Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234352e302f32342d3234203d3e20323634333233.roa
File: 3133382e3132312e3234352e302f32342d3234203d3e20323634333233.roa (raw, json)
Hash identifier: IbgoI2l382l9Bo+qKZKn4COjbI5GZ+DhoHyvoEirL1s=
Subject key identifier: 58:C5:F5:04:42:24:B8:74:9C:B8:17:29:4C:F0:1E:77:D6:E5:66:6A
Certificate issuer: /CN=91EB13B95B705981B3BCB0592522AFFA9B29460E
Certificate serial: 2726B0E7C60171AE450DDE8A0135FEC9F7371F42
Authority key identifier: 91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234352e302f32342d3234203d3e20323634333233.roa
Signing time: Mon 31 Mar 2025 20:01:12 +0000
ROA not before: Mon 31 Mar 2025 19:56:12 +0000
ROA not after: Mon 30 Mar 2026 20:01:12 +0000
asID: 264323
IP address blocks: 138.121.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 22:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:26:b0:e7:c6:01:71:ae:45:0d:de:8a:01:35:fe:c9:f7:37:1f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91EB13B95B705981B3BCB0592522AFFA9B29460E
Validity
Not Before: Mar 31 19:56:12 2025 GMT
Not After : Mar 30 20:01:12 2026 GMT
Subject: CN=58C5F5044224B8749CB817294CF01E77D6E5666A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:52:24:f3:49:71:a8:8b:a0:48:b5:66:49:
1c:07:ed:c3:09:6c:0c:4a:eb:d7:ca:a4:2c:9d:9d:
17:55:c1:be:83:d1:85:8a:69:b3:26:2e:0a:51:18:
5f:34:5e:16:d3:fa:ad:f5:19:87:8b:c1:1d:b7:13:
04:ee:72:23:f8:b2:e2:4c:aa:26:48:ff:df:c3:1e:
7f:37:cc:c4:2d:2f:61:70:a5:51:de:16:42:6b:ba:
d5:c9:f3:0d:08:56:c5:d9:4d:a7:2a:f1:b0:d6:a6:
95:6e:8c:16:51:7c:bf:0a:4a:a6:ab:04:ca:4d:64:
32:1d:04:b4:f8:e9:4c:3c:1a:8a:2c:0a:d6:34:71:
36:cb:43:44:2e:34:12:0f:98:93:fe:41:e2:0e:79:
03:40:f0:b5:17:11:8f:2c:87:0d:3b:10:81:fa:78:
be:25:0f:d9:5e:67:94:03:f2:b9:af:53:06:66:53:
5c:e8:fb:1a:29:28:b8:36:81:d3:10:9a:0b:60:c8:
d7:04:05:e9:b8:66:cd:86:d5:07:69:59:89:f3:8c:
64:24:42:f3:13:d6:92:9b:a8:b9:37:f3:64:e0:72:
4f:ee:24:d0:f9:22:4b:06:71:0c:f7:13:4a:00:fc:
e0:4a:42:e7:66:7e:61:90:a6:cd:22:eb:fd:4a:24:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C5:F5:04:42:24:B8:74:9C:B8:17:29:4C:F0:1E:77:D6:E5:66:6A
X509v3 Authority Key Identifier:
keyid:91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/91EB13B95B705981B3BCB0592522AFFA9B29460E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234352e302f32342d3234203d3e20323634333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:56:ab:06:43:b5:b6:33:bf:59:0b:3c:f2:82:e0:b3:0d:25:
97:5e:97:26:07:7c:9e:12:a5:c0:4a:cd:8e:3d:52:9a:ca:23:
85:96:e2:af:97:6f:9a:f7:4f:f2:f4:fe:8d:03:0c:28:91:ca:
7c:59:71:5d:0b:ee:7b:d4:6c:fb:85:c3:4c:b7:81:91:a7:d1:
15:98:4d:2c:f7:38:f0:cb:c1:cc:6a:79:82:53:82:3f:71:b6:
12:f7:13:fe:56:4f:c9:ae:1f:27:ac:fa:22:fe:05:3b:08:52:
77:a4:48:89:c0:88:f0:67:7a:e8:67:69:90:13:0b:4e:ac:8c:
9d:00:b7:d9:39:bb:58:5e:af:b5:b8:07:38:63:0e:9f:79:cb:
2a:2f:e5:ac:75:4c:9d:58:74:16:37:5a:2d:5f:f2:d8:65:c1:
5a:e0:36:a8:3e:e8:3e:fa:8e:ff:39:a5:aa:ae:20:a9:09:fb:
a8:02:50:06:27:6b:e3:de:d8:21:a4:57:b3:cd:2a:43:c9:8e:
2a:2f:f9:0a:09:4e:6e:57:55:d7:16:23:ab:ca:f6:87:8e:8a:
88:14:64:78:fe:66:ae:6a:8d:e2:c6:36:09:5e:1c:05:f7:6e:
a2:ab:27:b6:f1:ff:4c:1a:e3:db:c3:7e:e4:66:96:1b:f0:00:
43:d6:3c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:35:52 2025 by rpki-client