![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3232203d3e20323730383832.roa
File: 3138362e3139342e342e302f32322d3232203d3e20323730383832.roa (raw, json)
Hash identifier: PMOyEeyEBABKFlqWLxPv2yy1J24LiGEdVjPlkxvKxEY=
Subject key identifier: 95:60:D3:FC:C0:5B:A5:E5:DA:A9:78:01:4E:AA:52:48:75:BB:5A:9E
Certificate issuer: /CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
Certificate serial: 3908954D3113F77003AFC131F67DCD64AB5B4D85
Authority key identifier: 6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3232203d3e20323730383832.roa
Signing time: Tue 23 Apr 2024 12:49:14 +0000
ROA not before: Tue 23 Apr 2024 12:44:14 +0000
ROA not after: Tue 22 Apr 2025 12:49:14 +0000
asID: 270882
IP address blocks: 186.194.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Jun 2024 18:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:08:95:4d:31:13:f7:70:03:af:c1:31:f6:7d:cd:64:ab:5b:4d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
Validity
Not Before: Apr 23 12:44:14 2024 GMT
Not After : Apr 22 12:49:14 2025 GMT
Subject: CN=9560D3FCC05BA5E5DAA978014EAA524875BB5A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:59:71:42:5e:84:67:e6:d2:c8:d5:88:dd:
df:60:2b:1e:31:5b:21:e1:c6:eb:0f:99:f9:04:d1:
0f:06:15:5b:ab:3c:49:b0:dc:8e:b6:e6:bc:3e:68:
62:5d:8d:76:ca:25:d3:be:64:06:20:5c:f9:7d:74:
0d:c8:a6:d4:57:9a:dc:ed:c8:3b:38:f0:ea:62:40:
a0:2e:71:12:2e:6d:6c:36:fd:6e:5e:4a:1f:27:37:
aa:8c:b7:e5:5a:52:3c:19:1d:7f:50:69:e6:86:5a:
b5:2e:d8:8f:f1:7f:34:10:d6:d2:35:a1:24:c4:1d:
5c:f9:11:b3:22:49:1d:80:10:55:14:34:cb:3c:9b:
e9:14:60:e2:60:a5:fd:29:a1:a7:9e:a5:6c:67:5c:
33:14:42:c8:78:7d:4e:55:93:61:d9:9c:b4:c4:c0:
22:ce:fa:16:78:67:91:43:53:d8:21:85:e0:32:99:
28:f4:e4:2a:5f:58:f9:ed:45:61:50:23:a1:45:a4:
d4:49:c9:ca:1c:7e:ff:d5:44:70:74:fe:f2:fa:c4:
38:04:73:0a:8e:54:ba:4b:aa:20:9b:1f:a6:cd:53:
11:f1:e6:b7:3e:1c:33:6c:85:84:3b:80:59:5d:4b:
c2:6f:eb:df:10:c3:3b:dc:30:e2:1b:33:0d:85:d6:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:60:D3:FC:C0:5B:A5:E5:DA:A9:78:01:4E:AA:52:48:75:BB:5A:9E
X509v3 Authority Key Identifier:
keyid:6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3232203d3e20323730383832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.194.4.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:19:2d:e2:28:ae:11:ee:3c:71:14:19:fc:8f:fb:d7:b3:e8:
12:4c:70:0b:79:39:cf:61:7f:af:f0:99:98:cc:f5:05:93:26:
e6:e6:51:b7:28:83:15:b4:db:c8:c9:6e:2b:d7:3b:e6:6e:7c:
e5:72:3c:51:e3:2c:96:54:17:03:92:38:a8:13:b8:90:ef:a6:
5c:37:07:4c:65:38:53:6e:08:1a:75:4c:b6:84:72:40:df:48:
c7:d5:5a:5f:75:de:fe:47:f2:7f:bb:3c:ad:43:bb:fe:12:69:
2e:8f:ea:8a:32:c4:0c:d3:d0:19:a0:03:7a:88:cd:0d:fa:7f:
e9:c5:ad:49:93:5e:ae:e8:e7:af:1b:25:1b:1d:77:f4:7a:9b:
8e:00:90:ea:2a:4e:57:c3:af:10:29:cd:18:c4:ca:e4:08:af:
52:79:ac:2b:45:4d:7b:61:be:08:39:51:22:3f:84:84:dc:41:
3b:29:cf:17:0d:d0:8c:3e:b6:48:c8:f5:fe:52:b4:4a:4c:cc:
90:2d:fa:99:85:4f:02:5c:f5:b3:39:8a:5f:e2:54:d4:35:0f:
c2:49:79:f8:1d:1f:52:12:f3:14:7d:72:e7:1d:22:46:80:30:
44:5b:86:a4:1a:1b:d7:a0:a7:b2:e1:7f:2f:5f:ce:6c:a5:3a:
6c:b2:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:51 2025 by rpki-client