44 38 d4 b2 c1 8c 2d .;....N. .D8....-
00000841  f2 29 1d 95 0c 0f 66 75  57 3e 0b e5 86 d2 e9 09 .)....fu W>......
00000851  79 92 03 c4 c7 ae 09 90  69 3b a5 f3 56 2f 78 d6 y....... i;..V/x.
00000861  d0 a0 2e 8b 48 da 96 33  1c 2d 01 ba 33 dd c1 e2 ....H..3 .-..3...
00000871  c8 b9 bb 4d 1e 38 5e e9  2a a3 65 ed 87 69 23 89 ...M.8^. *.e..i#.
00000881  bb 4c a8 d1 35 56 69 ca  ba 16 fb d7 8e 29 b2 a3 .L..5Vi. .....)..
00000891  8b 3d 5c bf be 8e aa bd  4b 23 e5 8f 47 c6 95 aa .=\..... K#..G...
000008A1  ba dc 81 62 db d3 02 26  9a af 7f 2e c7 03 99 69 ...b...& .......i
000008B1  74 05 f5 4b e0 23 f1 db  60 7e                   t..K.#.. `~
000008BB  a1 af 12 00 1f 78 56 34  12 06 00 00 a3          .....xV4 .....
000008C8  a1 af 62 00 1f 3c 94 a5  d4 06 00 00 0d 6b 5a 70 ..b..<.. .....kZp
000008D8  11 37 de 75 6f f6 0e e2  da 76 ba d9 ca 0a 0e c1 .7.uo... .v......
000008E8  4a 43 b4 30 1b 5a 7a b2  9b 39 c5 76 fa 59 96 ce JC.0.Zz. .9.v.Y..
000008F8  b8 3f 75 3e 62 e8 8d 03  bb 0f 45 3c 00 38 cb de .?u>b... ..E<.8..
00000908  9c eb ec 3e e5 51 1f b2  0f f7 13 e1 e7 25 93 b7 ...>.Q.. .....%..
00000918  92 4e 61 f0 5a 77 95 64  32 72 05 91 ad 25 a1 9a .Na.Zw.d 2r...%..
00000928  29 f8 ee 18 a3 f0 46 9a  4b 00 cc fb 38 d9 2b f4 ).....F. K...8.+.
00000938  61 4d be 7a 59 fc 50 25  23 b8 ea 47 8b 2d 00 7b aM.zY.P% #..G.-.{
00000948  6a e0 4a c4 88 9b 7c 7a  e0 3b 81 05 e6 83 c3 56 j.J...|z .;.....V
00000958  8d c0 11 e5 c6 31 68 1f  5b 59 7a 06 41 8a 02 a3 .....1h. [Yz.A...
00000968  d9 af 92 11 e4 8f cf 0b  c2 84 4a 3b 4e fc fc a8 ........ ..J;N...
00000978  26 d1 ae 5d bf cc 7b 82  88 ec e8 5a 02 b2 0b 1b &..]..{. ...Z....
00000988  e6 aa d2 ae 2b 84 14 de  cc 8c d5 05 cb a7 41 b7 ....+... ......A.
00000998  fc e0 eb 9a bb bd d6 a3  8f e1 75 48 b2 3e 6b 66 ........ ..uH.>kf
000009A8  c6 91 7d 3c ab af 69 b3  89 d3 7d 06 ee d5 ea 69 ..}<..i. ..}....i
000009B8  61 ad 66 9e be 62 2f a2  2d 11 44 41 6d 92 fd 7d a.f..b/. -.DAm..}
000009C8  1b ca bb 82 6e 06 0e df  1f 08 ba 52 95 53 9e ab ....n... ...R.S..
000009D8  ae c5 9f 70 4f 59 55 a3  10 4d 99 a5 96 41 4d 6f ...pOYU. .M...AMo
000009E8  86 c0 75 af 93 0d 8f c0  50 07 95 29 f0 05 e3 6e ..u..... P..)...n
000009F8  01 72 19 ef                                      .r..
000009FC  a1 af 12 00 1f 78 56 34  12 07 00 00 a4          .....xV4 .....
00000A09  a1 af 62 00 1f 5f e7 42  0d 07 00 00 c2 a0 ce 4a ..b.._.B .......J
00000A19  c6 82 db d8 54 8e dd 73  5d 0c cb 4a dc 34 cb 8b ....T..s ]..J.4..
00000A29  58 dc 47 9e 5c 43 0c bd  bf 0c f3 66 1d 4e 34 75 X.G.\C.. ...f.N4u
00000A39  07 02 2c 53 2f 04 3b 9a  cd 16 ad db 6b 70 57 5a ..,S/.;. ....kpWZ
00000A49  49 d3 ea 40 a0 3b 73 df  d2 e8 92 83 37 b0 7b 06 I..@.;s. ....7.{.
00000A59  45 d1 94 f1 96 8c ee 6c  f2 0e f1 3f c6 f6 bf 53 E......l ...?...S
00000A69  b4 5e 58 67 a5 c0 b6 63  c5 50 71 0c d3 d7 95 b4 .^Xg...c .Pq.....
00000A79  da c8 7d 4b 5a e4 8a 82  3f 03 a0 79 d5 52 69 71 ..}KZ... ?..y.Riq
00000A89  a3 0f 54 98 78 40 f6 26  e9 81 ea 16 7a a5 d6 2a ..T.x@.& ....z..*
00000A99  be f5 d1 c3 ef 2f 10 0a  b8 56 f1 4e 9d 33 80 6e ...../.. .V.N.3.n
00000AA9  d5 29 fe cb a1 6b df 0d  f3 23 39 be eb a6 86 40 .)...k.. .#9....@
00000AB9  87 a2 d3 cc 71 49 e7 d0  04 72 81                ....qI.. .r.
00000AC4  a1 af 12 00 1f 78 56 34  12 08 00 00 a5          .....xV4 .....
00000AD1  a1 af 62 00 1f ba 49 81  e5 08 00 00 07 7a e3 fb ..b...I. .....z..
00000AE1  a3 7d 6f 15 17 58 59 b8  43 d3 e8                .}o..XY. C..
00000AEC  a1 af 14 00 1f fb 91 7d  ed 01 00 82             .......} ....
00000AF8  a1 af 14 00 1f fb 91 7d  ed 02 00 83             .......} ....
00000B04  a1 af 14 00 1f fb 91 7d  ed 03 00 84             .......} ....
00000B10  a1 af 14 00 1f fb 91 7d  ed 04 00 85             .......} ....
00000B1C  a1 af 14 00 1f fb 91 7d  ed 05 00 86             .......} ....
00000B28  a1 af 14 00 1f fb 91 7d  ed 06 00 87             .......} ....
00000B34  a1 af 14 00 1f fb 91 7d  ed 07 00 88             .......} ....
00000B40  a1 af 14 00 1f fb 91 7d  ed 08 00 89             .......} ....
00000B4C  a1 af 14 00 1f fb 91 7d  ed 09 00 8a             .......} ....
[/span]

http://who.is/whois-ip/ip-address/202.32.117.185
Code: 
[span="font-family:monospace;font-size:10pt;line-height:12pt;"]00000000  ea d0 01 1b 00 00 a1 af  90 00 00 00 00 00 0c 7f ........ ........
00000010  16 bf 86 3f 9c b1 bb bb  5f a9 d0 a6 41 55 00 04 ...?.... _...AU..
00000020  02 00 00 00 01 10 28 19  a6 62 e0 09 8c 4c ea 46 ......(. .b...L.F
00000030  38 32 05 d9 43 8c 04 01  00                      82..C... .
00000039  ea d0 01 1f 00 00 a1 af  91 00 79 00 01 00 fa f4 ........ ..y.....
00000049  11 03 9d 01 f6 4e 35 b0  23 2b 77 f0 3f 94 00 04 .....N5. #+w.?...
00000059  02 00 00 00 01 10 00 00  00 00 00 00 00 00 00 00 ........ ........
00000069  00 00 00 00 00 00 03 02  71 eb 04 01 00          ........ q....
00000076  ea d0 01 03 21 01 a1 af  e2 00 79 00 01 00 5a 8f ....!... ..y...Z.
00000086  61 10 28 18 89 81 85 6f  12 75 d1 6f 97 f8 02 01 a.(....o .u.o....
00000096  00 12 86 44 db 19 fe 2a  50 05 a2 63 7d 2a 16 f3 ...D...* P..c}*..
000000A6  b1 fe 56 88 aa 9c 3d d6  1c 5a ef ca 42 f5 6d df ..V...=. .Z..B.m.
000000B6  e3 c4 2e f0 71 34 38 85  90 b5 b7 fb 0e fa f1 36 ....q48. .......6
000000C6  4a 3a ff bc f4 1a c1 77  fe 7f 58 c8 2d ee 70 77 J:.....w ..X.-.pw
000000D6  72 de eb 74 aa c5 1b 22  28 1c db d0 05 ab 49 66 r..t..." (.....If
000000E6  ce 25 ef 8e d5 fc de ba  c6 0e 91 e6 66 c4 48 0b .%...... ....f.H.
000000F6  00 71 d2 60 dd 30 45 20  5a e8 21 e1 50 12 1e f7 .q.`.0E  Z.!.P...
00000106  f6 f4 b3 5c a1 3c 10 a4  c4 e3 df 32 ec 6b ef a9 ...\.<.. ...2.k..
00000116  27 bf d7 7c a6 3e 3b 78  78 03 05 df 99 77 8a 04 '..|.>;x x....w..
00000126  ca f8 a7 2d 2f 08 d0 6a  13 c8 e5 ec e0 f5 7a d8 ...-/..j ......z.
00000136  19 5a 85 5d b7 70 5e 06  22 e9 1e 3e 35 10 98 84 .Z.].p^. "..>5...
00000146  f6 19 7f 9a a4 01 2e 71  bf 38 93 8e b9 64 79 d4 .......q .8...dy.
00000156  8e 65 16 f1 0b 65 d6 a8  4a 26 8f e8 5c b1 1d 4a .e...e.. J&..\..J
00000166  f6 cf f2 6c 60 15 cd ee  72 4f a9 97 0d 5c 91 9a ...l`... rO...\..
00000176  34 a6 97 de 0f 3e 20 da  38 be ad de 94 5a 5a f7 4....> . 8....ZZ.
00000186  bb 56 ba c0 52 a1 59 19  1b 9e b4 36 f3 e7 d0 ca .V..R.Y. ...6....
00000196  dc 48 ef b6 dc 08 59 a6  a7 a2 7e 3a c4 b9 5f 29 .H....Y. ..~:.._)
000001A6  97 2b 22 67 03 a2 2b 4b  c8 93 15 32 d3 da 3e 69 .+"g..+K ...2..>i
000001B6  90 61                                            .a
000001B8  ea d0 01 03 04 00 a1 af  82 20 79 01 00 00 a6 3c ........ . y....<
000001C8  c6 a7 a7 05 23 6f 9b e2  45 2a e9 84 70 b0 02 01 ....#o.. E*..p...
000001D8  00 00 00 02 00                                   .....
000001DD  ea d0 01 03 8a 00 a1 af  e2 00 79 00 02 00 de af ........ ..y.....
000001ED  58 2a 97 4d 1e c6 ea ab  9d a8 de 54 20 5a 02 01 X*.M.... ...T Z..
000001FD  00 56 4b 7b 02 70 aa a7  ab 48 45 35 f4 6c ad 95 .VK{.p.. .HE5.l..
0000020D  23 34 f6 62 a7 6f 7a 02  0a 4b dc eb 77 92 a8 99 #4.b.oz. .K..w...
0000021D  2c 2b 0a 84 8d 4c 92 b1  b4 b1 7a f6 53 15 2d 3f ,+...L.. ..z.S.-?
0000022D  85 38 d8 02 b6 19 93 fa  0b 60 99 89 e0 ae 8e b4 .8...... .`......
0000023D  af 60 16 64 2a 79 60 62  7f 1c 00 a3 f7 9c 81 87 .`.d*y`b ........
0000024D  05 76 b7 99 9d 69 b1 0c  fa a9 78 31 90 51 38 a0 .v...i.. ..x1.Q8.
0000025D  c1 f6 4d 33 c6 13 ec ab  94 8f 34 d2 14 ca d7 98 ..M3.... ..4.....
0000026D  6f e0 54 a2 04 65 9a b6  e6 7b 3e 58 47 c5 ba 16 o.T..e.. .{>XG...
0000027D  9c 30 89 35 c5 9a 25 7f  a1 7f 4a                .0.5..%. ..J
00000288  ea d0 01 03 04 00 a1 af  82 20 79 01 00 00 20 08 ........ . y... .
00000298  6b 78 78 33 c8 9b 16 39  46 1c 72 4c 09 67 02 01 kxx3...9 F.rL.g..
000002A8  00 00 00 03 00                                   .....
000002AD  ea d0 01 00 00 00 a1 af  93 00 79 00 04 00 63 58 ........ ..y...cX
000002BD  35 1c a1 60 43 82 e1 91  0f 9d 8f 1d a6 0d       5..`C... ......
000002CB  ea d0 01 00 00 00 a1 af  93 00 79 00 04 00 63 58 ........ ..y...cX
000002DB  35 1c a1 60 43 82 e1 91  0f 9d 8f 1d a6 0d       5..`C... ......
000002E9  ea d0 01 00 00 00 a1 af  93 00 79 00 04 00 63 58 ........ ..y...cX
000002F9  35 1c a1 60 43 82 e1 91  0f 9d 8f 1d a6 0d       5..`C... ......
[/span]

http://who.is/whois-ip/ip-address/202.32.117.142
Code: 
[span="font-family:monospace;font-size:10pt;line-height:12pt;"]
00000000  00 00 00 65 00 00 ef 19  46 b2 21 67 0a 51 90 0c ...e.... F.!g.Q..
00000010  00 00 00 65 00 00 ef 19  46 b2 21 67 0a 51 90 0c ...e.... F.!g.Q..
00000020  00 00 00 65 00 00 ef 19  46 b2 21 67 0a 51 90 0c ...e.... F.!g.Q..
00000030  00 00 00 65 00 00 ef 19  46 b2 21 67 0a 51 90 0c ...e.... F.!g.Q..
00000040  00 00 00 65 00 00 ef 19  46 b2 21 67 0a 51 90 0c ...e.... F.!g.Q..
[/span]

http://who.is/whois-ip/ip-address/202.32.117.143
Code: 
[span="font-family:monospace;font-size:10pt;line-height:12pt;"]
00000000  00 00 00 67 00 00 ef 1a  46 b2 21 67 0a 51 90 07 ...g.... F.!g.Q..
00000010  00 00 00 67 00 00 ef 1a  46 b2 21 67 0a 51 90 07 ...g.... F.!g.Q..
00000020  00 00 00 67 00 00 ef 1a  46 b2 21 67 0a 51 90 07 ...g.... F.!g.Q..
00000030  00 00 00 67 00 00 ef 1a  46 b2 21 67 0a 51 90 07 ...g.... F.!g.Q..
00000040  00 00 00 67 00 00 ef 1a  46 b2 21 67 0a 51 90 07 ...g.... F.!g.Q..
[/span]

Interesting, it looks like Amazon is hosting some ( ALL? ) of Nintendo's servers?

http://who.is/whois-ip/ip-address/54.191.40.1
Code: 
[span="font-family:monospace;font-size:10pt;line-height:12pt;"]
00000000  16 03 02 00 4a 02 00 00  46 03 02 bf 3f 05 2c ed ....J... F...?.,.
00000010  6a 1a 35 03 3d f5 17 e3  30 09 41 33 1a ad 91 4c j.5.=... 0.A3...L
00000020  27 f4 af 99 41 75 cc 71  2c 6c ab 20 6d 29 67 9c '...Au.q ,l. m)g.
00000030  a4 80 6f ed d1 a7 ae 09  b1 39 a4 ec c4 28 28 25 ..o..... .9...((%
00000040  9e c4 35 a9 e7 2e cc 4e  36 68 12 c7 00 33 00 16 ..5....N 6h...3..
00000050  03 02 0d 4c 0b 00 0d 48  00 0d 45 00 06 e3 30 82 ...L...H ..E...0.
00000060  06 df 30 82 05 c7 a0 03  02 01 02 02 10 08 ef 2d ..0..... .......-
00000070  ec 15 6f 17 96 10 a0 f1  79 da 5a 70 c8 30 0d 06 ..o..... y.Zp.0..
00000080  09 2a 86 48 86 f7 0d 01  01 05 05 00 30 66 31 0b .*.H.... ....0f1.
00000090  30 09 06 03 55 04 06 13  02 55 53 31 15 30 13 06 0...U... .US1.0..
000000A0  03 55 04 0a 13 0c 44 69  67 69 43 65 72 74 20 49 .U....Di giCert I
000000B0  6e 63 31 19 30 17 06 03  55 04 0b 13 10 77 77 77 nc1.0... U....www
000000C0  2e 64 69 67 69 63 65 72  74 2e 63 6f 6d 31 25 30 .digicer t.com1%0
000000D0  23 06 03 55 04 03 13 1c  44 69 67 69 43 65 72 74 #..U.... DigiCert
000000E0  20 48 69 67 68 20 41 73  73 75 72 61 6e 63 65 20  High As surance 
000000F0  43 41 2d 33 30 1e 17 0d  31 32 30 38 31 30 30 30 CA-30... 12081000
00000100  30 30 30 30 5a 17 0d 31  35 30 38 31 34 31 32 30 0000Z..1 50814120
00000110  30 30 30 5a 30 81 92 31  0b 30 09 06 03 55 04 06 000Z0..1 .0...U..
00000120  13 02 55 53 31 0b 30 09  06 03 55 04 08 13 02 57 ..US1.0. ..U....W
00000130  41 31 10 30 0e 06 03 55  04 07 13 07 52 65 64 6d A1.0...U ....Redm
00000140  6f 6e 64 31 21 30 1f 06  03 55 04 0a 13 18 4e 69 ond1!0.. .U....Ni
00000150  6e 74 65 6e 64 6f 20 6f  66 20 41 6d 65 72 69 63 ntendo o f Americ
00000160  61 20 49 6e 63 2e 31 24  30 22 06 03 55 04 0b 13 a Inc.1$ 0"..U...
00000170  1b 4e 65 74 77 6f 72 6b  20 42 75 73 69 6e 65 73 .Network  Busines
00000180  73 20 44 65 70 61 72 74  6d 65 6e 74 31 1b 30 19 s Depart ment1.0.
00000190  06 03 55 04 03 0c 12 2a  2e 61 70 70 2e 6e 69 6e ..U....* .app.nin
000001A0  74 65 6e 64 6f 2e 6e 65  74 30 82 01 22 30 0d 06 tendo.ne t0.."0..
000001B0  09 2a 86 48 86 f7 0d 01  01 01 05 00 03 82 01 0f .*.H.... ........
000001C0  00 30 82 01 0a 02 82 01  01 00 eb cf 4a b8 12 92 .0...... ....J...
000001D0  82 b5 22 a0 b3 a6 3e 0d  29 b4 6e 07 fd b5 01 b3 .."...>. ).n.....
000001E0  4a 4e a6 36 bf cb 44 3e  4c e7 2c 0a 65 37 21 e5 JN.6..D> L.,.e7!.
000001F0  7e d7 9f 24 55 ba 6a 0a  75 15 af 1c 73 5f c7 13 ~..$U.j. u...s_..
00000200  83 64 60 77 24 d3 87 c5  fe ad b3 6c e5 e9 20 23 .d`w$... ...l.. #
00000210  11 f2 2e 04 77 0a 86 46  15 f3 ad bb 5b b4 b1 fd ....w..F ....[...
00000220  48 28 18 f4 29 c9 97 54  7f bc 17 66 cd eb 3e 92 H(..)..T ...f..>.
00000230  e1 28 2a ed f7 54 1f 58  e3 0b 3c 37 35 c8 d8 50 .(*..T.X ..<75..P
00000240  78 94 38 64 3d 6c 6d 39  b8 6a aa a2 c6 eb c0 ff x.8d=lm9 .j......
00000250  71 93 bb 5c 38 ec df d4  96 71 5b e5 8a b3 5e 8d q..\8... .q[...^.
00000260  ed 4e 1f 33 c7 1e 62 0a  45 5f a4 56 db b9 84 88 .N.3..b. E_.V....
00000270  90 58 50 89 84 61 5e 63  7c dc 22 e9 a4 bf 49 3f .XP..a^c |."...I?
00000280  16 1e 16 ec e4 b9 38 87  33 50 2d 32 bc e6 4c 4f ......8. 3P-2..LO
00000290  a5 ba 5f cb a1 de 5e b9  63 2d 5b 90 33 63 44 cf .._...^. c-[.3cD.
000002A0  b3 1d 4b 23 e6 18 39 5c  49 9a 30 0e 6a 28 97 e8 ..K#..9\ I.0.j(..
000002B0  7d 87 d3 e9 87 b9 5b 7e  df 15 07 f8 b2 3d ae 64 }.....[~ .....=.d
000002C0  de 0a 02 1a b3 7f c9 34  cd 5f 02 03 01 00 01 a3 .......4 ._......
000002D0  82 03 5a 30 82 03 56 30  1f 06 03 55 1d 23 04 18 ..Z0..V0 ...U.#..
000002E0  30 16 80 14 50 ea 73 89  db 29 fb 10 8f 9e e5 01 0...P.s. .)......
000002F0  20 d4 de 79 99 48 83 f7  30 1d 06 03 55 1d 0e 04  ..y.H.. 0...U...
00000300  16 04 14 4b 57 7e c7 2d  cf 7e c0 4c 6e ce 47 f7 ...KW~.- .~.Ln.G.
00000310  be 1a 47 1f c7 a4 d3 30  2f 06 03 55 1d 11 04 28 ..G....0 /..U...(
00000320  30 26 82 12 2a 2e 61 70  70 2e 6e 69 6e 74 65 6e 0&..*.ap p.ninten
00000330  64 6f 2e 6e 65 74 82 10  61 70 70 2e 6e 69 6e 74 do.net.. app.nint
00000340  65 6e 64 6f 2e 6e 65 74  30 0e 06 03 55 1d 0f 01 endo.net 0...U...
00000350  01 ff 04 04 03 02 05 a0  30 1d 06 03 55 1d 25 04 ........ 0...U.%.
00000360  16 30 14 06 08 2b 06 01  05 05 07 03 01 06 08 2b .0...+.. .......+
00000370  06 01 05 05 07 03 02 30  61 06 03 55 1d 1f 04 5a .......0 a..U...Z
00000380  30 58 30 2a a0 28 a0 26  86 24 68 74 74 70 3a 2f 0X0*.(.& .$http:/
00000390  2f 63 72 6c 33 2e 64 69  67 69 63 65 72 74 2e 63 /crl3.di gicert.c
000003A0  6f 6d 2f 63 61 33 2d 67  31 32 2e 63 72 6c 30 2a om/ca3-g 12.crl0*
000003B0  a0 28 a0 26 86 24 68 74  74 70 3a 2f 2f 63 72 6c .(.&.$ht tp://crl
000003C0  34 2e 64 69 67 69 63 65  72 74 2e 63 6f 6d 2f 63 4.digice rt.com/c
000003D0  61 33 2d 67 31 32 2e 63  72 6c 30 82 01 c4 06 03 a3-g12.c rl0.....
000003E0  55 1d 20 04 82 01 bb 30  82 01 b7 30 82 01 b3 06 U. ....0 ...0....
000003F0  09 60 86 48 01 86 fd 6c  01 01 30 82 01 a4 30 3a .`.H...l ..0...0:
00000400  06 08 2b 06 01 05 05 07  02 01 16 2e 68 74 74 70 ..+..... ....http
00000410  3a 2f 2f 77 77 77 2e 64  69 67 69 63 65 72 74 2e ://www.d igicert.
00000420  63 6f 6d 2f 73 73 6c 2d  63 70 73 2d 72 65 70 6f com/ssl- cps-repo
00000430  73 69 74 6f 72 79 2e 68  74 6d 30 82 01 64 06 08 sitory.h tm0..d..
00000440  2b 06 01 05 05 07 02 02  30 82 01 56 1e 82 01 52 +....... 0..V...R
00000450  00 41 00 6e 00 79 00 20  00 75 00 73 00 65 00 20 .A.n.y.  .u.s.e. 
00000460  00 6f 00 66 00 20 00 74  00 68 00 69 00 73 00 20 .o.f. .t .h.i.s. 
00000470  00 43 00 65 00 72 00 74  00 69 00 66 00 69 00 63 .C.e.r.t .i.f.i.c
00000480  00 61 00 74 00 65 00 20  00 63 00 6f 00 6e 00 73 .a.t.e.  .c.o.n.s
00000490  00 74 00 69 00 74 00 75  00 74 00 65 00 73 00 20 .t.i.t.u .t.e.s. 
000004A0  00 61 00 63 00 63 00 65  00 70 00 74 00 61 00 6e .a.c.c.e .p.t.a.n
000004B0  00 63 00 65 00 20 00 6f  00 66 00 20 00 74 00 68 .c.e. .o .f. .t.h
000004C0  00 65 00 20 00 44 00 69  00 67 00 69 00 43 00 65 .e. .D.i .g.i.C.e
000004D0  00 72 00 74 00 20 00 43  00 50 00 2f 00 43 00 50 .r.t. .C .P./.C.P
000004E0  00 53 00 20 00 61 00 6e  00 64 00 20 00 74 00 68 .S. .a.n .d. .t.h
000004F0  00 65 00 20 00 52 00 65  00 6c 00 79 00 69 00 6e .e. .R.e .l.y.i.n
00000500  00 67 00 20 00 50 00 61  00 72 00 74 00 79 00 20 .g. .P.a .r.t.y. 
00000510  00 41 00 67 00 72 00 65  00 65 00 6d 00 65 00 6e .A.g.r.e .e.m.e.n
00000520  00 74 00 20 00 77 00 68  00 69 00 63 00 68 00 20 .t. .w.h .i.c.h. 
00000530  00 6c 00 69 00 6d 00 69  00 74 00 20 00 6c 00 69 .l.i.m.i .t. .l.i
00000540  00 61 00 62 00 69 00 6c  00 69 00 74 00 79 00 20 .a.b.i.l .i.t.y. 
00000550  00 61 00 6e 00 64 00 20  00 61 00 72 00 65 00 20 .a.n.d.  .a.r.e. 
00000560  00 69 00 6e 00 63 00 6f  00 72 00 70 00 6f 00 72 .i.n.c.o .r.p.o.r
00000570  00 61 00 74 00 65 00 64  00 20 00 68 00 65 00 72 .a.t.e.d . .h.e.r
00000580  00 65 00 69 00 6e 00 20  00 62 00 79 00 20 00 72 .e.i.n.  .b.y. .r
00000590  00 65 00 66 00 65 00 72  00 65 00 6e 00 63 00 65 .e.f.e.r .e.n.c.e
000005A0  00 2e 30 7b 06 08 2b 06  01 05 05 07 01 01 04 6f ..0{..+. .......o
000005B0  30 6d 30 24 06 08 2b 06  01 05 05 07 30 01 86 18 0m0$..+. ....0...
000005C0  68 74 74 70 3a 2f 2f 6f  63 73 70 2e 64 69 67 69 http://o csp.digi
000005D0  63 65 72 74 2e 63 6f 6d  30 45 06 08 2b 06 01 05 cert.com 0E..+...
000005E0  05 07 30 02 86 39 68 74  74 70 3a 2f 2f 63 61 63 ..0..9ht tp://cac
000005F0  65 72 74 73 2e 64 69 67  69 63 65 72 74 2e 63 6f erts.dig icert.co
00000600  6d 2f 44 69 67 69 43 65  72 74 48 69 67 68 41 73 m/DigiCe rtHighAs
00000610  73 75 72 61 6e 63 65 43  41 2d 33 2e 63 72 74 30 suranceC A-3.crt0
00000620  0c 06 03 55 1d 13 01 01  ff 04 02 30 00 30 0d 06 ...U.... ...0.0..
00000630  09 2a 86 48 86 f7 0d 01  01 05 05 00 03 82 01 01 .*.H.... ........
00000640  00 0a db 70 6a 5c 5f c2  e6 33 a4 02 d0 4f dd 89 ...pj\_. .3...O..
00000650  27 42 9c 48 98 00 24 e5  ac 71 61 36 41 5b 55 db 'B.H..$. .qa6A[U.
00000660  5b b9 b8 f7 cc d0 32 16  da 47 30 af 6f 16 3e 35 [.....2. .G0.o.>5
00000670  fe 96 3a 03 92 23 2f e8  3e 53 71 08 6e 88 f0 1c ..:..#/. >Sq.n...
00000680  d7 8d 7b ef 2f 3e 79 e7  88 fb 6d 17 20 38 25 ae ..{./>y. ..m. 8%.
00000690  59 7b 36 ae ac b7 5a cc  92 43 77 b6 8c 95 29 fc Y{6...Z. .Cw...).
000006A0  6d 7d 95 6b 71 ee 6d bd  cd c7 80 79 91 62 fa 40 m}.kq.m. ...y.b.@
000006B0  d3 9b 11 f1 4d d3 b2 99  8c f7 27 f1 e7 0d 4c b7 ....M... ..'...L.
000006C0  6e dc 91 fb 24 f6 17 6b  61 22 eb 18 71 cc 41 5e n...$..k a"..q.A^
000006D0  85 d5 f8 bd 32 98 f5 f3  5e 7a 0c f9 e0 d1 d0 67 ....2... ^z.....g
000006E0  fa 7d 2d 98 37 5e 08 a3  a9 a8 75 48 d9 1e c3 e5 .}-.7^.. ..uH....
000006F0  c9 53 ba e1 ea 0f a0 72  75 ba 7e 22 cd 74 58 b0 .S.....r u.~".tX.
00000700  1e 04 a7 db 17 f5 68 a8  b9 28 18 ea 11 7c 31 eb ......h. .(...|1.
00000710  37 ce b9 5d 47 22 0b cc  39 ca a7 15 1a 50 22 a0 7..]G".. 9....P".
00000720  5b 9d b5 c3 de 9b 2c a4  90 b0 2d 5d cb b1 df f8 [.....,. ..-]....
00000730  fc 50 bc 78 03 e5 23 71  79 84 6f 2a e7 ee ae a3 .P.x..#q y.o*....
00000740  a5 00 06 5c 30 82 06 58  30 82 05 40 a0 03 02 01 ...\0..X 0..@....
00000750  02 02 10 0a 5f 11 4d 03  5b 17 91 17 d2 ef d4 03 ...._.M. [.......
00000760  8c 3f 3b 30 0d 06 09 2a  86 48 86 f7 0d 01 01 05 .?;0...* .H......
00000770  05 00 30 6c 31 0b 30 09  06 03 55 04 06 13 02 55 ..0l1.0. ..U....U
00000780  53 31 15 30 13 06 03 55  04 0a 13 0c 44 69 67 69 S1.0...U ....Digi
00000790  43 65 72 74 20 49 6e 63  31 19 30 17 06 03 55 04 Cert Inc 1.0...U.
000007A0  0b 13 10 77 77 77 2e 64  69 67 69 63 65 72 74 2e ...www.d igicert.
000007B0  63 6f 6d 31 2b 30 29 06  03 55 04 03 13 22 44 69 com1+0). .U..."Di
000007C0  67 69 43 65 72 74 20 48  69 67 68 20 41 73 73 75 giCert H igh Assu
000007D0  72 61 6e 63 65 20 45 56  20 52 6f 6f 74 20 43 41 rance EV  Root CA
000007E0  30 1e 17 0d 30 38 30 34  30 32 31 32 30 30 30 30 0...0804 02120000
000007F0  5a 17 0d 32 32 30 34 30  33 30 30 30 30 30 30 5a Z..22040 3000000Z
00000800  30 66 31 0b 30 09 06 03  55 04 06 13 02 55 53 31 0f1.0... U....US1
00000810  15 30 13 06 03 55 04 0a  13 0c 44 69 67 69 43 65 .0...U.. ..DigiCe
00000820  72 74 20 49 6e 63 31 19  30 17 06 03 55 04 0b 13 rt Inc1. 0...U...
00000830  10 77 77 77 2e 64 69 67  69 63 65 72 74 2e 63 6f .www.dig icert.co
00000840  6d 31 25 30 23 06 03 55  04 03 13 1c 44 69 67 69 m1%0#..U ....Digi
00000850  43 65 72 74 20 48 69 67  68 20 41 73 73 75 72 61 Cert Hig h Assura
00000860  6e 63 65 20 43 41 2d 33  30 82 01 22 30 0d 06 09 nce CA-3 0.."0...
00000870  2a 86 48 86 f7 0d 01 01  01 05 00 03 82 01 0f 00 *.H..... ........
00000880  30 82 01 0a 02 82 01 01  00 bf 61 0a 29 10 1f 5e 0....... ..a.)..^
00000890  fe 34 37 51 08 f8 1e fb  22 ed 61 be 0b 0d 70 4c .47Q.... ".a...pL
000008A0  50 63 26 75 15 b9 41 88  97 b6 f0 a0 15 bb 08 60 Pc&u..A. .......`
000008B0  e0 42 e8 05 29 10 87 36  8a 28 65 a8 ef 31 07 74 .B..)..6 .(e..1.t
000008C0  6d 36 97 2f 28 46 66 04  c7 2a 79 26 7a 99 d5 8e m6./(Ff. .*y&z...
000008D0  c3 6d 4f a0 5e ad bc 3d  91 c2 59 7b 5e 36 6c c0 .mO.^..= ..Y{^6l.
000008E0  53 cf 00 08 32 3e 10 64  58 10 13 69 c7 0c ee 9c S...2>.d X..i....
000008F0  42 51 00 f9 05 44 ee 24  ce 7a 1f ed 8c 11 bd 12 BQ...D.$ .z......
00000900  a8 f3 15 f4 1c 7a 31 69  01 1b a7 e6 5d c0 9a 6c .....z1i ....]..l
00000910  7e 09 9e e7 52 44 4a 10  3a 23 e4 9b b6 03 af a8 ~...RDJ. :#......
00000920  9c b4 5b 9f d4 4b ad 92  8c ce b5 11 2a aa 37 18 ..[..K.. ....*.7.
00000930  8d b4 c2 b8 d8 5c 06 8c  f8 ff 23 bd 35 5e d4 7c .....\.. ..#.5^.|
00000940  3e 7e 83 0e 91 96 05 98  c3 b2 1f e3 c8 65 eb a9 >~...... .....e..
00000950  7b 5d a0 2c cc fc 3c d9  6d ed cc fa 4b 43 8c c9 {].,..<. m...KC..
00000960  d4 b8 a5 61 1c b2 40 b6  28 12 df b9 f8 5f fe d3 ...a..@. (...._..
00000970  b2 c9 ef 3d b4 1e 4b 7c  1c 4c 99 36 9e 3d eb ec ...=..K| .L.6.=..
00000980  a7 68 5e 1d df 67 6e 5e  fb 02 03 01 00 01 a3 82 .h^..gn^ ........
00000990  02 fa 30 82 02 f6 30 0e  06 03 55 1d 0f 01 01 ff ..0...0. ..U.....
000009A0  04 04 03 02 01 86 30 82  01 c6 06 03 55 1d 20 04 ......0. ....U. .
000009B0  82 01 bd 30 82 01 b9 30  82 01 b5 06 0b 60 86 48 ...0...0 .....`.H
000009C0  01 86 fd 6c 01 03 00 02  30 82 01 a4 30 3a 06 08 ...l.... 0...0:..
000009D0  2b 06 01 05 05 07 02 01  16 2e 68 74 74 70 3a 2f +....... ..http:/
000009E0  2f 77 77 77 2e 64 69 67  69 63 65 72 74 2e 63 6f /www.dig icert.co
000009F0  6d 2f 73 73 6c 2d 63 70  73 2d 72 65 70 6f 73 69 m/ssl-cp s-reposi
00000A00  74 6f 72 79 2e 68 74 6d  30 82 01 64 06 08 2b 06 tory.htm 0..d..+.
00000A10  01 05 05 07 02 02 30 82  01 56 1e 82 01 52 00 41 ......0. .V...R.A
00000A20  00 6e 00 79 00 20 00 75  00 73 00 65 00 20 00 6f .n.y. .u .s.e. .o
00000A30  00 66 00 20 00 74 00 68  00 69 00 73 00 20 00 43 .f. .t.h .i.s. .C
00000A40  00 65 00 72 00 74 00 69  00 66 00 69 00 63 00 61 .e.r.t.i .f.i.c.a
00000A50  00 74 00 65 00 20 00 63  00 6f 00 6e 00 73 00 74 .t.e. .c .o.n.s.t
00000A60  00 69 00 74 00 75 00 74  00 65 00 73 00 20 00 61 .i.t.u.t .e.s. .a
00000A70  00 63 00 63 00 65 00 70  00 74 00 61 00 6e 00 63 .c.c.e.p .t.a.n.c
00000A80  00 65 00 20 00 6f 00 66  00 20 00 74 00 68 00 65 .e. .o.f . .t.h.e
00000A90  00 20 00 44 00 69 00 67  00 69 00 43 00 65 00 72 . .D.i.g .i.C.e.r
00000AA0  00 74 00 20 00 43 00 50  00 2f 00 43 00 50 00 53 .t. .C.P ./.C.P.S
00000AB0  00 20 00 61 00 6e 00 64  00 20 00 74 00 68 00 65 . .a.n.d . .t.h.e
00000AC0  00 20 00 52 00 65 00 6c  00 79 00 69 00 6e 00 67 . .R.e.l .y.i.n.g
00000AD0  00 20 00 50 00 61 00 72  00 74 00 79 00 20 00 41 . .P.a.r .t.y. .A
00000AE0  00 67 00 72 00 65 00 65  00 6d 00 65 00 6e 00 74 .g.r.e.e .m.e.n.t
00000AF0  00 20 00 77 00 68 00 69  00 63 00 68 00 20 00 6c . .w.h.i .c.h. .l
00000B00  00 69 00 6d 00 69 00 74  00 20 00 6c 00 69 00 61 .i.m.i.t . .l.i.a
00000B10  00 62 00 69 00 6c 00 69  00 74 00 79 00 20 00 61 .b.i.l.i .t.y. .a
00000B20  00 6e 00 64 00 20 00 61  00 72 00 65 00 20 00 69 .n.d. .a .r.e. .i
00000B30  00 6e 00 63 00 6f 00 72  00 70 00 6f 00 72 00 61 .n.c.o.r .p.o.r.a
00000B40  00 74 00 65 00 64 00 20  00 68 00 65 00 72 00 65 .t.e.d.  .h.e.r.e
00000B50  00 69 00 6e 00 20 00 62  00 79 00 20 00 72 00 65 .i.n. .b .y. .r.e
00000B60  00 66 00 65 00 72 00 65  00 6e 00 63 00 65 00 2e .f.e.r.e .n.c.e..
00000B70  30 12 06 03 55 1d 13 01  01 ff 04 08 30 06 01 01 0...U... ....0...
00000B80  ff 02 01 00 30 34 06 08  2b 06 01 05 05 07 01 01 ....04.. +.......
00000B90  04 28 30 26 30 24 06 08  2b 06 01 05 05 07 30 01 .(0&0$.. +.....0.
00000BA0  86 18 68 74 74 70 3a 2f  2f 6f 63 73 70 2e 64 69 ..http:/ /ocsp.di
00000BB0  67 69 63 65 72 74 2e 63  6f 6d 30 81 8f 06 03 55 gicert.c om0....U
00000BC0  1d 1f 04 81 87 30 81 84  30 40 a0 3e a0 3c 86 3a .....0.. 0@.>.<.:
00000BD0  68 74 74 70 3a 2f 2f 63  72 6c 33 2e 64 69 67 69 http://c rl3.digi
00000BE0  63 65 72 74 2e 63 6f 6d  2f 44 69 67 69 43 65 72 cert.com /DigiCer
00000BF0  74 48 69 67 68 41 73 73  75 72 61 6e 63 65 45 56 tHighAss uranceEV
00000C00  52 6f 6f 74 43 41 2e 63  72 6c 30 40 a0 3e a0 3c RootCA.c rl0@.>.<
00000C10  86 3a 68 74 74 70 3a 2f  2f 63 72 6c 34 2e 64 69 .:http:/ /crl4.di
00000C20  67 69 63 65 72 74 2e 63  6f 6d 2f 44 69 67 69 43 gicert.c om/DigiC
00000C30  65 72 74 48 69 67 68 41  73 73 75 72 61 6e 63 65 ertHighA ssurance
00000C40  45 56 52 6f 6f 74 43 41  2e 63 72 6c 30 1f 06 03 EVRootCA .crl0...
00000C50  55 1d 23 04 18 30 16 80  14 b1 3e c3 69 03 f8 bf U.#..0.. ..>.i...
00000C60  47 01 d4 98 26 1a 08 02  ef 63 64 2b c3 30 1d 06 G...&... .cd+.0..
00000C70  03 55 1d 0e 04 16 04 14  50 ea 73 89 db 29 fb 10 .U...... P.s..)..
00000C80  8f 9e e5 01 20 d4 de 79  99 48 83 f7 30 0d 06 09 .... ..y .H..0...
00000C90  2a 86 48 86 f7 0d 01 01  05 05 00 03 82 01 01 00 *.H..... ........
00000CA0  1e e2 a5 48 9e 6c db 53  38 0f ef a6 1a 2a ac e2 ...H.l.S 8....*..
00000CB0  03 43 ed 9a bc 3e 8e 75  1b f0 fd 2e 22 59 ac 13 .C...>.u ...."Y..
00000CC0  c0 61 e2 e7 fa e9 99 cd  87 09 75 54 28 bf 46 60 .a...... ..uT(.F`
00000CD0  dc be 51 2c 92 f3 1b 91  7c 31 08 70 e2 37 b9 c1 ..Q,.... |1.p.7..
00000CE0  5b a8 bd a3 0b 00 fb 1a  15 fd 03 ad 58 6a c5 c7 [....... ....Xj..
00000CF0  24 99 48 47 46 31 1e 92  ef b4 5f 4e 34 c7 90 bf $.HGF1.. .._N4...
00000D00  31 c1 f8 b1 84 86 d0 9c  01 aa df 8a 56 06 ce 3a 1....... ....V..:
00000D10  e9 0e ae 97 74 5d d7 71  9a 42 74 5f de 8d 43 7c ....t].q .Bt_..C|
00000D20  de e9 55 ed 69 00 cb 05  e0 7a 61 61 33 d1 19 4d ..U.i... .zaa3..M
00000D30  f9 08 ee a0 39 c5 25 35  b7 2b c4 0f b2 dd f1 a5 ....9.%5 .+......
00000D40  b7 0e 24 c4 26 28 8d 79  77 f5 2f f0 57 ba 7c 07 ..$.&(.y w./.W.|.
00000D50  d4 e1 fc cd 5a 30 57 7e  86 10 47 dd 31 1f d7 fc ....Z0W~ ..G.1...
00000D60  a2 c2 bf 30 7c 5d 24 aa  e8 f9 ae 5f 6a 74 c2 ce ...0|]$. ..._jt..
00000D70  6b b3 46 d8 21 be 29 d4  8e 5e 15 d6 42 4a e7 32 k.F.!.). .^..BJ.2
00000D80  6f a4 b1 6b 51 83 58 be  3f 6d c7 fb da 03 21 cb o..kQ.X. ?m....!.
00000D90  6a 16 19 4e 0a f0 ad 84  ca 5d 94 b3 5a 76 f7 61 j..N.... .]..Zv.a
00000DA0  16 03 02 02 8c 0c 00 02  88 00 80 d6 c0 94 ad 57 ........ .......W
00000DB0  f5 37 4f 68 d5 8c 7b 09  68 72 d9 45 ce e1 f8 26 .7Oh..{. hr.E...&
00000DC0  64 e0 59 44 21 e1 d5 e3  c8 e9 8b c3 f0 a6 af 8f d.YD!... ........
00000DD0  92 f1 9e 3f ef 93 37 b9  9b 9c 93 a0 55 d5 5a 96 ...?..7. ....U.Z.
00000DE0  e4 25 73 40 05 a6 8e d4  70 40 fd f0 0a 55 93 6e .%s@.... [email protected]
00000DF0  ba 4b 93 f6 4c ba 1a 00  4e 45 13 61 1c 9b 21 74 .K..L... NE.a..!t
00000E00  38 a7 03 a2 06 0c 20 38  d0 cf aa ff bb a4 8f b9 8..... 8 ........
00000E10  da c4 b2 45 0d c5 8c b0  32 0a 03 17 e2 a3 1b 44 ...E.... 2......D
00000E20  a0 27 87 c6 57 fb 0c 0c  be c1 1d 00 80 27 e1 ab .'..W... .....'..
00000E30  13 1b 6c 22 d2 59 d1 99  e9 df 8a cb b1 fe 2f d4 ..l".Y.. ....../.
00000E40  46 1a fb 7c b3 21 d6 94  6b 02 c6 6a 9a 45 c0 62 F..|.!.. k..j.E.b
00000E50  d5 ff d0 1e 47 07 5c f7  b0 82 84 5e 87 e4 95 29 ....G.\. ...^...)
00000E60  a6 6a 84 05 35 4d 11 48  18 49 33 07 83 41 c9 fa .j..5M.H .I3..A..
00000E70  62 7f de 3c 2a 9a 19 5e  2c ae 33 14 5c 47 bd 86 b..<*..^ ,.3.\G..
00000E80  bb cd 49 b0 12 f2 35 bb  c5 84 86 ce 1d 75 52 21 ..I...5. .....uR!
00000E90  75 fc 7c 9e fd 3a ea ac  06 85 5b 00 3e 65 a2 20 u.|..:.. ..[.>e. 
00000EA0  8d 16 e7 d8 9d 93 59 df  d5 e7 00 2d e1 00 80 a3 ......Y. ...-....
00000EB0  db 28 20 44 c3 ac 20 e1  24 0b 85 e5 e4 70 f8 c8 .( D.. . $....p..
00000EC0  8b 46 ff 14 05 87 e0 6c  50 54 df ce f4 c6 3b af .F.....l PT....;.
00000ED0  04 9d 26 18 84 f2 89 89  48 4d 81 f9 1c b1 c5 cf ..&..... HM......
00000EE0  d6 cb 50 6b dd 8a 3c 17  63 8d c3 a0 1e b4 28 80 ..Pk..<. c.....(.
00000EF0  97 dd c9 e2 c6 26 05 f5  9b 0b 0b 9d 2d 4b 68 ba .....&.. ....-Kh.
00000F00  3e be 41 c8 4b 93 12 14  ff 2d 66 7e 57 60 e0 10 >.A.K... .-f~W`..
00000F10  6e 83 de a6 c9 59 07 c4  cf 85 1a 9e b2 2f 07 92 n....Y.. ...../..
00000F20  8f 89 2b c8 d4 8e 9a 8f  56 22 ac c6 15 7c 4b 01 ..+..... V"...|K.
00000F30  00 57 f9 3a 08 0e 73 12  36 6a cf db ec 09 f8 b5 .W.:..s. 6j......
00000F40  d4 b1 7e 73 f7 de 46 a2  89 0d d3 d1 d2 10 4b a8 ..~s..F. ......K.
00000F50  7f 1d 36 a6 0f 30 01 90  15 ca b4 6f c8 eb 34 65 ..6..0.. ...o..4e
00000F60  78 56 e9 72 10 f8 0d 61  64 ef 01 c5 db f8 c8 d7 xV.r...a d.......
00000F70  fc 69 3b 10 d1 3e 5e cc  85 d9 0d f8 a8 bc 2e fc .i;..>^. ........
00000F80  71 4c ee e2 02 80 a7 d5  13 da b7 d1 9d 5e 6c 73 qL...... .....^ls
00000F90  30 15 b2 4f c0 d0 ca d6  22 2f 8e cd 7e d0 8b d9 0..O.... "/..~...
00000FA0  ea 62 cb 6d a8 54 8b 5c  c3 6f d6 61 b0 de c5 60 .b.m.T.\ .o.a...`
00000FB0  1f 0f 47 6d 9b 13 d1 c2  c3 b2 f0 13 9d a0 da 56 ..Gm.... .......V
00000FC0  9d fe 57 3d ad 69 2a fc  9e a6 60 14 3c 1a d1 22 ..W=.i*. ..`.<.."
00000FD0  61 1f 12 ab 83 d6 1d 06  9c a4 f3 57 00 cf 8d 62 a....... ...W...b
00000FE0  18 44 f4 fe d3 b0 0f 5e  ed be c2 7e 2b f2 4a 5e .D.....^ ...~+.J^
00000FF0  01 1c 88 a3 1e b8 fd a4  61 90 a4 8f 74 f5 ac f9 ........ a...t...
00001000  a6 05 29 0e 1c f6 1f e0  98 29 b9 5d d0 af 06 75 ..)..... .).]...u
00001010  8d 3e c3 ca 20 6d 98 30  6a 50 9d a4 49 ce 25 24 .>.. m.0 jP..I.%$
00001020  40 f8 51 6f 8c db 9d 5b  1b 5f dd 0f 4b 76 3a 21 @.Qo...[ ._..Kv:!
00001030  dd 16 03 02 00 04 0e 00  00 00                   ........ ..
0000103A  14 03 02 00 01 01 16 03  02 00 40 08 ff b0 15 ea ........ ..@.....
0000104A  1e 97 20 4d 4a ba df a8  42 06 50 ce dd dd 6c 9c .. MJ... B.P...l.
0000105A  2b 40 49 9a 44 29 fe 3f  b9 a4 c2 fb 44 ad 44 10 [email protected]).? ....D.D.
0000106A  8d d2 9b fd 54 50 66 02  73 d7 65 2c 5a 79 2e fb ....TPf. s.e,Zy..
0000107A  15 24 25 b9 eb f3 a7 6b  ed 1f 56                .$%....k ..V
00001085  17 03 02 01 90 fe 89 f7  97 68 48 a5 32 44 f9 d9 ........ .hH.2D..
00001095  31 1e 69 81 52 e9 2e 3c  b8 fb 2a f5 e6 8a 08 32 1.i.R..< ..*....2
000010A5  4c c7 3c 97 a3 e5 9a 77  70 a2 e7 6e fe 65 12 67 L.<....w p..n.e.g
000010B5  50 11 b9 54 53 bc 27 8f  3a 90 67 11 9e ed c3 ea P..TS.'. :.g.....
000010C5  3c fe 9d 66 22 c4 7e 8c  2a f8 60 a6 f6 1d 37 95 <..f".~. *.`...7.
000010D5  b2 82 d3 44 35 4a 0b 6c  bf 7c bd 8a b1 89 36 47 ...D5J.l .|....6G
000010E5  e0 97 01 a3 2d 7c 58 c5  ee 8a d2 99 17 36 41 00 ....-|X. .....6A.
000010F5  8b 93 33 ab 26 ec f8 b1  f4 87 9b e0 48 3b a8 e4 ..3.&... ....H;..
00001105  20 13 79 5f 73 1d 97 07  b6 bd df 64 40 2c cf 81  .y_s... ...d@,..
00001115  2f 0f 2b 6c e3 f7 78 9e  fc c7 d3 1e d8 d6 53 59 /.+l..x. ......SY
00001125  2d 07 67 81 53 a1 48 0c  8b 09 1b 6f c6 c6 98 b9 -.g.S.H. ...o....
00001135  27 b9 65 55 35 86 95 3f  1e 47 1f 81 b6 63 35 57 '.eU5..? .G...c5W
00001145  26 31 22 96 ca 9b c7 43  81 52 3e be fb 6f c3 09 &1"....C .R>..o..
00001155  78 2d 14 44 54 10 4a ce  49 27 85 e4 f9 2a 7a 77 x-.DT.J. I'...*zw
00001165  32 23 1f 5c ca 2d 77 fe  49 50 a7 59 78 49 1d e8 2#.\.-w. IP.YxI..
00001175  9f af d6 c5 c6 3e af 10  78 83 61 58 56 a1 05 79 .....>.. x.aXV..y
00001185  58 80 f4 3c a0 ab 42 22  2b 3a 46 3d f8 00 4d 08 X..<..B" +:F=..M.
00001195  b2 bd e6 31 65 25 75 3b  14 4b 9d 41 86 18 54 3d ...1e%u; .K.A..T=
000011A5  46 33 91 03 1d 2d 1d 45  b1 a4 1e 37 c0 b0 d2 c5 F3...-.E ...7....
000011B5  cc 1f 39 70 2f 6f f0 05  e1 c7 ca 29 ee 63 f1 9c ..9p/o.. ...).c..
000011C5  db 7d 73 0d 1e f3 45 a5  4d 60 70 57 a5 e6 e1 c0 .}s...E. M`pW....
000011D5  4e de 39 09 81 28 6f 62  e1 6e 60 84 76 07 91 57 N.9..(ob .n`.v..W
000011E5  c0 b1 5d e7 38 60 29 c5  56 d9 ae cb 6b 4a 39 c2 ..].8`). V...kJ9.
000011F5  fe 5a 56 0b 29 20 be 3a  da b3 e1 99 43 fe 98 31 .ZV.) .: ....C..1
00001205  ed 29 15 07 b5 98 5c ed  88 cc 02 e5 24 7c a5 14 .)....\. ....$|..
00001215  9e 5f 7b 9c c6                                   ._{..
0000121A  15 03 02 00 30 73 08 46  ea a1 df 32 33 26 fc 8c ....0s.F ...23&..
0000122A  b6 c3 30 db d8 3b 7b 7d  45 49 54 c2 2d d0 57 f7 ..0..;{} EIT.-.W.
0000123A  a1 f0 6b 9a 9b ab b0 92  9b 6e f8 c8 e0 eb 1c ef ..k..... .n......
0000124A  02 20 a6 49 9a                                   . .I.
[/span]

Information about my network / How I captured this:

My PC is connected to my home's network router with a wireless card. My 3DS is connected to an old WRT54GS router running DD-WRT firmware. This router is connected to my PC through a LAN(not the WAN) ethernet port. Network mumbo jump aside: set up ICS on my PC so that any traffic from my test network runs through my PC. Allowing me to sniff it. My PC is probably that "BiostarM_e6:82:5e" that you see in a few spots. Those related packets are just DHCP info since my PC is playing the role of a router. 192.168.137.121 is the IP of my 3DS.
 
Touched

Touched

Resident ASMAGICIAN
625
Posts
9
Years
  • Age 122
  • Seen Feb 1, 2018
Spoiler:

Nice work. I wonder if I am able to run some similar tests, due to the fact that I am based in South Africa rather than the US.
Have you extract the certificate file used to verify the connection? I can see some part of a SSL certificate in that last binary blob you have there. It seems to me as if the cert is hard-coded into the Pokemon Bank application, thus its going to be difficult to spoof. However, if we can get that certificate we can reuse it to create our own private server. Then we can set up a walled garden (or use similar approach) on the router allowing no traffic from the 3DS mac address to reach the intended server, instead redirecting the traffic to your private server. This way it would be easier to dismantle the protocol, as we'd be able to see the encrypted handshake procedure that verifies each action. The UDP stuff is another thing entirely.
I am interested in furthering this project, so I will attempt to get my own Pokemon Bank account and run some more tests. Maybe I can even find a ROM dump for the application and then get the xorpads for it. Looking at the code in IDA might be a good way round this problem. However, static analysis will be difficult, especially since very little is known about the 3DS and I don't have the official SDK (so I can't find the SDK functions within the binary), but maybe I can still glean some useful information from this.
 

Full Metal

C(++) Developer.
810
Posts
16
Years
If the entire certificate was transferred, it was more than likely captured. Like I said, I really haven't had a chance to look at all of the data myself so I really have no clue what the process looks like at the lower level. I'm not too familiar with SSL that much, so maybe this is hopeless unless someone happens to know a bit about decrypting this stuff takes interest ( but then again, maybe it's not difficult at all ). I have heard that ROM dumps exist, but I have no idea where to get my hands on one or how to dump my own - but that would definitely help assuming we could find the right code to look at without a functioning emulator. For the time being, I'm going to look at the rest of this capture, let me know if you do too and decide you need more sample data.
 

Full Metal

C(++) Developer.
810
Posts
16
Years
Alright guys, I've finally found a bit of time to sit down and start processing. I'm typing this post out as I progress through it. I'm starting with processing a different packet capture -- a Shiny Gengar holding a Gengarite ( a recent Game Stop event ). My purpose is mostly just to figure out how the general process goes, and see about extracting any certificates.

First it sends a HTTP request to conntest.nintendowifi.net:
Code: 
[span='font-family:monospace;font-size:12px;line-height:1.6em;white-space: pre;']
GET / HTTP/1.1
Host: conntest.nintendowifi.net
User-Agent: CTR AC/02
HTTP_X_GAMEID: 00002400
Content-Type: application/x-www-formurlencoded
Connection: Close
[/span]

The server responds with:
Code: 
[span='font-family:monospace;font-size:12px;line-height:1.6em;white-space: pre;']
HTTP/1.0 200 OK
Content-type: tetxt/html
X-Organization: Nintendo
Server: BigIP
Connection: Close
Content-Length: 246

-html-
[/span]

You can see the output HTML on the server itself. It looks like the User-Agent isn't checked, and the GAMEID isn't necessary. Nintendo probably just uses this for some kind of analytics or something. After that, the connection is reset ( by the 3DS ).

Next, the 3DS contacts nasc.nintendowifi.net. This however, uses TLS version 1.1. I'm pretty sure this is the certificate.

Code: 
[span='font-family:monospace;font-size:12px;line-height:1.6em;white-space: pre;']
0000   16 03 01 08 d8 0b 00 08 d4 00 08 d1 00 04 a7 30  ...............0
0010   82 04 a3 30 82 03 8b a0 03 02 01 02 02 01 0e 30  ...0...........0
0020   0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 6d  ...*.H........0m
0030   31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30  1.0...U....US1.0
0040   11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74  ...U....Washingt
0050   6f 6e 31 21 30 1f 06 03 55 04 0a 13 18 4e 69 6e  on1!0...U....Nin
0060   74 65 6e 64 6f 20 6f 66 20 41 6d 65 72 69 63 61  tendo of America
0070   20 49 6e 63 2e 31 0b 30 09 06 03 55 04 0b 13 02   Inc.1.0...U....
0080   49 53 31 19 30 17 06 03 55 04 03 13 10 4e 69 6e  IS1.0...U....Nin
0090   74 65 6e 64 6f 20 43 41 20 2d 20 47 33 30 1e 17  tendo CA - G30..
00a0   0d 31 30 30 38 30 36 31 38 31 30 35 32 5a 17 0d  .100806181052Z..
00b0   33 38 30 31 31 31 31 38 31 30 35 32 5a 30 81 85  380111181052Z0..
00c0   31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30  1.0...U....US1.0
00d0   11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74  ...U....Washingt
00e0   6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64  on1.0...U....Red
00f0   6d 6f 6e 64 31 22 30 20 06 03 55 04 0a 13 19 4e  mond1"0 ..U....N
0100   69 6e 74 65 6e 64 6f 20 6f 66 20 41 6d 65 72 69  intendo of Ameri
0110   63 61 2c 20 49 6e 63 2e 31 0b 30 09 06 03 55 04  ca, Inc.1.0...U.
0120   0b 13 02 49 53 31 1e 30 1c 06 03 55 04 03 13 15  ...IS1.0...U....
0130   6e 61 73 63 2e 6e 69 6e 74 65 6e 64 6f 77 69 66  nasc.nintendowif
0140   69 2e 6e 65 74 30 82 01 22 30 0d 06 09 2a 86 48  i.net0.."0...*.H
0150   86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01  .............0..
0160   0a 02 82 01 01 00 9e f4 4a ec cb b6 37 03 11 d4  ........J...7...
0170   93 ff 67 c4 51 94 a3 5c 90 1c ff 85 01 59 4e 7a  ..g.Q..\.....YNz
0180   e3 05 db fb 4e c7 b7 d0 ef f0 a7 53 a9 55 66 7f  ....N......S.Uf.
0190   ab 3e 9e 3c 84 84 ea 29 46 8d 1f 63 25 3d 83 5d  .>.<...)F..c%=.]
01a0   05 8d ce d8 5a 56 05 bc 24 bd 1b 63 1d 01 b6 4a  ....ZV..$..c...J
01b0   c5 12 f1 df 48 b5 79 bb 0c a8 d4 42 49 91 47 47  ....H.y....BI.GG
01c0   6f 9c 54 d7 20 b2 67 8d 5f 50 1e af fd 1f ef 4b  o.T. .g._P.....K
01d0   bc b4 9e 26 1f 1e d0 06 b5 2d 3f 11 f8 9a fc f0  ...&.....-?.....
01e0   d5 98 45 07 88 b9 81 73 bc 1c 5e 03 1d 2e 65 df  ..E....s..^...e.
01f0   da 1f 1a ac de 31 ef 60 28 60 fc 29 71 73 25 10  .....1.`(`.)qs%.
0200   5b ce bc 4c 76 78 12 1f 02 71 a7 35 32 e3 fc 9d  [..Lvx...q.52...
0210   77 a3 9a 2f e0 f6 eb 2c 07 56 3b 53 b5 6f 79 98  w../...,.V;S.oy.
0220   91 2f 84 7f 9a 66 23 4c 13 3e 82 6b 16 8f 2b f2  ./...f#L.>.k..+.
0230   48 06 e7 cd 6d 95 4a 86 f2 ae a3 2a c9 cb 99 63  H...m.J....*...c
0240   3b 8e 3a fb ae f7 ff 91 f2 80 6a 12 ca 0e fe ab  ;.:.......j.....
0250   7a 7a f2 0b 25 25 15 6a 74 ce 10 93 e5 7a 6a 42  zz..%%.jt....zjB
0260   b9 80 d2 6c 4a 4f 02 03 01 00 01 a3 82 01 33 30  ...lJO........30
0270   82 01 2f 30 09 06 03 55 1d 13 04 02 30 00 30 2c  ../0...U....0.0,
0280   06 09 60 86 48 01 86 f8 42 01 0d 04 1f 16 1d 4f  ..`.H...B......O
0290   70 65 6e 53 53 4c 20 47 65 6e 65 72 61 74 65 64  penSSL Generated
02a0   20 43 65 72 74 69 66 69 63 61 74 65 30 1d 06 03   Certificate0...
02b0   55 1d 0e 04 16 04 14 bb 09 83 4c 77 87 97 da 67  U.........Lw...g
02c0   29 d7 45 d4 d0 e3 6f 87 80 62 1e 30 81 97 06 03  ).E...o..b.0....
02d0   55 1d 23 04 81 8f 30 81 8c 80 14 04 d3 de d3 fd  U.#...0.........
02e0   f0 c8 eb c2 59 92 87 fb 1f d7 3e 72 f8 ed f9 a1  ....Y.....>r....
02f0   71 a4 6f 30 6d 31 0b 30 09 06 03 55 04 06 13 02  q.o0m1.0...U....
0300   55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73  US1.0...U....Was
0310   68 69 6e 67 74 6f 6e 31 21 30 1f 06 03 55 04 0a  hington1!0...U..
0320   13 18 4e 69 6e 74 65 6e 64 6f 20 6f 66 20 41 6d  ..Nintendo of Am
0330   65 72 69 63 61 20 49 6e 63 2e 31 0b 30 09 06 03  erica Inc.1.0...
0340   55 04 0b 13 02 49 53 31 19 30 17 06 03 55 04 03  U....IS1.0...U..
0350   13 10 4e 69 6e 74 65 6e 64 6f 20 43 41 20 2d 20  ..Nintendo CA - 
0360   47 33 82 01 01 30 3b 06 03 55 1d 1f 04 34 30 32  G3...0;..U...402
0370   30 30 a0 2e a0 2c 86 2a 68 74 74 70 3a 2f 2f 63  00...,.*http://c
0380   72 6c 2e 6e 69 6e 74 65 6e 64 6f 2e 63 6f 6d 2f  rl.nintendo.com/
0390   6e 69 6e 74 65 6e 64 6f 2d 63 61 2d 67 33 2e 63  nintendo-ca-g3.c
03a0   72 6c 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05  rl0...*.H.......
03b0   00 03 82 01 01 00 1c f3 9c 02 db c6 93 9e 15 1a  ................
03c0   9d 7f a5 14 1a ab a6 b8 4b 0e 12 79 1c f1 b1 09  ........K..y....
03d0   77 f3 37 d5 5b 7d b8 2e 0e 22 6d 3c 66 9f f0 93  w.7.[}..."m<f...
03e0   20 c8 2a 35 02 14 c2 a5 8d 61 ce d8 1b b9 90 ca   .*5.....a......
03f0   a9 0a 9a d0 a6 b3 5d 71 7d 36 c3 c4 b5 be ae 9c  ......]q}6......
0400   8d c4 7e 27 60 4e 8c 7c de 3f 65 f0 23 ec b9 6e  ..~'`N.|.?e.#..n
0410   c2 9b 6a c1 78 41 29 49 f8 ca 60 7b 25 4c 72 03  ..j.xA)I..`{%Lr.
0420   2c 2c 84 73 39 ca ec 6f c7 fe d1 83 70 90 18 e6  ,,.s9..o....p...
0430   06 89 7d 99 2e f1 6a d7 6c 47 9d c6 1d 17 17 8f  ..}...j.lG......
0440   22 a5 1d 39 01 eb 17 30 28 06 fb 2a a0 1f 82 b6  "..9...0(..*....
0450   8b 81 51 37 38 3c a6 89 77 f3 5d 70 c6 d6 ca 7a  ..Q78<..w.]p...z
0460   b9 a6 e2 e8 3f bc af e0 66 3e e5 ed 75 76 12 2b  ....?...f>..uv.+
0470   0a 94 06 96 2e a7 ce bd 44 48 60 45 67 d8 7b 14  ........DH`Eg.{.
0480   df f2 a8 38 04 ec a3 97 e4 64 5d a7 84 f2 c9 54  ...8.....d]....T
0490   89 3c 77 f2 57 22 15 7a c6 bf 50 33 7e 7e 30 5f  .<w.W".z..P3~~0_
04a0   26 1b 34 cc b7 37 b9 59 c4 1b cd 8c 86 ed b9 4c  &.4..7.Y.......L
04b0   74 96 27 b3 96 bb 00 04 24 30 82 04 20 30 82 03  t.'.....$0.. 0..
04c0   08 a0 03 02 01 02 02 01 01 30 0d 06 09 2a 86 48  .........0...*.H
04d0   86 f7 0d 01 01 0b 05 00 30 6d 31 0b 30 09 06 03  ........0m1.0...
04e0   55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08  U....US1.0...U..
04f0   13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 21 30 1f  ..Washington1!0.
0500   06 03 55 04 0a 13 18 4e 69 6e 74 65 6e 64 6f 20  ..U....Nintendo 
0510   6f 66 20 41 6d 65 72 69 63 61 20 49 6e 63 2e 31  of America Inc.1
0520   0b 30 09 06 03 55 04 0b 13 02 49 53 31 19 30 17  .0...U....IS1.0.
0530   06 03 55 04 03 13 10 4e 69 6e 74 65 6e 64 6f 20  ..U....Nintendo 
0540   43 41 20 2d 20 47 33 30 1e 17 0d 31 30 30 31 32  CA - G30...10012
0550   38 31 37 31 36 31 31 5a 17 0d 34 39 31 32 32 38  8171611Z..491228
0560   31 32 30 30 30 30 5a 30 6d 31 0b 30 09 06 03 55  120000Z0m1.0...U
0570   04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13  ....US1.0...U...
0580   0a 57 61 73 68 69 6e 67 74 6f 6e 31 21 30 1f 06  .Washington1!0..
0590   03 55 04 0a 13 18 4e 69 6e 74 65 6e 64 6f 20 6f  .U....Nintendo o
05a0   66 20 41 6d 65 72 69 63 61 20 49 6e 63 2e 31 0b  f America Inc.1.
05b0   30 09 06 03 55 04 0b 13 02 49 53 31 19 30 17 06  0...U....IS1.0..
05c0   03 55 04 03 13 10 4e 69 6e 74 65 6e 64 6f 20 43  .U....Nintendo C
05d0   41 20 2d 20 47 33 30 82 01 22 30 0d 06 09 2a 86  A - G30.."0...*.
05e0   48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82  H.............0.
05f0   01 0a 02 82 01 01 00 af 22 74 54 15 57 28 f6 6f  ........"tT.W(.o
0600   e1 ca f4 a7 91 c6 a0 ab be 38 32 0a ba c5 b6 a1  .........82.....
0610   47 bf 81 a3 b7 72 09 9a ad 28 35 12 49 29 3f d8  G....r...(5.I)?.
0620   fa e2 1b 77 b5 67 ce 75 40 89 f1 1d 42 60 73 6a  [email protected]`sj
0630   85 83 e2 c1 47 06 63 1c 18 13 4f a0 64 0c 2f 0f  ....G.c...O.d./.
0640   88 c4 71 6a 4d e9 f1 05 0e 3e d0 6b a1 f5 79 1c  ..qjM....>.k..y.
0650   2d c4 85 d2 17 55 dd d2 ba 77 0a c9 0d 9c 99 14  -....U...w......
0660   ac 21 d7 b8 cc c4 6c 8b 79 8a b4 a8 12 bd 9b 3e  .!....l.y......>
0670   b0 83 8c 61 c3 cb 7a fe 14 ef 1b 2c d2 3d 29 c7  ...a..z....,.=).
0680   89 a2 f6 d4 91 7b 06 dc da d8 5d de a2 8f 1d ca  .....{....].....
0690   55 c8 41 38 ad 81 95 b0 c8 75 7a c2 9f aa f3 e8  U.A8.....uz.....
06a0   f6 84 5a 82 cb 85 2c e7 57 80 8d 9b 07 11 af 05  ..Z...,.W.......
06b0   bf 58 86 0a 4a 55 36 65 b0 40 47 6e 14 2d 40 73  [email protected]@s
06c0   ad 9d f3 d2 e8 fd c1 0c 41 12 2a b9 e8 f2 34 b8  ........A.*...4.
06d0   d4 15 61 e4 8d 44 8a ff 57 4e 9f db 9c 1c c7 8d  ..a..D..WN......
06e0   1c e9 1f 91 90 76 b2 8f 43 6a 83 46 b6 52 ad 3e  .....v..Cj.F.R.>
06f0   34 12 d0 e7 4d 82 05 02 03 01 00 01 a3 81 ca 30  4...M..........0
0700   81 c7 30 1d 06 03 55 1d 0e 04 16 04 14 04 d3 de  ..0...U.........
0710   d3 fd f0 c8 eb c2 59 92 87 fb 1f d7 3e 72 f8 ed  ......Y.....>r..
0720   f9 30 81 97 06 03 55 1d 23 04 81 8f 30 81 8c 80  .0....U.#...0...
0730   14 04 d3 de d3 fd f0 c8 eb c2 59 92 87 fb 1f d7  ..........Y.....
0740   3e 72 f8 ed f9 a1 71 a4 6f 30 6d 31 0b 30 09 06  >r....q.o0m1.0..
0750   03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04  .U....US1.0...U.
0760   08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 21 30  ...Washington1!0
0770   1f 06 03 55 04 0a 13 18 4e 69 6e 74 65 6e 64 6f  ...U....Nintendo
0780   20 6f 66 20 41 6d 65 72 69 63 61 20 49 6e 63 2e   of America Inc.
0790   31 0b 30 09 06 03 55 04 0b 13 02 49 53 31 19 30  1.0...U....IS1.0
07a0   17 06 03 55 04 03 13 10 4e 69 6e 74 65 6e 64 6f  ...U....Nintendo
07b0   20 43 41 20 2d 20 47 33 82 01 01 30 0c 06 03 55   CA - G3...0...U
07c0   1d 13 04 05 30 03 01 01 ff 30 0d 06 09 2a 86 48  ....0....0...*.H
07d0   86 f7 0d 01 01 0b 05 00 03 82 01 01 00 ad e2 17  ................
07e0   d1 7a 7b 23 23 00 93 72 a4 a4 5a 2c 0a fc 1a 87  .z{##..r..Z,....
07f0   34 6e 9b f6 10 a5 52 68 1b fc 43 0a 0e c5 2d 39  4n....Rh..C...-9
0800   b0 b2 83 9c a8 75 6a fb b8 f6 49 ef 79 1b 25 00  .....uj...I.y.%.
0810   1d 42 bf c3 cb 9a f4 99 94 c4 e0 37 02 8b 89 a7  .B.........7....
0820   20 5d 8e 27 99 cf 88 69 3c 46 d4 39 82 aa 2a cb   ].'...i<F.9..*.
0830   28 59 b8 67 9a 09 f4 91 3c e8 3a 9b 69 4f 39 7a  (Y.g....<.:.iO9z
0840   03 3a 30 03 2e 7d 51 57 49 78 9e 84 39 0c bd 80  .:0..}QWIx..9...
0850   67 e7 05 15 91 4b e6 d7 13 bf 63 f0 84 2e 2e 1f  g....K....c.....
0860   f8 d4 40 ff 11 76 11 ac d5 ac c0 1c 96 c9 b8 11  [email protected]..........
0870   96 6b f1 61 ed 11 65 b6 84 31 e2 2e ac f1 4e 15  .k.a..e..1....N.
0880   5f fb fb 72 64 65 8e dc 19 40 4c c2 a8 e2 a2 ef  _..rde...@L.....
0890   7f f5 00 47 18 fb f2 36 11 94 df 86 94 a0 1f 6f  ...G...6.......o
08a0   24 8d 7a e1 6b 0c 7c 35 e9 dc ae d7 75 7f 16 09  $.z.k.|5....u...
08b0   56 34 7a 4b 38 83 d2 e1 2e bc c3 98 2a dd 40 1c  V4zK8.......*.@.
08c0   80 05 3d 13 92 68 69 63 29 09 39 06 96 55 f5 b3  ..=..hic).9..U..
08d0   44 b2 74 a8 28 ab 66 b0 d0 41 f9 9a d3           D.t.(.f..A...
[/span]

Then my 3DS sends a certificate???
Code: 
[span='font-family:monospace;font-size:12px;line-height:1.6em;white-space: pre;']
0000   0b 00 08 f4 00 08 f1 00 04 c7 30 82 04 c3 30 82  ..........0...0.
0010   03 ab a0 03 02 01 02 02 01 06 30 0d 06 09 2a 86  ..........0...*.
0020   48 86 f7 0d 01 01 0b 05 00 30 6d 31 0b 30 09 06  H........0m1.0..
0030   03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04  .U....US1.0...U.
0040   08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 21 30  ...Washington1!0
0050   1f 06 03 55 04 0a 13 18 4e 69 6e 74 65 6e 64 6f  ...U....Nintendo
0060   20 6f 66 20 41 6d 65 72 69 63 61 20 49 6e 63 2e   of America Inc.
0070   31 0b 30 09 06 03 55 04 0b 13 02 49 53 31 19 30  1.0...U....IS1.0
0080   17 06 03 55 04 03 13 10 4e 69 6e 74 65 6e 64 6f  ...U....Nintendo
0090   20 43 41 20 2d 20 47 33 30 1e 17 0d 31 30 30 35   CA - G30...1005
00a0   31 33 31 39 31 39 34 36 5a 17 0d 33 37 31 32 32  13191946Z..37122
00b0   32 31 39 31 39 34 36 5a 30 81 a5 31 0b 30 09 06  2191946Z0..1.0..
00c0   03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04  .U....US1.0...U.
00d0   08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30  ...Washington1.0
00e0   0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31  ...U....Redmond1
00f0   22 30 20 06 03 55 04 0a 13 19 4e 69 6e 74 65 6e  "0 ..U....Ninten
0100   64 6f 20 6f 66 20 41 6d 65 72 69 63 61 2c 20 49  do of America, I
0110   6e 63 2e 31 0b 30 09 06 03 55 04 0b 13 02 49 53  nc.1.0...U....IS
0120   31 1a 30 18 06 03 55 04 03 13 11 43 54 52 20 43  1.0...U....CTR C
0130   6f 6d 6d 6f 6e 20 50 72 6f 64 20 31 31 22 30 20  ommon Prod 11"0 
0140   06 09 2a 86 48 86 f7 0d 01 09 01 16 13 63 61 40  ..*.H........ca@
0150   6e 6f 61 2e 6e 69 6e 74 65 6e 64 6f 2e 63 6f 6d  noa.nintendo.com
0160   30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01  0.."0...*.H.....
0170   01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01  ........0.......
0180   00 f3 55 73 b3 7d b8 8d 9c 1c 36 96 c5 11 28 03  ..Us.}....6...(.
0190   36 8a 15 4d 13 f5 4e 5c 6f 63 0c fc 6d b1 e7 24  6..M..N\oc..m..$
01a0   78 48 9a 31 09 34 ed bd 61 24 e9 8e 61 7b c2 89  xH.1.4..a$..a{..
01b0   dc ce 8a 1e 29 77 c4 fd 1c b6 f9 ec bd 9a 4f 76  ....)w........Ov
01c0   52 1c d2 9e fb 92 1d 0e 8f db 31 41 6d c3 e7 13  R.........1Am...
01d0   c7 81 8b bd e8 0e 71 2b 82 2c 62 59 ed 53 28 fd  ......q+.,bY.S(.
01e0   46 e4 bb f0 3a aa c4 91 59 97 2c df ea 9c ba ec  F...:...Y.,.....
01f0   7c 5a 78 40 dc 85 73 e3 cb bc 9f 48 01 f4 52 07  |[email protected].
0200   07 51 24 70 22 4a 01 3d 9c 1f 5e 23 b0 06 70 ce  .Q$p"J.=..^#..p.
0210   83 0b 0e fe a7 dc c4 cf aa cd 44 75 15 45 ce 48  ..........Du.E.H
0220   d7 7d b0 26 94 1a f1 aa 16 6a a3 d6 ec b1 3c 7b  .}.&.....j....<{
0230   11 02 dd 54 9f 0c 74 55 3e 36 54 31 18 5f a0 15  ...T..tU>6T1._..
0240   52 8b 63 5f 88 0d f1 62 ca a4 bf e0 ad dc 4f 9b  R.c_...b......O.
0250   cd 6f 32 d5 a0 10 ef 02 2c 85 0f d1 19 c2 ed 55  .o2.....,......U
0260   91 3e b6 4a 00 ce 75 de c1 52 dd 2a d7 02 eb b5  .>.J..u..R.*....
0270   72 e1 ac 21 27 f0 6a 2b 5b 6f 73 6e aa 57 7c c8  r..!'.j+[osn.W|.
0280   27 02 03 01 00 01 a3 82 01 33 30 82 01 2f 30 09  '........30../0.
0290   06 03 55 1d 13 04 02 30 00 30 2c 06 09 60 86 48  ..U....0.0,..`.H
02a0   01 86 f8 42 01 0d 04 1f 16 1d 4f 70 65 6e 53 53  ...B......OpenSS
02b0   4c 20 47 65 6e 65 72 61 74 65 64 20 43 65 72 74  L Generated Cert
02c0   69 66 69 63 61 74 65 30 1d 06 03 55 1d 0e 04 16  ificate0...U....
02d0   04 14 8c c6 ed 73 b9 3a 3c 76 1b 8e 6b e5 d4 ec  .....s.:<v..k...
02e0   cd 61 75 ad c1 6d 30 81 97 06 03 55 1d 23 04 81  .au..m0....U.#..
02f0   8f 30 81 8c 80 14 04 d3 de d3 fd f0 c8 eb c2 59  .0.............Y
0300   92 87 fb 1f d7 3e 72 f8 ed f9 a1 71 a4 6f 30 6d  .....>r....q.o0m
0310   31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30  1.0...U....US1.0
0320   11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74  ...U....Washingt
0330   6f 6e 31 21 30 1f 06 03 55 04 0a 13 18 4e 69 6e  on1!0...U....Nin
0340   74 65 6e 64 6f 20 6f 66 20 41 6d 65 72 69 63 61  tendo of America
0350   20 49 6e 63 2e 31 0b 30 09 06 03 55 04 0b 13 02   Inc.1.0...U....
0360   49 53 31 19 30 17 06 03 55 04 03 13 10 4e 69 6e  IS1.0...U....Nin
0370   74 65 6e 64 6f 20 43 41 20 2d 20 47 33 82 01 01  tendo CA - G3...
0380   30 3b 06 03 55 1d 1f 04 34 30 32 30 30 a0 2e a0  0;..U...40200...
0390   2c 86 2a 68 74 74 70 3a 2f 2f 63 72 6c 2e 6e 69  ,.*http://crl.ni
03a0   6e 74 65 6e 64 6f 2e 63 6f 6d 2f 6e 69 6e 74 65  ntendo.com/ninte
03b0   6e 64 6f 2d 63 61 2d 67 33 2e 63 72 6c 30 0d 06  ndo-ca-g3.crl0..
03c0   09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01  .*.H............
03d0   00 43 97 67 fd c8 90 db 85 51 f7 71 1e 93 f4 be  .C.g.....Q.q....
03e0   b7 12 09 39 c3 a8 c9 3c 82 c2 d5 6c dd fd 04 94  ...9...<...l....
03f0   fc 5a a9 bc 7b 73 05 36 14 bf 63 56 0e 5a 0a 08  .Z..{s.6..cV.Z..
0400   3e d2 69 e1 c7 76 b5 73 37 71 75 b3 51 98 26 dd  >.i..v.s7qu.Q.&.
0410   22 9d d5 75 ff 07 cd 4f 14 b1 18 96 4f a6 7a d5  "..u...O....O.z.
0420   2a 07 88 e9 17 40 29 09 9b 3a 44 da 17 0c 14 f1  *....@)..:D.....
0430   e9 7c ec 0b 4e c2 03 7b 9a c4 47 5e 5a 30 b9 36  .|..N..{..G^Z0.6
0440   5d bd 00 7b 99 d5 80 bf 67 ee c3 6b 9e d3 c0 16  ]..{....g..k....
0450   9a fb f0 0f 8f 8c b9 98 65 1a 6a 16 ef c2 97 b5  ........e.j.....
0460   b7 71 92 34 e4 b9 9c 10 d2 78 21 c0 28 b9 b3 7e  .q.4.....x!.(..~
0470   75 e9 96 20 39 a9 06 71 a3 de 11 49 72 15 58 af  u.. 9..q...Ir.X.
0480   21 8a 55 e8 14 34 02 2f dd 38 38 6a 60 66 70 21  !.U..4./.88j`fp!
0490   cf 8a 77 ad c2 58 4e af 6e 6f c9 fa 35 8a fd 38  ..w..XN.no..5..8
04a0   92 8a 6d 65 df 25 8d 50 2b 8a 57 15 57 08 b8 0a  ..me.%.P+.W.W...
04b0   61 d2 8f c4 cb 30 c8 11 7b 93 27 84 38 6f 69 26  a....0..{.'.8oi&
04c0   f2 e2 34 1f 8c b1 b1 0c 14 5f d1 29 c3 a5 5b ba  ..4......_.)..[.
04d0   37 00 04 24 30 82 04 20 30 82 03 08 a0 03 02 01  7..$0.. 0.......
04e0   02 02 01 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01  ....0...*.H.....
04f0   0b 05 00 30 6d 31 0b 30 09 06 03 55 04 06 13 02  ...0m1.0...U....
0500   55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73  US1.0...U....Was
0510   68 69 6e 67 74 6f 6e 31 21 30 1f 06 03 55 04 0a  hington1!0...U..
0520   13 18 4e 69 6e 74 65 6e 64 6f 20 6f 66 20 41 6d  ..Nintendo of Am
0530   65 72 69 63 61 20 49 6e 63 2e 31 0b 30 09 06 03  erica Inc.1.0...
0540   55 04 0b 13 02 49 53 31 19 30 17 06 03 55 04 03  U....IS1.0...U..
0550   13 10 4e 69 6e 74 65 6e 64 6f 20 43 41 20 2d 20  ..Nintendo CA - 
0560   47 33 30 1e 17 0d 31 30 30 31 32 38 31 37 31 36  G30...1001281716
0570   31 31 5a 17 0d 34 39 31 32 32 38 31 32 30 30 30  11Z..49122812000
0580   30 5a 30 6d 31 0b 30 09 06 03 55 04 06 13 02 55  0Z0m1.0...U....U
0590   53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68  S1.0...U....Wash
05a0   69 6e 67 74 6f 6e 31 21 30 1f 06 03 55 04 0a 13  ington1!0...U...
05b0   18 4e 69 6e 74 65 6e 64 6f 20 6f 66 20 41 6d 65  .Nintendo of Ame
05c0   72 69 63 61 20 49 6e 63 2e 31 0b 30 09 06 03 55  rica Inc.1.0...U
05d0   04 0b 13 02 49 53 31 19 30 17 06 03 55 04 03 13  ....IS1.0...U...
05e0   10 4e 69 6e 74 65 6e 64 6f 20 43 41 20 2d 20 47  .Nintendo CA - G
05f0   33 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01  30.."0...*.H....
0600   01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01  .........0......
0610   01 00 af 22 74 54 15 57 28 f6 6f e1 ca f4 a7 91  ..."tT.W(.o.....
0620   c6 a0 ab be 38 32 0a ba c5 b6 a1 47 bf 81 a3 b7  ....82.....G....
0630   72 09 9a ad 28 35 12 49 29 3f d8 fa e2 1b 77 b5  r...(5.I)?....w.
0640   67 ce 75 40 89 f1 1d 42 60 73 6a 85 83 e2 c1 47  [email protected]`sj....G
0650   06 63 1c 18 13 4f a0 64 0c 2f 0f 88 c4 71 6a 4d  .c...O.d./...qjM
0660   e9 f1 05 0e 3e d0 6b a1 f5 79 1c 2d c4 85 d2 17  ....>.k..y.-....
0670   55 dd d2 ba 77 0a c9 0d 9c 99 14 ac 21 d7 b8 cc  U...w.......!...
0680   c4 6c 8b 79 8a b4 a8 12 bd 9b 3e b0 83 8c 61 c3  .l.y......>...a.
0690   cb 7a fe 14 ef 1b 2c d2 3d 29 c7 89 a2 f6 d4 91  .z....,.=)......
06a0   7b 06 dc da d8 5d de a2 8f 1d ca 55 c8 41 38 ad  {....].....U.A8.
06b0   81 95 b0 c8 75 7a c2 9f aa f3 e8 f6 84 5a 82 cb  ....uz.......Z..
06c0   85 2c e7 57 80 8d 9b 07 11 af 05 bf 58 86 0a 4a  .,.W........X..J
06d0   55 36 65 b0 40 47 6e 14 2d 40 73 ad 9d f3 d2 e8  [email protected]@s.....
06e0   fd c1 0c 41 12 2a b9 e8 f2 34 b8 d4 15 61 e4 8d  ...A.*...4...a..
06f0   44 8a ff 57 4e 9f db 9c 1c c7 8d 1c e9 1f 91 90  D..WN...........
0700   76 b2 8f 43 6a 83 46 b6 52 ad 3e 34 12 d0 e7 4d  v..Cj.F.R.>4...M
0710   82 05 02 03 01 00 01 a3 81 ca 30 81 c7 30 1d 06  ..........0..0..
0720   03 55 1d 0e 04 16 04 14 04 d3 de d3 fd f0 c8 eb  .U..............
0730   c2 59 92 87 fb 1f d7 3e 72 f8 ed f9 30 81 97 06  .Y.....>r...0...
0740   03 55 1d 23 04 81 8f 30 81 8c 80 14 04 d3 de d3  .U.#...0........
0750   fd f0 c8 eb c2 59 92 87 fb 1f d7 3e 72 f8 ed f9  .....Y.....>r...
0760   a1 71 a4 6f 30 6d 31 0b 30 09 06 03 55 04 06 13  .q.o0m1.0...U...
0770   02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61  .US1.0...U....Wa
0780   73 68 69 6e 67 74 6f 6e 31 21 30 1f 06 03 55 04  shington1!0...U.
0790   0a 13 18 4e 69 6e 74 65 6e 64 6f 20 6f 66 20 41  ...Nintendo of A
07a0   6d 65 72 69 63 61 20 49 6e 63 2e 31 0b 30 09 06  merica Inc.1.0..
07b0   03 55 04 0b 13 02 49 53 31 19 30 17 06 03 55 04  .U....IS1.0...U.
07c0   03 13 10 4e 69 6e 74 65 6e 64 6f 20 43 41 20 2d  ...Nintendo CA -
07d0   20 47 33 82 01 01 30 0c 06 03 55 1d 13 04 05 30   G3...0...U....0
07e0   03 01 01 ff 30 0d 06 09 2a 86 48 86 f7 0d 01 01  ....0...*.H.....
07f0   0b 05 00 03 82 01 01 00 ad e2 17 d1 7a 7b 23 23  ............z{##
0800   00 93 72 a4 a4 5a 2c 0a fc 1a 87 34 6e 9b f6 10  ..r..Z,....4n...
0810   a5 52 68 1b fc 43 0a 0e c5 2d 39 b0 b2 83 9c a8  .Rh..C...-9.....
0820   75 6a fb b8 f6 49 ef 79 1b 25 00 1d 42 bf c3 cb  uj...I.y.%..B...
0830   9a f4 99 94 c4 e0 37 02 8b 89 a7 20 5d 8e 27 99  ......7.... ].'.
0840   cf 88 69 3c 46 d4 39 82 aa 2a cb 28 59 b8 67 9a  ..i<F.9..*.(Y.g.
0850   09 f4 91 3c e8 3a 9b 69 4f 39 7a 03 3a 30 03 2e  ...<.:.iO9z.:0..
0860   7d 51 57 49 78 9e 84 39 0c bd 80 67 e7 05 15 91  }QWIx..9...g....
0870   4b e6 d7 13 bf 63 f0 84 2e 2e 1f f8 d4 40 ff 11  K....c.......@..
0880   76 11 ac d5 ac c0 1c 96 c9 b8 11 96 6b f1 61 ed  v...........k.a.
0890   11 65 b6 84 31 e2 2e ac f1 4e 15 5f fb fb 72 64  .e..1....N._..rd
08a0   65 8e dc 19 40 4c c2 a8 e2 a2 ef 7f f5 00 47 18  [email protected].
08b0   fb f2 36 11 94 df 86 94 a0 1f 6f 24 8d 7a e1 6b  ..6.......o$.z.k
08c0   0c 7c 35 e9 dc ae d7 75 7f 16 09 56 34 7a 4b 38  .|5....u...V4zK8
08d0   83 d2 e1 2e bc c3 98 2a dd 40 1c 80 05 3d 13 92  .......*.@...=..
08e0   68 69 63 29 09 39 06 96 55 f5 b3 44 b2 74 a8 28  hic).9..U..D.t.(
08f0   ab 66 b0 d0 41 f9 9a d3                          .f..A...
[/span]

Regardless, TLS handshaking happens. I don't know much about the TLS protocol beyond it uses certificates, and public/private keys for encryption. I'm also not a cryptologist, which should make this a fun project. There's a small amount of application-level data that's encrypted, and I have no idea how to decrypt it. :)
My guess is that this generates an OAuth session or similar. This could be HTTP(S). It would make sense, seeing as Nintendo has used HTTP(S) in the past for these things.

Anyways, after the small data transfer, the DS contacts 202.232.239.25, and this conversation takes place over UDP ( 3DS on the left, Server on the right ):

Code: 
[span='font-family:monospace;font-size:12px;line-height:1.6em;white-space: pre;']
00000000  af a1 40 00 00 00 00 00  00 00 00 00 00 00 00 97 ..@..... ........
    00000000  a1 af 10 00 00 00 00 00  00 00 00 9d c0 54 93 ab ........ .....T..
00000010  af a1 61 00 33 9d c0 54  93 01 00 23 58 df 40 cd ..a.3..T ...#X.@.
    00000010  a1 af 11 00 25 23 58 df  40 01 00 00 00 00 00 29 ....%#X. @......)
00000020  af a1 62 00 33 db 17 d6  01 02 00 00 19 87 44 db ..b.3... ......D.
00000030  99 f9 2c 50 05 a3 61 fd  2a 1d f2 80 c7 67 d2 c1 ..,P..a. *....g..
00000040  ae 63 96 24 68 ef 30                             .c.$h.0
    00000020  a1 af 12 00 25 78 56 34  12 02 00 00 a5          ....%xV4 .....
    0000002D  a1 af 62 00 25 ac 9d 37  f8 01 00 00 f4 87 44 db ..b.%..7 ......D.
    0000003D  19 fe 2a 50 05 a2 60 7d  2a 16 f3 b1 fe 56 1c f5 ..*P..`} *....V..
    0000004D  b0 3a ce 1c 5a ef 24 09  42 49 32 a6 34 b0 38 ad .:..Z.$. BI2.4.8.
    0000005D  6e 16 d5 31 2c 39 80 4c  bf a0 bb ca 5f 58 2d ea n..1,9.L ...._X-.
    0000006D  e9 4e 65 9e ff ae b9 bb  8b f2 ef d5 23 82 d9 89 .Ne..... ....#...
    0000007D  20 dd fe 9e 5a 84 79 99  13 5b 4d d9 8c 8f 0f 2d  ...Z.y. .[M....-
    0000008D  0e fc f0 8b 92 74 5d 00  6b b1 08 bf 8a 64 e5 20 .....t]. k....d. 
    0000009D  f5 3b e5 77 c5 e5 fd bb  02 20 d0 40 aa 03 86 72 .;.w.... . [email protected]
    000000AD  d6 60 b4 90 a4 19 d3 89  f9 0d 15 c6 ba 8b b7 2d .`...... .......-
    000000BD  ff 39 f0 bd a5 57 20 b9  dc 58 73 e5 e9 b1 3c 39 .9...W . .Xs...<9
    000000CD  1d d0 23 01 9b b1 bb bc  a1 31 9b 0a 53 81 4b ae ..#..... .1..S.K.
    000000DD  70 50 47 63 aa 58 3b 2e  14 98 8a b7 4d 4e a7 dd pPGc.X;. ....MN..
    000000ED  09 2f 7a de 40 ec f0 c2  1b 37 8c d1 08 6e 8e 45 ./z.@... .7...n.E
    000000FD  23 9f be 42 2f 8f e8 57  f9 1d 41 e3 cb a2 63 51 #..B/..W ..A...cQ
    0000010D  25 f6 9a 0b 3e cc aa 1d  5c f3 e8 55 c8 f5 b6 35 %...>... \..U...5
    0000011D  70 4e d3 24 b0 b4 d3 dc  02 40 ec be 55 e9 9c 22 pN.$.... [email protected].."
    0000012D  e3 1f 29 40 c8 e0 74 eb  db 94 b8 a7             ..)@..t. ....
00000047  af a1 12 00 33 78 56 34  12 01 00 00 b2          ....3xV4 .....
00000054  af a1 62 00 33 fc 20 04  cf 03 00 00 a4 07 8a da ..b.3. . ........
00000064  ca 05 76 7c c5 07 d3 9b  1b 5f 94 c8 c7 e7 3c 55 ..v|.... ._....<U
00000074  9b a1                                            ..
    00000139  a1 af 12 00 25 78 56 34  12 03 00 00 a6          ....%xV4 .....
    00000146  a1 af 62 00 25 ca ea 21  c1 02 00 00 8f 22 9b c2 ..b.%..! ....."..
    00000156  b7 56 34 cf df fd 0a df  a6 e6 3f 59 ff 0b 2c 12 .V4..... ..?Y..,.
    00000166  6a ce 74 34 5e 95 2c 4a  86 2c 24 35 2f f7 08 f8 j.t4^.,J .,$5/...
    00000176  b3 7b 52 02 2f 5e 68 28  6b 98 d0 53 c6 a4 05 ae .{R./^h( k..S....
    00000186  e8 39 6b fe 7c 9b 9b d8  a7 4b 3f 54 19 3d 49 40 .9k.|... .K?T.=I@
    00000196  5b 6d 7e 4f fb 36 20 b8  76 80 ca 1c 2b a8 04 d0 [m~O.6 . v...+...
    000001A6  7c 1d e5 f4 74 d8 ae 6e  e8 a9 1c f6 f0 12 1b 8b |...t..n ........
    000001B6  77 fe d3 bc 17 19 fa a4  dd 5a 00 3e af 29 f7 b6 w....... .Z.>.)..
    000001C6  ba a7 68 d8 7d 26 e7 ff  85 60 08 10 26 0c 34    ..h.}&.. .`..&.4
00000076  af a1 12 00 33 78 56 34  12 02 00 00 b3          ....3xV4 .....
    000001D5  a1 af 62 00 25 ca ea 21  c1 02 00 00 8f 22 9b c2 ..b.%..! ....."..
    000001E5  b7 56 34 cf df fd 0a df  a6 e6 3f 59 ff 0b 2c 12 .V4..... ..?Y..,.
    000001F5  6a ce 74 34 5e 95 2c 4a  86 2c 24 35 2f f7 08 f8 j.t4^.,J .,$5/...
    00000205  b3 7b 52 02 2f 5e 68 28  6b 98 d0 53 c6 a4 05 ae .{R./^h( k..S....
    00000215  e8 39 6b fe 7c 9b 9b d8  a7 4b 3f 54 19 3d 49 40 .9k.|... .K?T.=I@
    00000225  5b 6d 7e 4f fb 36 20 b8  76 80 ca 1c 2b a8 04 d0 [m~O.6 . v...+...
    00000235  7c 1d e5 f4 74 d8 ae 6e  e8 a9 1c f6 f0 12 1b 8b |...t..n ........
    00000245  77 fe d3 bc 17 19 fa a4  dd 5a 00 3e af 29 f7 b6 w....... .Z.>.)..
    00000255  ba a7 68 d8 7d 26 e7 ff  85 60 08 10 26 0c 34    ..h.}&.. .`..&.4
00000083  af a1 12 00 33 78 56 34  12 02 00 00 b3          ....3xV4 .....
00000090  af a1 63 00 33 9d c0 54  93 04 00 37             ..c.3..T ...7
    00000264  a1 af 13 00 25 23 58 df  40 04 00 2d             ....%#X. @..-
    00000270  a1 af 13 00 25 23 58 df  40 04 00 2d             ....%#X. @..-
    0000027C  a1 af 13 00 25 23 58 df  40 04 00 2d             ....%#X. @..-

[/span]

There are a few packets sent between the DS and nppl.c.app.nintendowifi.net, but not a lot of data. I have no idea what's going on there. After this conversation, another transaction happens with nasc.nintendowifi.net:

Code: 
[span='font-family:monospace;font-size:12px;line-height:1.6em;white-space: pre;']
0000   a9 b7 c7 ab ac 54 4c f4 0a 66 cf 5d 6c f6 ff b3  .....TL..f.]l...
0010   fd ab 29 5c 03 92 ba ed ba 2a 1e 92 55 d0 16 4c  ..)\.....*..U..L
0020   85 d6 5a 7f 84 71 d9 de df 4d 95 4b 39 a7 e3 ba  ..Z..q...M.K9...
0030   0c 10 3e 2e 8e ce ab fc 3b f6 0c 84 49 30 36 51  ..>.....;...I06Q
0040   b8 50 4a 0d f8 73 66 4f a3 ed 41 90 74 ca 00 28  .PJ..sfO..A.t..(
0050   5a 02 65 86 e0 61 42 df fb bc a9 71 c2 38 3c 68  Z.e..aB....q.8<h
0060   f7 79 0a 52 9b 5a 44 05 b2 9b aa 07 3d 56 b9 34  .y.R.ZD.....=V.4
0070   0b 6d 17 16 33 3f 98 de 48 3b 5b 00 2b 1f 4e 0c  .m..3?..H;[.+.N.
0080   74 da 8c 25 ac 0f 80 57 c8 7a 00 14 9e 32 0d 53  t..%...W.z...2.S
0090   b9 8d c5 52 08 e3 0a 44 01 17 69 78 4f d6 bd 1f  ...R...D..ixO...
00a0   bf 0b 31 6b f9 1a f6 59 17 10 d6 4a eb 5d 7d 1c  ..1k...Y...J.]}.
[/span]

After this, another handshake happens???

Ah, screw this. I don't think I can possibly process this file. It's 15MB of packets. Maybe I should try processing the 900Kb file with the Pokemon Bank capture haha. On a side note: until this data is decrypted, there's no way we can reconstruct the protocol.
 

Full Metal

C(++) Developer.
810
Posts
16
Years
*bump*

Looking through the Pokemon Bank dump, I've found an HTTPS server that doesn't require the 3DS's client certificate.

https://54.191.40.1/

However, it gives me a 404 on the index page. This tells me however, that Pokemon Bank definitely uses HTTP to transfer data.

https://111.168.21.83/

This server however requires a valid 3DS client certificate. I'm currently assuming this is where authentication takes place with Nintendo.

*edit*

it looks like 54.191.40.1 uses "TLS_DHE_RSA_WITH_AES_128_CBC_SHA" for ciphering.
Also it seems we're using a diffie key exchange, which makes it not possible to find the session key. It looks like the only options for this are:
- using an OpenSSL exploit to get Nintendo's private keys
- exploiting the 3DS so that we don't need to decrypt things anyways
- hope that Nintendo's servers and Pokemon Bank servers are completely separate entities, and don't same encryption. It would be nice if Pokemon Bank servers use a recognizable and breakable encryption.
 
Last edited:
Touched

Touched

Resident ASMAGICIAN
625
Posts
9
Years
  • Age 122
  • Seen Feb 1, 2018
Full Metal said:
*bump*

Looking through the Pokemon Bank dump, I've found an HTTPS server that doesn't require the 3DS's client certificate.

https://54.191.40.1/

However, it gives me a 404 on the index page. This tells me however, that Pokemon Bank definitely uses HTTP to transfer data.

https://111.168.21.83/

This server however requires a valid 3DS client certificate. I'm currently assuming this is where authentication takes place with Nintendo.

*edit*

it looks like 54.191.40.1 uses "TLS_DHE_RSA_WITH_AES_128_CBC_SHA" for ciphering.
Also it seems we're using a diffie key exchange, which makes it not possible to find the session key. It looks like the only options for this are:
- using an OpenSSL exploit to get Nintendo's private keys
- exploiting the 3DS so that we don't need to decrypt things anyways
- hope that Nintendo's servers and Pokemon Bank servers are completely separate entities, and don't same encryption. It would be nice if Pokemon Bank servers use a recognizable and breakable encryption.
Click to expand...

I've been attempting to work around this, but I haven't had much luck - my Raspberry Pi's wifi module has broken, meaning I cannot use the portable hotspot method I've used in the past. Basically, my wlan interface (wlan0) was in AP mode, and all traffic was routed through to the ethernet interface (eth0). This resulted in a regular internet connection for the most part, but it allows you to sniff traffic as well as selectively spoof certain domains.

Basically, the certificates are only used to validate the identity of the host. A host's identity is assumed valid if the following conditions are met:
  1. The certificate is signed by a Certification Authority (CA) known to the client
  2. The Common Name (CN) stored in the certificate matches the domain name is wishes to connect to.

Usually, I would use something like mitmproxy to mess with the server. However, since it would seem that we cannot install CA certificates on the 3DS, we shall be forced to try another approach. I would first go with a man-in-the-middle based attack. I'm gonna try setting the default gateway on my 3DS to point to my laptop instead of my router, and use iptables to direct all incoming packets from ports 80 and 443 to my server.
However, I am at a loss to do from here. It seems we have two options:
  1. Try and replace the CA certificate in the 3DS/ROM with a self-generated one (e.g. mitmproxy, etc.)
  2. Attempt to resuse their certifcate and attempt spoof the fully-qualified domain name so that the certifcate's CN matches our fake server

To be honest, I think the first approach is going to be easier, as HTTPS is supposedly designed to prevent the latter. I'm gonna be attempting to dump the Pokemon Bank ROM and decrypt it. Then I will check whether the CA certificate is stored in the ROM. If it is not, we may be out of luck. Let me know what you think.
 

Full Metal

C(++) Developer.
810
Posts
16
Years
Good God Nintendo aint foolin with their cryptography at all is they?

Also, it is possible that actual Pokemon Bank data isn't encrypted. It would be really weird to use TLS over UDP. And looking back, I realize that all of my packet logs are from an empty Pokemon Bank. So there's still a chance we can figure out the Pokemon Bank protocol without breaking the TLS encryption. So at that point, we could still have our own servers for Pokemon Bank, but it wouldn't be a complete "walled garden" -- the 3DS would still have to reach Nintendo for authentication purposes.
 

Full Metal

C(++) Developer.
810
Posts
16
Years
Alright, so I payed extra attention to the timing of things on my most recent packet capturing. It looks like the UDP is some sort of heart beat for maybe friend codes, and then tls to nintendo's servers is authentication, and tls to amazon is pokemon bank communication. So unless someone is able to successfully perform a MITM attack, there's not much hope for this short of stealing keys.
 
You must log in or register to reply here.
Back
Top