Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32342d3332203d3e203631373132.roa
File: 3133312e37322e34342e302f32342d3332203d3e203631373132.roa (raw, json)
Hash identifier: s41jERMT1mtefJTpeQl05h1YIYklRovCrixSptyBmyo=
Subject key identifier: 65:F4:4C:EE:77:DA:A4:18:A1:32:FB:63:B4:7B:90:F2:5F:B2:D7:92
Certificate issuer: /CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Certificate serial: 4906AAAC2903D218E97FE018560D9E8596B1CF49
Authority key identifier: 1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32342d3332203d3e203631373132.roa
Signing time: Sat 01 Mar 2025 12:40:20 +0000
ROA not before: Sat 01 Mar 2025 12:35:20 +0000
ROA not after: Sat 28 Feb 2026 12:40:20 +0000
asID: 61712
IP address blocks: 131.72.44.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 23 May 2025 17:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:06:aa:ac:29:03:d2:18:e9:7f:e0:18:56:0d:9e:85:96:b1:cf:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Validity
Not Before: Mar 1 12:35:20 2025 GMT
Not After : Feb 28 12:40:20 2026 GMT
Subject: CN=65F44CEE77DAA418A132FB63B47B90F25FB2D792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:16:0d:c1:47:a2:fc:e9:e5:e1:a7:f4:15:
52:ad:ed:e5:34:3a:fa:bb:35:f8:08:a0:13:2b:f5:
15:77:e3:4f:af:f8:4d:6f:df:33:58:7a:6d:01:45:
8c:e9:21:08:32:27:34:79:d3:95:0a:70:3a:41:ab:
8d:14:3a:58:fb:ec:05:78:71:a5:69:40:c5:04:aa:
9c:cc:8c:c2:62:45:85:1d:79:87:2a:70:14:da:43:
5d:35:06:e8:db:5a:11:c3:2b:9a:d2:c3:75:9d:32:
af:5b:3a:39:fc:e8:97:6e:84:b2:8b:00:ef:e1:5b:
9e:a8:1f:42:c0:e0:96:a1:27:4e:f1:71:12:c3:38:
c7:ea:d0:59:91:d6:d9:6f:7e:aa:35:6e:7d:d1:05:
69:c4:e1:ab:67:95:d2:a2:f2:d3:bb:5e:1a:f7:01:
6a:82:c9:6b:c7:b0:f7:ce:8f:ce:3e:b3:3b:3b:d7:
c2:87:ab:1c:3a:bb:c4:df:9c:e2:c5:12:54:8c:ce:
06:14:26:4a:27:bb:d4:78:09:1b:81:89:ca:a5:f8:
3f:8f:7d:1d:53:11:6c:9a:c8:12:90:a2:4f:a1:16:
92:4f:57:30:ed:3e:12:d6:ec:b7:e5:59:64:8f:8c:
f5:3f:d7:8d:72:96:40:6e:ab:16:11:ec:f0:7e:f4:
8d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F4:4C:EE:77:DA:A4:18:A1:32:FB:63:B4:7B:90:F2:5F:B2:D7:92
X509v3 Authority Key Identifier:
keyid:1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32342d3332203d3e203631373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.44.0/24
Signature Algorithm: sha256WithRSAEncryption
84:69:51:10:0f:da:83:7c:38:5e:1e:34:45:52:8c:3d:cf:2f:
0c:ed:e7:fc:95:35:29:0c:26:6a:15:3f:f0:f8:ce:ed:dd:5b:
e7:d1:94:85:46:cb:88:73:06:5b:85:bd:eb:9a:de:ef:28:55:
cc:ef:29:60:d9:2c:56:2d:a8:3b:4d:07:90:6d:21:9c:6c:b4:
ca:ef:35:40:bc:a2:d7:6c:2b:f9:7c:05:38:fb:3f:65:ac:f4:
bd:c0:e1:fa:09:73:d1:d3:3d:49:5d:2f:f0:8a:08:d1:f7:1b:
b1:8c:a6:6d:b0:2a:17:d4:56:06:fd:26:cf:98:88:45:6d:fb:
65:9a:a9:1a:df:4c:5c:e3:3a:94:35:c7:10:93:8e:e0:56:2e:
44:7f:87:73:f4:b9:92:e0:60:2a:76:12:f2:4b:19:6a:06:a2:
82:85:c4:18:6a:37:13:f3:08:c0:6f:9a:fe:e2:54:37:38:b8:
52:c4:62:46:7d:7e:a8:a1:5b:4c:36:97:37:64:16:ca:6f:69:
6e:79:6e:a9:af:ef:b0:3c:b1:30:c7:50:de:53:d9:f1:d1:e8:
87:26:e7:f9:57:a7:59:b3:f3:b7:e4:90:04:e3:8e:c6:93:59:
0c:70:d5:d1:cf:60:03:07:86:d4:c7:3c:ad:cb:ba:64:44:7a:
f7:29:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:05:18 2025 by rpki-client