Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa
File: 3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (raw, json)
Hash identifier: 96pkkGCWJb4fnNI0yEprRo2oVBRDa6EBxMS9qYEOPR0=
Subject key identifier: 1E:3E:8B:AE:32:0C:1C:86:24:68:DC:A0:CD:C6:4A:00:D5:DC:6B:61
Certificate issuer: /CN=0FC679D7315FDF14EBEF014559AE8C78EC5497FE
Certificate serial: 6DDBE67089AFF51A424E0E26C59836B3399658D9
Authority key identifier: 0F:C6:79:D7:31:5F:DF:14:EB:EF:01:45:59:AE:8C:78:EC:54:97:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa
Signing time: Mon 08 Jun 2026 12:07:04 +0000
ROA not before: Mon 08 Jun 2026 12:02:04 +0000
ROA not after: Mon 07 Jun 2027 12:07:04 +0000
asID: 264411
IP address blocks: 138.204.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jun 2026 11:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:db:e6:70:89:af:f5:1a:42:4e:0e:26:c5:98:36:b3:39:96:58:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FC679D7315FDF14EBEF014559AE8C78EC5497FE
Validity
Not Before: Jun 8 12:02:04 2026 GMT
Not After : Jun 7 12:07:04 2027 GMT
Subject: CN=1E3E8BAE320C1C862468DCA0CDC64A00D5DC6B61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:19:ab:bd:67:e4:37:d6:8f:fb:b7:38:60:
d1:c9:85:da:0b:ea:18:19:9b:68:05:56:c1:cb:b4:
10:3c:77:c9:eb:6d:50:a8:2b:c2:62:40:ba:41:65:
c2:41:3a:a8:79:31:91:0d:63:ea:5c:44:e1:09:70:
60:cc:15:80:f5:74:98:cf:59:cc:44:86:41:75:7f:
0b:f6:9f:ed:ba:ce:55:1a:b0:b9:db:90:b3:4d:c3:
22:40:47:62:c3:24:ff:aa:19:0f:92:7d:20:c4:f1:
8e:75:39:40:f0:86:1e:2b:50:fb:2d:18:99:fd:52:
5c:05:53:9f:95:0d:13:2e:ab:60:76:d6:8a:d5:80:
e4:dc:99:b2:ee:49:1e:e6:9e:e7:47:1b:9d:1a:2f:
93:6c:63:90:83:80:38:6c:33:4c:9e:5e:34:08:ec:
dc:41:c2:23:e1:38:00:35:db:26:28:0d:ea:e4:c1:
02:97:c5:0b:fa:95:a7:d1:b4:11:79:ce:4f:cd:9b:
94:48:5e:11:0f:ec:bb:e9:eb:0f:e7:88:aa:7e:95:
36:d4:00:9f:5b:11:59:18:87:51:d2:cb:30:b5:0c:
f0:01:d2:a6:e4:29:f0:45:a5:06:42:d3:2d:8d:5d:
90:44:d4:24:61:31:bc:c3:16:08:09:63:d7:47:60:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3E:8B:AE:32:0C:1C:86:24:68:DC:A0:CD:C6:4A:00:D5:DC:6B:61
X509v3 Authority Key Identifier:
keyid:0F:C6:79:D7:31:5F:DF:14:EB:EF:01:45:59:AE:8C:78:EC:54:97:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.124.0/22
Signature Algorithm: sha256WithRSAEncryption
f2:7a:b8:d2:76:c4:fb:15:78:46:57:f4:12:99:a4:57:b1:ec:
af:e8:32:47:80:37:ff:5d:b4:46:ff:c4:4b:a3:f8:b0:58:72:
ac:29:01:52:44:a3:65:83:a8:5e:85:9c:9f:82:2e:b4:f7:23:
34:d1:4a:de:85:2a:df:e4:b8:c8:5e:9b:d5:1a:46:37:a5:dd:
74:67:03:ab:b3:4f:72:65:2d:cb:41:c9:83:61:e8:d5:f8:68:
c2:21:fa:4d:9e:ce:8e:bf:10:c6:c0:ab:9f:7d:be:a3:13:c6:
3b:1b:1d:70:e6:50:8f:72:49:69:b1:05:01:69:d7:af:f5:8b:
d7:67:1c:03:d2:75:ff:54:67:1f:86:6f:4b:cc:98:58:69:19:
2e:32:0a:d1:d6:85:94:4a:f1:f6:cc:cc:3e:79:75:66:3c:e3:
d2:a5:38:68:cf:6c:e8:a5:2a:a6:fd:96:1b:f2:4f:0a:17:46:
6b:97:1a:e8:42:1a:94:5a:f3:be:9f:23:84:90:32:fd:64:d9:
74:83:14:c6:7e:bb:42:62:96:a2:99:d1:b1:70:95:c0:aa:4f:
d4:8c:48:5c:c3:2c:90:66:3c:13:ac:eb:91:7c:c9:44:0d:5e:
65:b6:4f:b4:07:a0:b0:0a:0a:79:d4:1d:71:35:23:f1:7a:f7:
17:eb:10:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:38:50 2026 by rpki-client