Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/3133382e3132312e3139382e302f32342d3234203d3e20323634333031.roa
File: 3133382e3132312e3139382e302f32342d3234203d3e20323634333031.roa (raw, json)
Hash identifier: RmZ8zd7zgwNwm8QZdw2WYzI96o9QFEk7Lf0pqAJ0sms=
Subject key identifier: AB:90:3A:BA:1D:61:47:9F:4F:12:79:FF:DE:0D:34:DD:9B:2C:93:16
Certificate issuer: /CN=8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B
Certificate serial: 6C8BBC621FA0F6A0BB5E689DAAC35328CE8B9C44
Authority key identifier: 8B:E6:51:CB:0C:FD:9D:3B:1C:7B:C9:48:3B:51:70:67:2B:77:ED:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/3133382e3132312e3139382e302f32342d3234203d3e20323634333031.roa
Signing time: Sat 08 Feb 2025 17:39:40 +0000
ROA not before: Sat 08 Feb 2025 17:34:40 +0000
ROA not after: Sat 07 Feb 2026 17:39:40 +0000
asID: 264301
IP address blocks: 138.121.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 18:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8b:bc:62:1f:a0:f6:a0:bb:5e:68:9d:aa:c3:53:28:ce:8b:9c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B
Validity
Not Before: Feb 8 17:34:40 2025 GMT
Not After : Feb 7 17:39:40 2026 GMT
Subject: CN=AB903ABA1D61479F4F1279FFDE0D34DD9B2C9316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a3:ad:bd:e1:f7:ba:64:5a:7d:12:a2:22:9f:
8d:d5:75:42:52:ac:8a:f7:1a:a3:18:07:d8:b8:2e:
08:12:95:e9:92:b0:3d:78:6f:09:b2:ba:55:d5:28:
70:38:99:a5:07:25:4a:cb:87:2a:c1:0e:c8:9b:3e:
00:84:d1:af:95:b3:4e:34:df:e4:2a:12:9b:d1:11:
7c:40:a9:8d:19:d6:0e:c0:1f:0b:9d:e4:3e:f8:cf:
43:e9:ef:eb:07:b3:ac:1a:d6:c3:54:fa:5a:97:a2:
ce:09:71:fa:13:c1:bf:1c:3a:ae:e5:1c:bc:5d:d9:
3a:20:c0:10:f2:d2:69:ef:53:2d:8b:0e:b3:3d:52:
86:fa:b9:5d:37:82:eb:1a:25:71:3e:bb:3a:5f:71:
ec:c7:b1:3d:16:b5:ba:77:32:7a:a8:ee:42:63:51:
54:79:c9:9b:45:07:78:16:9c:37:f4:f5:a4:e7:c3:
07:e3:13:10:fd:c9:cc:f3:6e:dd:10:00:29:a0:7c:
2b:d7:e7:2f:f3:34:a2:a9:c4:00:2b:d6:2b:ea:72:
f9:d3:17:2f:4c:e2:64:e7:fc:21:a0:50:72:76:ac:
9f:ee:30:95:5f:62:d1:1b:47:99:26:81:bd:db:04:
3c:09:26:3b:63:4d:42:d9:94:92:64:84:b3:3e:b6:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:90:3A:BA:1D:61:47:9F:4F:12:79:FF:DE:0D:34:DD:9B:2C:93:16
X509v3 Authority Key Identifier:
keyid:8B:E6:51:CB:0C:FD:9D:3B:1C:7B:C9:48:3B:51:70:67:2B:77:ED:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/3133382e3132312e3139382e302f32342d3234203d3e20323634333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.198.0/24
Signature Algorithm: sha256WithRSAEncryption
62:fb:34:b0:5c:ef:01:77:ef:1f:8e:9e:20:64:2c:50:9d:07:
5d:21:16:4d:66:f3:a8:5b:f4:c3:18:f1:c2:f7:f4:4f:0f:cd:
ad:f7:84:5b:b1:bb:9a:6a:d6:40:c8:13:ca:62:de:6e:89:e2:
98:3a:54:3b:94:7b:e4:94:56:c6:2b:18:5a:73:d6:72:97:9a:
5f:77:36:ce:01:b6:60:96:f2:e0:af:cc:05:30:4b:7d:ae:56:
fd:a9:f2:b6:ad:b3:89:0a:33:f0:89:8a:19:13:64:d7:00:10:
ed:3f:d4:88:75:dd:e2:f8:1c:3d:86:36:e6:dc:d8:8e:74:de:
59:88:1b:4b:a0:bd:3c:ff:68:47:ba:2a:7e:49:40:2f:51:b9:
32:bb:f3:c1:47:90:de:22:a3:73:84:59:7a:79:be:f7:f2:97:
14:94:56:01:bf:dd:5d:40:98:48:7a:b3:08:04:8a:ce:46:4a:
49:45:75:ce:e6:bc:80:26:07:c8:cf:4e:36:d2:aa:f2:94:49:
99:12:a9:5f:d6:82:6c:bf:51:8b:1a:7f:1e:10:82:04:57:04:
57:8d:60:f3:f1:17:99:61:3b:21:77:3a:2c:de:be:b6:09:5b:
d8:29:ff:87:d3:6c:82:b0:fa:a5:20:71:4b:d7:41:d2:8e:c1:
cc:57:4e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:24 2025 by rpki-client