Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/3133382e3132312e3139392e302f32342d3234203d3e20323634333031.roa
File: 3133382e3132312e3139392e302f32342d3234203d3e20323634333031.roa (raw, json)
Hash identifier: qfl1UROTOC7Or/yE489xLiGH9NfwAfR4tNwg/MY6PGc=
Subject key identifier: C2:A4:80:47:E4:0E:76:4D:75:3C:5D:6A:6E:99:AC:19:4D:46:A7:31
Certificate issuer: /CN=8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B
Certificate serial: 20393B87BE403772F85773709CCF24D4405A074C
Authority key identifier: 8B:E6:51:CB:0C:FD:9D:3B:1C:7B:C9:48:3B:51:70:67:2B:77:ED:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/3133382e3132312e3139392e302f32342d3234203d3e20323634333031.roa
Signing time: Sat 08 Feb 2025 17:39:40 +0000
ROA not before: Sat 08 Feb 2025 17:34:40 +0000
ROA not after: Sat 07 Feb 2026 17:39:40 +0000
asID: 264301
IP address blocks: 138.121.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 18:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:39:3b:87:be:40:37:72:f8:57:73:70:9c:cf:24:d4:40:5a:07:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B
Validity
Not Before: Feb 8 17:34:40 2025 GMT
Not After : Feb 7 17:39:40 2026 GMT
Subject: CN=C2A48047E40E764D753C5D6A6E99AC194D46A731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:96:ad:d6:0b:c2:f7:61:a4:f9:30:6f:f0:
e6:43:71:03:c3:b9:a5:5b:ad:ca:97:dc:be:ce:4c:
66:cb:d9:ae:ef:af:ab:3a:db:c6:cb:0d:12:b8:25:
5f:72:6e:05:94:c3:8c:05:c2:8c:b3:7e:62:07:d7:
c7:d5:4b:c9:de:11:ad:38:96:81:d0:03:e9:de:09:
bb:bb:c9:fb:64:c5:95:c0:04:4c:b4:4f:89:74:db:
86:e0:a8:b5:fb:00:4b:96:82:22:71:eb:a9:7c:7f:
3f:4d:1c:65:4d:87:2f:2e:28:82:2b:20:73:8e:a7:
be:78:c0:55:4a:22:24:e3:38:62:d6:a8:a6:eb:62:
e4:14:c1:e5:13:3f:97:62:d3:c5:9d:cd:a7:f6:60:
5d:91:90:9a:41:fe:8b:48:fc:90:d9:d7:dd:58:66:
ed:c7:75:3c:8f:b8:d3:d1:36:16:42:99:9a:fb:a2:
a9:15:12:96:79:13:fb:12:2f:3c:4f:67:cd:a0:7a:
93:27:61:db:22:2c:bf:4b:a1:e2:e3:ec:14:93:a3:
bc:8c:9a:7d:08:d0:13:6b:b4:eb:15:c2:c4:09:3f:
f3:9b:59:2b:1f:14:01:a7:d3:1a:fa:45:78:2b:0f:
4a:2d:2f:55:28:12:fc:09:79:a7:69:84:9c:0a:63:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A4:80:47:E4:0E:76:4D:75:3C:5D:6A:6E:99:AC:19:4D:46:A7:31
X509v3 Authority Key Identifier:
keyid:8B:E6:51:CB:0C:FD:9D:3B:1C:7B:C9:48:3B:51:70:67:2B:77:ED:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/3133382e3132312e3139392e302f32342d3234203d3e20323634333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.199.0/24
Signature Algorithm: sha256WithRSAEncryption
26:95:ff:74:5b:a4:95:d7:1a:6b:f7:41:bc:70:6d:ee:07:56:
fe:68:37:7d:e7:42:74:57:5f:2e:18:37:81:11:bc:a3:8c:95:
1e:37:8e:d8:c1:0a:89:90:9c:01:c5:07:6e:a6:4e:ce:bc:21:
34:9a:7d:8e:6a:b5:08:86:fe:3f:5c:c4:eb:91:df:32:b7:2c:
fa:6a:86:f8:cb:57:6e:a9:9e:46:b5:f4:dc:94:b2:f6:e8:1a:
df:c5:fd:99:b6:be:63:13:be:9e:ec:0c:0c:54:36:4b:e1:91:
79:f4:01:d8:6c:cd:b0:8b:b0:36:78:38:c2:21:a3:f7:8f:f2:
48:fb:a6:59:87:78:0f:2d:49:7a:bd:ec:ee:e6:9a:6a:a2:eb:
01:16:5a:41:3b:63:f4:8c:63:e6:5f:8b:2f:1e:0b:57:80:c3:
90:47:27:30:d6:41:29:2a:29:31:76:5d:16:5a:3c:10:8d:e7:
60:2e:46:0c:c6:c2:46:ff:9d:3c:52:b8:e7:2c:70:f3:c2:23:
66:e2:28:97:56:f1:52:f0:8d:f8:b1:47:05:20:92:15:6b:ef:
22:c0:3f:ea:18:48:0d:9a:b9:df:3a:b1:e2:bf:aa:ae:00:e7:
86:c1:72:01:4f:f5:68:29:84:bd:e0:9e:39:4f:b8:20:03:38:
06:6c:c6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:26 2025 by rpki-client