Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234342e302f32342d3234203d3e20323634333233.roa
File: 3133382e3132312e3234342e302f32342d3234203d3e20323634333233.roa (raw, json)
Hash identifier: 56skpEmIFN3PqLhTBwv1fO7px7G4z9RijbQA7wr2VG8=
Subject key identifier: 65:29:EE:4E:F5:5E:0D:B8:9D:76:C8:78:E7:B3:90:D2:C3:13:E0:21
Certificate issuer: /CN=91EB13B95B705981B3BCB0592522AFFA9B29460E
Certificate serial: 03ACDEA18C1D587E09F8DEC47312AC1233F66327
Authority key identifier: 91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234342e302f32342d3234203d3e20323634333233.roa
Signing time: Mon 31 Mar 2025 20:01:11 +0000
ROA not before: Mon 31 Mar 2025 19:56:11 +0000
ROA not after: Mon 30 Mar 2026 20:01:11 +0000
asID: 264323
IP address blocks: 138.121.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 22:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ac:de:a1:8c:1d:58:7e:09:f8:de:c4:73:12:ac:12:33:f6:63:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91EB13B95B705981B3BCB0592522AFFA9B29460E
Validity
Not Before: Mar 31 19:56:11 2025 GMT
Not After : Mar 30 20:01:11 2026 GMT
Subject: CN=6529EE4EF55E0DB89D76C878E7B390D2C313E021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:c7:40:26:41:25:d0:5b:8b:91:6e:74:62:
48:55:54:10:88:fe:99:2e:f2:cd:19:3f:2e:f3:e5:
90:d4:f1:ea:f7:c3:2b:99:c0:bd:a5:f8:d1:4b:de:
0f:a9:35:c9:3f:7f:42:2f:25:13:0c:70:c5:3e:a8:
e5:84:a2:08:d4:0d:01:da:4f:97:4d:8e:53:da:7f:
7b:c2:bb:2e:7d:88:0a:0a:30:fd:f8:4c:0a:81:c4:
03:5c:18:6e:66:48:d4:85:7a:9d:f1:9b:d2:7e:a4:
44:47:6e:ec:1f:22:01:b8:e7:d4:a0:0c:a9:81:5b:
8c:06:5a:24:73:ad:d0:19:d4:dc:55:f9:f6:db:31:
ce:3b:d9:77:c8:cf:2f:b4:2b:cd:cf:7d:3f:cf:e3:
85:86:f4:44:53:82:b9:e3:47:16:1b:a1:89:12:10:
49:c3:66:39:11:79:96:a9:78:fa:ef:eb:67:47:90:
94:dc:bd:05:79:ee:e4:63:c7:be:2d:bc:a4:fe:01:
64:ba:89:89:af:2f:84:3f:c2:9a:02:c2:e3:5f:90:
da:63:34:06:4f:49:4e:6e:50:77:28:4a:de:d2:30:
31:8d:43:10:da:88:46:87:b5:e0:1c:c6:4a:44:af:
47:59:41:3f:42:f9:7f:af:57:15:3d:bc:0f:c2:6c:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:29:EE:4E:F5:5E:0D:B8:9D:76:C8:78:E7:B3:90:D2:C3:13:E0:21
X509v3 Authority Key Identifier:
keyid:91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/91EB13B95B705981B3BCB0592522AFFA9B29460E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234342e302f32342d3234203d3e20323634333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.244.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fc:6b:49:b0:2b:17:c7:2d:ab:69:5c:ed:5c:bd:c6:ed:81:
2e:db:5d:3a:bc:94:8d:42:48:00:aa:f7:1c:08:b3:3a:40:d1:
6b:bf:0f:c8:dd:80:c4:ae:f6:65:d5:a7:07:b6:32:ef:37:cf:
1a:66:65:19:59:7b:cc:42:32:5f:3f:59:01:0e:e4:a8:e8:f2:
1a:51:67:9a:b4:93:46:6d:74:bf:82:df:9a:d5:60:22:f5:5c:
bf:06:e9:32:01:0f:66:e3:e6:df:80:ae:f9:a3:72:08:ab:08:
13:34:f2:d8:d4:78:ea:23:7d:f0:f1:a9:ea:53:90:6e:e7:0e:
a9:47:f8:0e:77:80:de:32:87:74:3b:ba:8d:41:c3:c2:78:3a:
44:8b:de:97:44:0f:fb:6d:a4:ef:ab:87:4e:2b:c1:93:d7:aa:
0c:1e:a2:69:35:22:49:47:d8:39:67:35:a2:cc:cb:ec:84:d1:
a1:11:34:51:95:fe:07:5d:0e:6d:1b:29:db:eb:64:dc:e0:67:
16:fd:3a:36:7c:b7:11:83:74:0b:c8:9c:1a:9b:4e:37:6f:a9:
76:f5:e8:f3:07:6a:74:b3:69:4f:3d:c5:ba:5b:c6:1e:11:cc:
36:5e:d1:c9:22:43:e7:f3:f4:a0:30:7f:23:58:d4:87:e7:e5:
24:69:f1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:35:58 2025 by rpki-client