Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/3133382e33362e382e302f32322d3232203d3e20323639333934.roa
File: 3133382e33362e382e302f32322d3232203d3e20323639333934.roa (raw, json)
Hash identifier: xTcCSux1Cbmg3Wa8ikfkR9iU4KT7YJkH2lNDcQ1cEqo=
Subject key identifier: 86:C1:F4:EB:2D:5E:89:73:F9:CD:56:84:17:7C:19:19:42:F7:86:0A
Certificate issuer: /CN=CE5B1C22F785931FD04E35B0D10299499369B6B2
Certificate serial: 7D4A19B196FEC5AABB6F962E991AD7D36C367867
Authority key identifier: CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/3133382e33362e382e302f32322d3232203d3e20323639333934.roa
Signing time: Tue 31 Dec 2024 18:23:34 +0000
ROA not before: Tue 31 Dec 2024 18:18:34 +0000
ROA not after: Tue 30 Dec 2025 18:23:34 +0000
asID: 269394
IP address blocks: 138.36.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 03 Jan 2025 18:47:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4a:19:b1:96:fe:c5:aa:bb:6f:96:2e:99:1a:d7:d3:6c:36:78:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE5B1C22F785931FD04E35B0D10299499369B6B2
Validity
Not Before: Dec 31 18:18:34 2024 GMT
Not After : Dec 30 18:23:34 2025 GMT
Subject: CN=86C1F4EB2D5E8973F9CD5684177C191942F7860A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e2:ab:d6:df:d3:aa:5d:a0:cd:20:d9:ae:d1:
3e:6f:53:7f:ce:33:0c:51:9e:d7:88:61:14:e7:31:
0f:14:fa:05:45:f9:e3:93:31:7b:fa:40:62:0b:d4:
4a:0e:a2:5f:09:6a:13:c9:44:5f:15:2a:01:a4:eb:
8f:49:e0:b6:04:10:75:f2:3c:59:9f:fa:c9:93:10:
d4:bb:3e:b0:f2:b3:78:f6:82:5a:c3:36:34:0c:0e:
fa:6a:e1:7e:48:cc:aa:57:c5:c2:1f:12:c6:40:61:
f7:6f:a4:6a:bc:7b:9e:27:0c:f1:e0:83:ae:73:c6:
71:26:03:af:22:5a:bf:85:07:80:ed:74:02:f4:90:
9b:94:f6:20:ce:21:8c:8c:0e:81:9b:2c:fe:47:74:
d4:60:f3:02:1f:cf:0d:d9:d8:ad:c6:1d:10:40:2d:
aa:35:40:6c:39:b5:78:18:ae:53:ea:8b:ec:cf:da:
47:36:8e:de:75:15:50:31:3f:fd:02:dc:13:69:69:
b5:7e:8a:84:66:57:86:6e:7c:43:75:9c:91:62:0c:
e5:09:b6:1e:90:c3:d0:cf:46:ab:33:c8:ed:bf:e0:
42:1b:52:62:8e:79:96:b3:f5:9f:ef:e1:17:11:45:
c9:c2:7c:12:21:7f:ab:16:76:92:12:81:c3:f4:e8:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C1:F4:EB:2D:5E:89:73:F9:CD:56:84:17:7C:19:19:42:F7:86:0A
X509v3 Authority Key Identifier:
keyid:CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/3133382e33362e382e302f32322d3232203d3e20323639333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:d4:59:bb:cd:31:9c:e7:f7:05:30:a6:80:55:4a:b8:39:7c:
27:4e:c4:3f:a2:3a:52:12:0f:3b:f6:48:26:02:5c:f4:72:39:
0c:97:68:79:26:36:21:d7:d0:35:f5:4a:73:17:dd:c2:92:ed:
98:88:73:b9:a3:5a:a9:2b:84:3a:3f:47:03:40:ed:e9:ad:75:
7c:60:6e:4b:56:ef:6e:28:4c:b6:00:44:41:59:0b:a3:00:b5:
d6:5e:94:4a:18:20:20:31:69:5c:11:91:9e:a6:c2:87:31:e8:
0f:15:9d:6d:15:81:43:9d:1a:27:02:d3:c4:d1:41:41:0f:7b:
11:00:de:5a:92:dd:8e:ef:6a:f4:f4:93:6c:16:b3:b7:33:dd:
c8:ca:17:d0:3f:b1:bd:09:50:cf:96:01:97:1f:2d:a1:30:27:
e0:16:c2:cc:12:a0:c6:bd:3c:db:01:21:ee:5f:fc:4b:bb:c4:
ee:4c:71:5f:30:7b:0d:47:c2:8f:ad:c3:91:c7:01:95:a0:54:
7f:7a:df:59:21:a2:41:e9:66:fd:94:e6:eb:81:f4:a3:6f:cf:
93:14:a9:97:16:38:45:81:db:97:4a:a5:ce:be:47:f8:ee:9a:
17:aa:47:4f:4c:ed:76:00:2d:79:ff:a0:6c:b3:37:9e:3c:ad:
a6:81:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:10:08 2025 by rpki-client