Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34362e302f32342d3234203d3e203532353430.roa
File: 3133382e3138352e34362e302f32342d3234203d3e203532353430.roa (raw, json)
Hash identifier: u96Lq6pbzfH4N7im/gbEj8pbYDwTpfXRN3zU5V0vlzk=
Subject key identifier: CF:42:2B:80:DC:40:88:7B:E5:05:49:83:B7:96:4C:86:94:A7:3F:DE
Certificate issuer: /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial: 2703D18B39C3E1E18EFFCE6D28A50662A0AAC1F7
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34362e302f32342d3234203d3e203532353430.roa
Signing time: Fri 07 Feb 2025 20:51:00 +0000
ROA not before: Fri 07 Feb 2025 20:46:00 +0000
ROA not after: Fri 06 Feb 2026 20:51:00 +0000
asID: 52540
IP address blocks: 138.185.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 04:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:03:d1:8b:39:c3:e1:e1:8e:ff:ce:6d:28:a5:06:62:a0:aa:c1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
Validity
Not Before: Feb 7 20:46:00 2025 GMT
Not After : Feb 6 20:51:00 2026 GMT
Subject: CN=CF422B80DC40887BE5054983B7964C8694A73FDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:f6:6a:51:82:7b:fc:47:22:0e:a9:e3:9e:
a5:94:11:f3:a1:15:b5:9d:95:92:4e:6b:f1:06:70:
54:14:f9:fa:df:fe:c0:29:4e:ab:6e:36:85:28:38:
94:ce:fc:40:35:5b:df:57:8f:bb:00:be:ac:cb:e1:
92:85:89:60:5a:fd:b8:05:4c:63:39:e3:1a:1e:dc:
88:74:ee:9c:fe:43:e8:05:da:1c:b2:f5:fe:59:64:
06:6b:e4:7f:09:9d:e2:fd:e3:9f:a5:80:5a:53:b7:
74:70:ea:fa:96:5f:48:aa:62:f0:70:10:bc:05:90:
8e:22:cc:a5:ed:63:f1:4f:91:03:b2:a4:cf:71:53:
50:ee:02:bb:5a:d2:b2:46:5d:21:89:56:85:1d:09:
e8:4b:9d:a4:c3:15:de:26:87:fe:9c:f9:12:4d:43:
22:97:ae:99:a0:a9:2e:c2:d8:fc:02:5a:e4:de:ac:
f0:f3:a1:d9:90:9c:63:60:b4:f3:43:c0:14:71:54:
9a:db:94:07:dd:71:91:22:f4:aa:dd:d9:c9:ae:51:
d8:06:ee:3e:c8:7e:12:51:44:f8:41:c8:26:15:1d:
d0:e7:23:09:3c:f9:22:15:fc:bc:05:4e:d3:b9:dd:
22:48:d5:cc:96:8d:c7:ef:7d:77:42:1e:21:4f:05:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:42:2B:80:DC:40:88:7B:E5:05:49:83:B7:96:4C:86:94:A7:3F:DE
X509v3 Authority Key Identifier:
keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34362e302f32342d3234203d3e203532353430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c2:3f:97:db:37:44:a9:e4:a0:3c:b8:91:39:43:1b:83:56:
96:dd:81:8a:e4:da:35:a2:e0:7c:8e:93:ec:88:cd:8d:81:b1:
fc:71:9e:df:a0:cd:b3:f3:fd:c7:4a:55:f0:99:9e:e2:df:0b:
03:b6:82:1d:5a:1e:96:ce:b8:89:6e:33:7f:ee:d9:fc:e5:2f:
8c:6b:3b:4b:aa:f9:b3:76:f0:d6:9a:22:15:66:03:9b:c1:eb:
df:5f:3e:ca:a5:a6:a5:0c:bd:53:86:fd:47:7b:28:36:78:ac:
4e:4b:c6:3f:6f:e3:d7:cb:d6:f4:d4:2a:78:1f:93:d2:7a:5d:
02:e2:89:76:17:9d:73:79:6f:e5:25:e6:e1:54:c4:d6:5d:3e:
b8:f0:fb:e7:8c:11:7c:1e:d8:03:3e:01:0e:96:d4:ec:ef:bb:
07:50:c4:40:ce:72:58:d7:ac:ab:78:57:bc:5f:05:c1:bf:c2:
a3:08:80:a2:1b:2f:4b:a4:91:76:e6:ae:fc:f8:1f:bb:61:3b:
25:e1:7a:eb:6f:14:dd:19:09:ee:eb:fa:5b:38:f7:1e:36:35:
61:4d:ba:52:f7:d8:bd:46:b8:2a:ed:bb:45:64:33:eb:da:65:
d5:62:75:a9:cb:8e:f3:6e:af:49:ed:b4:fa:7d:a4:41:dc:16:
5a:4a:60:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:23:55 2025 by rpki-client