Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/3138312e3138392e36322e302f32342d3234203d3e20323731333435.roa
File: 3138312e3138392e36322e302f32342d3234203d3e20323731333435.roa (raw, json)
Hash identifier: cHcrkUvl+7JqDRNqCAS/oKc9VXVKKgoSvmq1hAEQG0s=
Subject key identifier: A8:3D:7F:E3:C9:07:CF:6C:51:41:2A:06:5A:E4:FD:B6:26:56:3A:5E
Certificate issuer: /CN=14965CE2206A073FBCD58BA22CB5BF760827E0AF
Certificate serial: 64A5C8E3C31C2557E4D79192A53D1113DF69627C
Authority key identifier: 14:96:5C:E2:20:6A:07:3F:BC:D5:8B:A2:2C:B5:BF:76:08:27:E0:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/3138312e3138392e36322e302f32342d3234203d3e20323731333435.roa
Signing time: Mon 17 Mar 2025 20:30:14 +0000
ROA not before: Mon 17 Mar 2025 20:25:14 +0000
ROA not after: Mon 16 Mar 2026 20:30:14 +0000
asID: 271345
IP address blocks: 181.189.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 20:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a5:c8:e3:c3:1c:25:57:e4:d7:91:92:a5:3d:11:13:df:69:62:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14965CE2206A073FBCD58BA22CB5BF760827E0AF
Validity
Not Before: Mar 17 20:25:14 2025 GMT
Not After : Mar 16 20:30:14 2026 GMT
Subject: CN=A83D7FE3C907CF6C51412A065AE4FDB626563A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7d:56:aa:22:07:b4:f9:be:ff:b1:81:e8:f2:
91:93:41:27:2c:12:6c:b1:c4:aa:eb:63:d5:b0:28:
0f:9f:58:be:ad:37:8c:c8:f7:48:ea:51:4a:46:dc:
d5:c8:8c:b4:c8:9d:c7:c2:35:16:02:1c:63:12:19:
44:43:57:40:bf:15:a0:fb:38:a3:8d:73:67:09:f7:
43:53:47:47:3e:6b:70:43:91:57:87:c5:48:0b:a8:
c1:ea:10:b9:e8:49:36:0e:b4:79:2c:f9:a7:79:3b:
f2:e0:70:10:3f:72:44:54:88:eb:8b:74:29:2c:09:
dd:ab:b8:be:38:3e:17:d9:ea:be:9a:ce:49:a6:c2:
04:d4:21:3e:c3:c8:23:f5:31:44:54:d4:fd:4e:83:
4c:13:0d:45:c5:d8:8f:50:24:9c:67:99:3c:c2:9c:
89:22:ee:a8:78:01:fe:26:26:7e:4b:94:89:84:bd:
21:40:f5:61:4f:4a:f7:1d:ff:59:de:67:3c:0c:64:
42:db:9f:16:ef:86:df:b0:ad:64:17:28:ec:c1:bd:
9d:ed:e0:50:e6:c5:7e:c2:ce:49:43:63:b9:d6:48:
56:6a:8f:38:fe:a5:c7:9b:ba:45:94:00:cd:52:57:
ab:d3:61:b1:d5:ca:2e:81:0e:b5:8b:f6:a1:dc:51:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3D:7F:E3:C9:07:CF:6C:51:41:2A:06:5A:E4:FD:B6:26:56:3A:5E
X509v3 Authority Key Identifier:
keyid:14:96:5C:E2:20:6A:07:3F:BC:D5:8B:A2:2C:B5:BF:76:08:27:E0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/3138312e3138392e36322e302f32342d3234203d3e20323731333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.62.0/24
Signature Algorithm: sha256WithRSAEncryption
07:04:c3:eb:4e:dc:97:75:c7:aa:ce:7d:aa:5c:49:85:1d:d1:
a9:54:3e:4d:9b:a0:f8:a6:d2:20:a4:e7:e9:cf:e7:c3:cd:73:
3c:60:49:f1:3f:86:57:10:e2:f5:5f:36:c1:22:bd:60:a7:7e:
d4:44:28:e1:d7:3f:da:c8:1d:85:6d:1e:a6:0a:fe:9f:fb:51:
a9:a4:3a:33:c4:95:a0:24:e6:c9:bb:7b:2b:6f:65:ba:ce:1c:
d2:10:f3:9c:41:c6:7c:6f:f8:53:6e:4c:5f:49:6a:50:b2:9f:
58:82:c7:64:c0:56:eb:90:be:7c:b9:65:0b:62:0f:d5:64:64:
8c:00:19:9c:29:8a:4d:c6:1b:9a:46:22:42:87:39:cf:aa:01:
6f:9c:5b:c6:7f:e2:23:1b:2a:06:f5:b8:02:34:fc:95:8d:92:
16:13:50:a6:3a:02:86:8b:fc:12:71:be:72:74:fe:41:c3:a8:
68:53:01:c1:e8:10:c0:4d:3a:b8:42:ac:47:74:65:88:4e:34:
ca:6d:fb:dc:d9:e9:29:8d:69:91:d8:5a:b4:fe:29:70:dc:22:
27:07:49:da:61:03:c3:05:13:41:67:da:25:91:3b:d3:fb:c3:
8e:b0:85:ff:a9:da:12:de:e1:36:25:6f:a1:3f:d5:a9:86:6b:
cb:f1:8c:ec
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZKXI48McJVfk15GSpT0RE99pYnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5NjVDRTIyMDZBMDczRkJDRDU4QkEyMkNCNUJGNzYw
ODI3RTBBRjAeFw0yNTAzMTcyMDI1MTRaFw0yNjAzMTYyMDMwMTRaMDMxMTAvBgNV
BAMTKEE4M0Q3RkUzQzkwN0NGNkM1MTQxMkEwNjVBRTRGREI2MjY1NjNBNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjfVaqIge0+b7/sYHo8pGTQScs
EmyxxKrrY9WwKA+fWL6tN4zI90jqUUpG3NXIjLTIncfCNRYCHGMSGURDV0C/FaD7
OKONc2cJ90NTR0c+a3BDkVeHxUgLqMHqELnoSTYOtHks+ad5O/LgcBA/ckRUiOuL
dCksCd2ruL44PhfZ6r6azkmmwgTUIT7DyCP1MURU1P1Og0wTDUXF2I9QJJxnmTzC
nIki7qh4Af4mJn5LlImEvSFA9WFPSvcd/1neZzwMZELbnxbvht+wrWQXKOzBvZ3t
4FDmxX7CzklDY7nWSFZqjzj+pcebukWUAM1SV6vTYbHVyi6BDrWL9qHcUQ8xAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqD1/48kHz2xRQSoGWuT9tiZWOl4wHwYDVR0j
BBgwFoAUFJZc4iBqBz+81YuiLLW/dggn4K8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2ticXNQUTJ1UGJQcEZkWTc0V3FGNDVnUUNueWdiWHc3U2dTNFZYUE1Z
SlkvMC8xNDk2NUNFMjIwNkEwNzNGQkNENThCQTIyQ0I1QkY3NjA4MjdFMEFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0OTY1Q0UyMjA2QTA3M0ZC
Q0Q1OEJBMjJDQjVCRjc2MDgyN0UwQUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNrYnFzUFEydVBiUHBGZFk3NFdxRjQ1Z1FDbnlnYlh3N1NnUzRWWFBNWUpZLzAv
MzEzODMxMmUzMTM4MzkyZTM2MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC1vT4wDQYJKoZIhvcNAQELBQADggEBAAcEw+tO
3Jd1x6rOfapcSYUd0alUPk2boPim0iCk5+nP58PNczxgSfE/hlcQ4vVfNsEivWCn
ftREKOHXP9rIHYVtHqYK/p/7UamkOjPElaAk5sm7eytvZbrOHNIQ85xBxnxv+FNu
TF9JalCyn1iCx2TAVuuQvny5ZQtiD9VkZIwAGZwpik3GG5pGIkKHOc+qAW+cW8Z/
4iMbKgb1uAI0/JWNkhYTUKY6AoaL/BJxvnJ0/kHDqGhTAcHoEMBNOrhCrEd0ZYhO
NMpt+9zZ6SmNaZHYWrT+KXDcIicHSdphA8MFE0Fn2iWRO9P7w46whf+p2hLe4TYl
b6E/1amGa8vxjOw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:32:16 2025 by rpki-client