Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3234203d3e20323633393830.roa
File: 3133382e3235352e3234342e302f32322d3234203d3e20323633393830.roa (raw, json)
Hash identifier: 38w4fQH99w43+iKg4lbbIAxX5Xe3JHmLwOyyZRKYi30=
Subject key identifier: A6:13:A9:E3:E6:4E:9C:58:F0:7E:A4:D5:9C:44:81:2C:50:9A:DC:60
Certificate issuer: /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial: 5AEC46225DCB18542B5C71AF283AFF9D0F12C18E
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3234203d3e20323633393830.roa
Signing time: Wed 05 Jun 2024 18:36:59 +0000
ROA not before: Wed 05 Jun 2024 18:31:59 +0000
ROA not after: Wed 04 Jun 2025 18:36:59 +0000
asID: 263980
IP address blocks: 138.255.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 12:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ec:46:22:5d:cb:18:54:2b:5c:71:af:28:3a:ff:9d:0f:12:c1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Validity
Not Before: Jun 5 18:31:59 2024 GMT
Not After : Jun 4 18:36:59 2025 GMT
Subject: CN=A613A9E3E64E9C58F07EA4D59C44812C509ADC60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:68:6f:6b:e9:43:6f:73:07:09:6c:02:6b:
7c:6c:60:9d:9b:29:a2:1a:cd:44:8a:69:5c:86:d4:
8f:54:d4:ca:d7:11:85:45:74:2e:16:e7:b9:69:f7:
e7:c4:2b:df:cc:1e:e3:0a:3b:45:e4:46:de:ec:47:
ff:a2:2f:b2:a6:b2:f2:a4:95:1c:ec:53:35:88:ae:
1c:79:38:38:89:6a:82:f4:32:17:84:4b:2d:f1:dc:
48:6a:43:7e:94:40:14:b9:c4:ba:31:d8:cd:b1:f4:
b9:4e:ae:9a:72:a8:92:a3:f6:b0:16:b6:e8:20:90:
b5:0d:ec:69:43:9a:70:c0:78:1d:a8:2b:12:4a:5b:
5f:d8:b7:1a:e5:de:a6:f1:d2:08:99:d6:c1:f8:eb:
10:60:74:67:c3:1d:b8:21:70:4d:bc:ad:ca:a2:bb:
b1:f0:17:b6:87:70:bf:9e:3f:81:8b:99:34:57:04:
0a:ed:b7:87:d3:60:c9:ac:fb:76:34:39:6a:7a:2b:
34:f8:de:a5:a2:fc:87:f9:bb:c3:53:f3:5f:dc:79:
4e:e3:f6:c6:ab:5c:5f:16:22:06:b6:95:0c:ee:06:
bb:9a:8e:e2:35:ff:72:82:7b:0b:f9:e4:61:fc:ea:
47:9a:e6:d1:79:3b:ea:07:28:40:50:82:26:65:37:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:13:A9:E3:E6:4E:9C:58:F0:7E:A4:D5:9C:44:81:2C:50:9A:DC:60
X509v3 Authority Key Identifier:
keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3234203d3e20323633393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.244.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:0c:22:4b:8e:00:1c:8d:73:ce:ed:05:e6:56:69:90:73:2a:
2f:c5:bc:66:36:4e:cd:59:f2:43:11:42:2b:06:6b:d5:f4:40:
f0:96:df:12:a0:ef:bc:55:2f:b6:fe:f1:67:19:78:c8:6e:11:
61:33:3e:8e:ab:5d:79:39:4b:bd:3c:36:19:e8:b0:70:d3:26:
8f:c9:63:89:85:94:da:5d:24:21:80:8c:eb:8a:36:de:6d:87:
0d:64:95:14:0d:36:b3:68:98:4b:73:01:66:be:12:69:64:23:
de:f8:a3:2f:56:3a:30:99:37:46:6b:54:fa:d4:4d:02:40:cb:
6a:d6:44:ac:e2:e3:fb:48:7c:d2:13:1b:31:e1:35:34:ba:9d:
d7:c9:ab:6b:f3:14:9a:92:cb:9f:5d:fb:d7:ab:84:bf:41:76:
00:79:8e:4e:23:a8:6d:3a:70:c4:69:9b:09:d4:aa:93:cb:34:
3e:ed:33:3b:1c:12:83:46:f4:f1:06:aa:4c:86:54:da:e6:40:
a2:7e:6e:f6:09:a4:3b:a2:b2:5f:f5:64:be:d8:ec:37:97:d2:
21:a0:54:98:f0:05:cc:42:ac:bd:e1:01:68:11:0a:f1:fe:6f:
94:74:aa:72:b9:38:50:64:9e:9d:89:bf:ea:f7:5a:9b:af:a2:
8b:3e:90:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:35:42 2025 by rpki-client