Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234342e302f32322d3232203d3e20323634333233.roa
File: 3133382e3132312e3234342e302f32322d3232203d3e20323634333233.roa (raw, json)
Hash identifier: Wjpr74KS7jmvIJ8OUVJLgTQEicxPEw41/hboZwwlMgQ=
Subject key identifier: CB:9F:17:BB:1A:4F:1C:B3:1E:52:6A:D8:B5:86:5B:EF:A1:33:8E:B9
Certificate issuer: /CN=91EB13B95B705981B3BCB0592522AFFA9B29460E
Certificate serial: 3E906C9BC811F58D12D382CE37728971D89E3642
Authority key identifier: 91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234342e302f32322d3232203d3e20323634333233.roa
Signing time: Mon 31 Mar 2025 20:01:12 +0000
ROA not before: Mon 31 Mar 2025 19:56:12 +0000
ROA not after: Mon 30 Mar 2026 20:01:12 +0000
asID: 264323
IP address blocks: 138.121.244.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 31 Mar 2025 22:10:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:90:6c:9b:c8:11:f5:8d:12:d3:82:ce:37:72:89:71:d8:9e:36:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91EB13B95B705981B3BCB0592522AFFA9B29460E
Validity
Not Before: Mar 31 19:56:12 2025 GMT
Not After : Mar 30 20:01:12 2026 GMT
Subject: CN=CB9F17BB1A4F1CB31E526AD8B5865BEFA1338EB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:e3:e4:85:dd:c2:51:2b:2e:db:63:bb:36:
60:16:7e:5f:a2:49:3c:dc:3d:52:1b:3a:30:d0:3d:
e2:20:b8:59:ca:ca:d3:3b:59:cb:6e:d2:2c:64:96:
bb:fe:8e:64:47:ef:d5:f8:4f:8e:b3:27:d1:11:4a:
f8:50:ea:72:2d:19:1b:b4:81:a0:66:f4:07:7a:1d:
41:98:8e:0b:e0:6e:d5:f0:cf:60:0b:6f:ae:10:fd:
40:59:09:af:f9:c9:b4:a5:40:4d:b8:65:26:04:a6:
ad:40:ba:17:22:58:ca:12:2b:91:6c:54:e8:df:52:
d9:69:3d:f9:f6:e6:e0:3d:f1:e5:dc:b2:e2:7a:e0:
f5:c2:b7:46:2d:20:f6:26:54:69:f0:05:6d:d0:56:
34:36:59:72:ec:ca:97:d8:0d:3b:9a:00:b9:90:3f:
4c:8b:2f:64:cb:6f:00:2f:50:93:49:60:37:c5:bb:
05:86:85:0d:5c:9b:0c:03:a4:6e:75:b4:38:dc:8f:
23:06:ab:8d:59:c1:96:31:b6:b6:7d:8a:75:08:30:
a5:f1:d4:36:e7:e5:58:f8:f4:de:5f:49:cf:84:0e:
2f:1b:6a:7e:e8:8c:98:d8:02:ca:84:a2:cd:ad:80:
48:36:60:c3:00:48:a4:00:30:e3:7c:c4:ec:ea:39:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9F:17:BB:1A:4F:1C:B3:1E:52:6A:D8:B5:86:5B:EF:A1:33:8E:B9
X509v3 Authority Key Identifier:
keyid:91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/91EB13B95B705981B3BCB0592522AFFA9B29460E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234342e302f32322d3232203d3e20323634333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.244.0/22
Signature Algorithm: sha256WithRSAEncryption
97:a5:c1:ac:b9:3c:64:f5:8f:1e:08:3d:c9:76:b9:32:7a:88:
66:63:5e:25:7f:24:74:cf:0d:6b:7b:0c:40:80:40:d4:21:46:
1c:bc:3e:72:56:8f:26:29:99:e5:cb:f5:30:ce:1b:52:1e:a4:
77:cf:21:80:a5:08:cf:2e:b3:5d:0e:35:72:6b:20:66:a7:ef:
d0:69:60:c2:46:ce:74:d3:0f:e8:a6:04:a2:d2:38:06:d7:af:
4f:cc:cd:2d:f8:15:f1:38:27:4f:5e:19:c7:5c:18:01:a0:08:
92:6d:32:fe:a5:6f:2f:8c:95:6e:39:70:dd:ad:c4:ac:17:d0:
b8:dc:92:64:e1:42:a0:45:32:0a:2c:89:62:82:5b:ff:86:36:
92:93:10:c4:60:19:8e:7b:52:e7:d7:08:83:33:93:3e:f8:cd:
5b:0a:98:2f:8f:54:ce:2f:ac:cd:66:0e:7f:71:0d:61:cb:22:
32:93:2f:83:e2:ff:98:d1:f0:ac:05:2a:93:3b:14:03:f6:f4:
9f:ba:ad:20:48:5c:8c:e6:06:07:3a:a8:39:5f:24:7a:e8:c3:
eb:ed:a8:9e:33:40:a8:ca:41:ef:5a:c2:d3:98:ec:43:4a:cc:
a8:bf:d5:69:08:ef:a5:d5:3a:8c:e4:89:49:27:73:e2:6d:fe:
b8:8e:e9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:34:28 2025 by rpki-client