Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3133312e302f32342d3234203d3e20323633393334.roa
File: 3133382e3231392e3133312e302f32342d3234203d3e20323633393334.roa (raw, json)
Hash identifier: t0iPGklWQZLqpAs+TZgod7jt6qnyKqOuw37XKJgOm/8=
Subject key identifier: 5E:E9:5F:11:72:42:43:90:F6:18:09:B0:D0:E4:83:CF:85:E3:AF:A2
Certificate issuer: /CN=A25520F1E15109C50B44F56EA799FE2E685092D4
Certificate serial: 0351A9437E2719A8CFFEE55A708A412AB38603F7
Authority key identifier: A2:55:20:F1:E1:51:09:C5:0B:44:F5:6E:A7:99:FE:2E:68:50:92:D4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3133312e302f32342d3234203d3e20323633393334.roa
Signing time: Thu 03 Apr 2025 14:15:15 +0000
ROA not before: Thu 03 Apr 2025 14:10:15 +0000
ROA not after: Thu 02 Apr 2026 14:15:15 +0000
asID: 263934
IP address blocks: 138.219.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 13:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:51:a9:43:7e:27:19:a8:cf:fe:e5:5a:70:8a:41:2a:b3:86:03:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A25520F1E15109C50B44F56EA799FE2E685092D4
Validity
Not Before: Apr 3 14:10:15 2025 GMT
Not After : Apr 2 14:15:15 2026 GMT
Subject: CN=5EE95F1172424390F61809B0D0E483CF85E3AFA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ff:04:47:28:e9:d7:3b:10:f8:b8:08:f9:d1:
07:47:d2:28:54:be:85:02:d2:58:d0:33:92:07:d7:
09:9e:02:42:cc:7b:14:d1:00:54:27:77:f5:30:64:
c6:48:c7:aa:04:84:e1:63:15:c1:2a:63:2c:bd:24:
92:a5:4d:67:b0:d9:02:a9:0d:0b:a1:e6:96:33:df:
3f:7a:17:54:21:48:7e:3b:ef:11:8d:d3:b8:64:f4:
1c:75:dd:34:54:72:fd:35:10:2c:29:dc:9c:34:be:
c4:18:9d:d8:f3:22:d7:7f:6a:6f:6c:8f:2e:cc:91:
9e:52:d1:98:ce:3f:8b:0b:df:50:e3:73:f2:f9:4e:
43:0a:d8:4a:f5:f9:f5:ac:f8:50:bf:d7:a9:e0:7b:
5f:88:e0:86:c8:80:c0:48:20:c3:60:e8:54:62:7e:
b0:7d:c6:ca:40:eb:e0:c7:af:ab:39:85:03:75:1a:
7a:ec:48:cc:69:7d:11:de:f0:f1:20:d7:7a:44:c1:
92:3d:26:45:cc:f9:2b:c4:5a:77:d2:90:93:01:02:
21:92:de:f9:29:a5:27:4b:15:dd:64:d8:22:93:85:
c8:3d:24:83:0d:ee:68:14:0c:74:7c:67:37:57:8c:
56:f0:95:d1:7c:5e:fb:f7:d6:c6:3d:25:40:1a:94:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E9:5F:11:72:42:43:90:F6:18:09:B0:D0:E4:83:CF:85:E3:AF:A2
X509v3 Authority Key Identifier:
keyid:A2:55:20:F1:E1:51:09:C5:0B:44:F5:6E:A7:99:FE:2E:68:50:92:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3133312e302f32342d3234203d3e20323633393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.131.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:29:ea:47:19:60:4c:bd:86:d0:b1:65:c4:88:e3:7d:98:be:
8b:a6:96:80:41:38:20:ad:ef:40:8e:93:c2:4b:fb:db:41:1b:
cc:e4:21:67:a4:a4:f2:6a:d7:13:70:31:77:97:02:ee:f9:29:
9b:eb:90:3f:51:b9:ae:a4:2c:e5:dd:4f:d2:e2:8b:19:e1:5f:
16:ee:22:1b:24:1d:eb:7c:ad:40:cd:b6:31:15:89:38:f3:b4:
8f:14:6f:7d:c6:81:1f:83:04:31:b5:08:ae:98:4c:30:49:50:
ab:ff:78:34:c5:29:30:f9:eb:fc:9b:26:82:90:f0:0a:0e:1d:
a0:33:34:e2:3f:b1:81:72:cb:f7:6b:af:1e:9d:d9:0e:e8:ce:
b9:62:a3:4d:b7:e8:c9:e8:49:61:ce:bb:8b:5a:05:ec:72:73:
9f:c3:52:b1:e2:8a:f0:e9:96:31:92:c4:46:be:20:59:39:ee:
96:41:08:a2:cc:ef:12:49:00:9b:df:cc:fc:1d:18:52:93:3e:
ff:ba:a1:21:6a:d1:e8:e5:d8:1e:1a:28:a7:4c:b4:31:b8:21:
2e:2b:f0:55:02:e5:a0:e6:11:eb:1a:86:ca:a1:5a:c5:6b:04:
24:1b:57:6f:79:f1:7a:b2:34:be:c9:be:93:49:8d:e8:25:50:
18:25:9f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:38:43 2025 by rpki-client