![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3234203d3e20323634393030.roa
File: 3136382e3232382e382e302f32322d3234203d3e20323634393030.roa (raw, json)
Hash identifier: X30GDNhBATspB3Yc2jqiXrpLoxwNkXnbgmsx/7FaaSA=
Subject key identifier: 02:0F:6C:3F:F7:FC:18:E9:12:B9:32:DC:35:F7:53:C4:F0:44:21:18
Certificate issuer: /CN=CDB34CF4AFC01721153990AE1A10D922F7507546
Certificate serial: 1B7B73B205961A205DA725E9B8828B171EED806F
Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3234203d3e20323634393030.roa
Signing time: Wed 05 Jun 2024 19:26:02 +0000
ROA not before: Wed 05 Jun 2024 19:21:02 +0000
ROA not after: Wed 04 Jun 2025 19:26:02 +0000
asID: 264900
IP address blocks: 168.228.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 14:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:7b:73:b2:05:96:1a:20:5d:a7:25:e9:b8:82:8b:17:1e:ed:80:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546
Validity
Not Before: Jun 5 19:21:02 2024 GMT
Not After : Jun 4 19:26:02 2025 GMT
Subject: CN=020F6C3FF7FC18E912B932DC35F753C4F0442118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7b:c2:ec:f0:49:5f:ff:06:a2:b3:ea:b7:56:
b6:56:bb:0c:09:2b:15:af:d4:b8:7a:c6:d4:6f:85:
cd:80:72:9a:ff:bb:b7:23:11:77:7e:4a:c2:a9:e8:
4d:42:e4:d2:ba:8f:1e:de:fd:2c:1c:7b:b8:7c:fe:
19:9e:e0:4b:3e:ab:23:61:64:96:a5:0d:e6:f2:1a:
82:38:67:51:c8:13:9b:88:b4:06:07:2c:2b:7d:49:
7e:91:46:42:9c:0c:79:c3:29:e3:7f:79:4c:b4:a1:
ce:7b:be:89:3f:14:6d:2d:1b:67:f1:43:e5:0d:0e:
5f:d1:46:ae:ab:7c:de:42:44:de:ed:b1:1c:a9:6d:
12:7b:12:4b:db:3b:8e:55:09:b8:90:c3:1c:14:84:
07:0d:6c:b9:2e:52:bc:08:7f:98:7b:5b:96:ac:84:
60:fe:d4:ea:61:26:7d:02:f2:53:a1:9e:e2:ab:7f:
9e:8d:fc:91:22:cc:8f:7b:c5:50:26:9a:91:0a:01:
74:ca:9e:cf:44:f3:c3:fd:ce:b2:bc:9e:d7:64:3b:
ad:e4:b6:b5:88:12:a9:ac:dd:e6:fa:06:48:cb:d1:
ab:ba:3f:c0:31:e5:aa:88:75:dd:c6:af:8e:4a:4d:
78:89:2b:28:d2:92:4c:6e:2f:7f:76:4b:70:dc:ae:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0F:6C:3F:F7:FC:18:E9:12:B9:32:DC:35:F7:53:C4:F0:44:21:18
X509v3 Authority Key Identifier:
keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3234203d3e20323634393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.8.0/22
Signature Algorithm: sha256WithRSAEncryption
16:f3:3b:58:11:5c:cc:57:3b:5b:19:af:03:bc:36:e1:f1:98:
b2:8c:96:fd:4b:d1:91:04:25:cc:3a:0e:63:71:44:7c:5a:eb:
9c:a2:77:c0:f2:50:b9:08:91:d1:09:0c:2f:ac:ee:0a:3c:2d:
37:39:c2:02:8c:47:00:7a:97:de:92:ef:31:d0:99:11:15:98:
2d:43:92:b7:f0:a4:1c:8a:28:fd:67:39:47:df:c9:0c:65:ed:
03:48:ae:4f:2c:8d:e7:d8:95:b3:90:31:0f:07:df:98:60:09:
8e:45:34:27:d7:77:95:86:8a:9f:07:1b:1e:18:88:84:0e:10:
54:c4:95:28:68:10:b2:9f:14:a1:65:4b:08:f0:ee:b6:72:20:
54:c8:a2:21:ff:db:be:ab:11:b4:0c:dd:92:d4:63:53:d5:45:
95:f5:71:18:89:9f:18:28:a1:77:7f:9d:25:0b:99:c4:0b:52:
31:fb:f2:f3:24:82:d2:7f:69:d0:bb:9d:32:be:e0:06:37:4e:
7c:55:e9:dc:b1:19:0c:b4:66:56:e6:c6:d4:ef:41:74:5e:78:
32:70:e5:e5:91:22:df:b8:ec:cc:86:41:5c:6a:a3:21:75:29:
c6:3c:6f:15:88:52:93:c9:70:5d:49:60:7c:eb:1b:63:d7:c9:
21:7a:ac:17
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG3tzsgWWGiBdpyXpuIKLFx7tgG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RCMzRDRjRBRkMwMTcyMTE1Mzk5MEFFMUExMEQ5MjJG
NzUwNzU0NjAeFw0yNDA2MDUxOTIxMDJaFw0yNTA2MDQxOTI2MDJaMDMxMTAvBgNV
BAMTKDAyMEY2QzNGRjdGQzE4RTkxMkI5MzJEQzM1Rjc1M0M0RjA0NDIxMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqe8Ls8Elf/wais+q3VrZWuwwJ
KxWv1Lh6xtRvhc2Acpr/u7cjEXd+SsKp6E1C5NK6jx7e/Swce7h8/hme4Es+qyNh
ZJalDebyGoI4Z1HIE5uItAYHLCt9SX6RRkKcDHnDKeN/eUy0oc57vok/FG0tG2fx
Q+UNDl/RRq6rfN5CRN7tsRypbRJ7EkvbO45VCbiQwxwUhAcNbLkuUrwIf5h7W5as
hGD+1OphJn0C8lOhnuKrf56N/JEizI97xVAmmpEKAXTKns9E88P9zrK8ntdkO63k
trWIEqms3eb6BkjL0au6P8Ax5aqIdd3Gr45KTXiJKyjSkkxuL392S3Dcrtg9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAg9sP/f8GOkSuTLcNfdTxPBEIRgwHwYDVR0j
BBgwFoAUzbNM9K/AFyEVOZCuGhDZIvdQdUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU
RnEvMC9DREIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjM0Q0Y0QUZDMDE3MjEx
NTM5OTBBRTFBMTBEOTIyRjc1MDc1NDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJzUjR1YVVtZXFTTmIyYnU0UTFNeUtucExBVEVMS1ppUTV0V3R3Zjh4VEZxLzAv
MzEzNjM4MmUzMjMyMzgyZTM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzkzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqOQIMA0GCSqGSIb3DQEBCwUAA4IBAQAW8ztYEVzM
VztbGa8DvDbh8ZiyjJb9S9GRBCXMOg5jcUR8WuuconfA8lC5CJHRCQwvrO4KPC03
OcICjEcAepfeku8x0JkRFZgtQ5K38KQciij9ZzlH38kMZe0DSK5PLI3n2JWzkDEP
B9+YYAmORTQn13eVhoqfBxseGIiEDhBUxJUoaBCynxShZUsI8O62ciBUyKIh/9u+
qxG0DN2S1GNT1UWV9XEYiZ8YKKF3f50lC5nEC1Ix+/LzJILSf2nQu50yvuAGN058
VencsRkMtGZW5sbU70F0XngycOXlkSLfuOzMhkFcaqMhdSnGPG8ViFKTyXBdSWB8
6xtj18kheqwX
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:02 2025 by rpki-client