![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32322d3232203d3e20323634313235.roa
File: 3133382e39342e34342e302f32322d3232203d3e20323634313235.roa (raw, json)
Hash identifier: f1shoAS0usI9SCTpIibjF4P9L7C7ZD3yZkDYm5FX4PA=
Subject key identifier: BA:20:DE:5B:D8:3F:F2:DB:EE:9E:89:5C:C1:E2:6F:97:9C:1B:9A:43
Certificate issuer: /CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
Certificate serial: 23CAB39A98F2A4FD629EBE1F3DA7E1E116B0809C
Authority key identifier: E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32322d3232203d3e20323634313235.roa
Signing time: Wed 24 Apr 2024 18:00:13 +0000
ROA not before: Wed 24 Apr 2024 17:55:13 +0000
ROA not after: Wed 23 Apr 2025 18:00:13 +0000
asID: 264125
IP address blocks: 138.94.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ca:b3:9a:98:f2:a4:fd:62:9e:be:1f:3d:a7:e1:e1:16:b0:80:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
Validity
Not Before: Apr 24 17:55:13 2024 GMT
Not After : Apr 23 18:00:13 2025 GMT
Subject: CN=BA20DE5BD83FF2DBEE9E895CC1E26F979C1B9A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:62:fb:16:6f:14:27:29:5b:8e:38:29:5b:
d3:8b:86:d1:74:ba:cb:61:1b:36:04:54:2f:7b:3d:
27:bd:3c:86:16:39:42:81:31:a5:11:a3:b4:65:21:
4c:89:1f:3a:e8:ce:7c:cc:60:63:7d:00:6e:1b:58:
c0:5f:a8:b4:5d:10:54:57:d8:d1:e4:60:67:c1:c9:
b5:80:b3:db:28:29:5c:f0:02:f6:3f:86:25:d6:4b:
1b:91:f9:bd:b1:a0:ef:0b:09:9d:95:4c:33:ee:fa:
a4:c2:5e:24:af:72:e7:66:93:be:bb:ac:bc:c4:e2:
fc:3e:cd:00:8f:56:6a:8e:7b:74:17:98:da:45:94:
47:47:e7:29:30:d8:56:33:66:51:28:d1:93:f2:ba:
e0:c6:3d:c2:55:7d:31:a2:c6:d5:25:af:97:39:6d:
d0:75:d9:7f:af:9f:16:da:0c:16:7f:fa:74:78:d2:
35:7d:b7:e6:b6:2a:58:e5:46:61:ca:0c:a4:3f:31:
17:9d:b4:a7:00:68:8b:b8:f7:c4:34:f7:09:91:f1:
1e:d2:c7:fb:6f:45:77:4d:23:ed:6f:db:6c:eb:93:
9d:28:7e:a2:22:a5:9e:fa:0b:fe:03:95:65:4c:24:
01:01:87:16:50:f3:e3:9d:5a:91:48:c0:aa:51:e2:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:20:DE:5B:D8:3F:F2:DB:EE:9E:89:5C:C1:E2:6F:97:9C:1B:9A:43
X509v3 Authority Key Identifier:
keyid:E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32322d3232203d3e20323634313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.44.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:15:5c:7e:d2:b9:ae:3f:c4:83:0c:bf:45:25:95:7e:f9:37:
23:09:96:44:3f:1d:92:f3:fc:f4:03:1f:cf:f8:b1:c5:19:71:
8a:c3:1e:00:71:d2:dd:ca:98:f3:84:a5:de:5b:29:b0:50:86:
3c:e7:58:f6:40:30:34:e1:1d:a3:34:63:a4:58:49:93:fa:37:
40:3f:81:ff:7f:c9:52:a2:6c:e3:24:3a:69:c5:c5:38:a0:17:
33:5c:20:fb:0f:31:9c:9a:71:89:ab:76:14:0a:ab:d3:2d:d3:
45:28:09:00:a8:f0:03:17:f5:9d:1f:5b:1a:51:7b:4e:12:de:
63:eb:d3:f2:c3:10:9f:a7:d2:8f:1f:5a:ca:66:c3:0e:58:04:
dd:29:b6:ac:d1:1a:24:7b:cf:7e:a5:fa:f0:d6:24:ec:17:8c:
97:28:4c:99:d4:c5:d1:e6:dc:cf:88:30:af:b4:d4:cc:69:bc:
0d:23:ca:32:94:57:75:99:e6:29:7c:d9:aa:f8:8e:db:e8:79:
d8:28:32:87:d5:cf:7f:e2:bb:6d:ef:23:65:38:ad:9c:6a:3b:
12:79:b0:b2:48:fa:10:39:42:a1:07:d0:3c:68:01:ea:8d:e8:
7c:22:63:88:26:bb:5a:e3:3b:1d:7c:c7:fb:d9:df:62:0f:5e:
fa:8f:de:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:18 2025 by rpki-client