Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e34352e3139322e302f32302d3234203d3e203238333433.roa
File: 3138392e34352e3139322e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier: pCWqBSuxoBs9NDdEVhNZbE6IbbuFTaCoVonh1JSlfqU=
Subject key identifier: 0D:CD:9F:7F:EF:BC:CC:5D:20:ED:95:8D:35:1A:17:46:60:0C:5D:10
Certificate issuer: /CN=0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80
Certificate serial: 56904D39660503A8E570D8B1F9D276D37BE49F12
Authority key identifier: 0A:09:45:5F:3B:85:C8:20:AD:F8:A8:A5:B0:0E:6B:24:E5:2D:9D:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e34352e3139322e302f32302d3234203d3e203238333433.roa
Signing time: Thu 03 Apr 2025 20:22:33 +0000
ROA not before: Thu 03 Apr 2025 20:17:33 +0000
ROA not after: Thu 02 Apr 2026 20:22:33 +0000
asID: 28343
IP address blocks: 189.45.192.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 11:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:90:4d:39:66:05:03:a8:e5:70:d8:b1:f9:d2:76:d3:7b:e4:9f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80
Validity
Not Before: Apr 3 20:17:33 2025 GMT
Not After : Apr 2 20:22:33 2026 GMT
Subject: CN=0DCD9F7FEFBCCC5D20ED958D351A1746600C5D10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:5b:ce:51:2d:f9:36:c1:d3:14:fb:f0:1b:
d5:55:c4:d8:b5:76:fa:e7:41:df:ab:a9:b3:8a:aa:
ec:09:6b:1e:e6:3e:8f:c5:51:67:5c:6b:59:a8:39:
f2:4a:32:e8:8b:c0:23:2f:6d:f1:9c:12:bb:18:91:
8e:61:c2:c5:90:3a:6e:60:71:ca:2f:32:53:59:f5:
50:53:81:ba:84:d7:8b:16:ad:86:96:a8:1f:a8:3a:
54:0e:16:51:13:87:85:92:2f:5f:60:e9:73:42:0b:
08:e0:ef:65:65:75:ab:20:55:d0:ee:d7:e1:ff:af:
c9:75:fb:1f:7b:67:92:42:50:69:4d:bc:52:5a:b1:
b9:d6:ae:f4:b7:4e:cb:02:95:21:35:ec:b7:d0:99:
38:30:d3:72:65:2e:ae:62:2f:03:29:19:50:07:2c:
e6:15:c3:35:9b:79:68:8c:a4:54:86:56:29:b9:28:
16:6d:39:34:7e:41:c3:72:bd:34:8f:9f:6f:20:e3:
11:d0:f8:46:99:77:4c:3c:c4:ec:18:2a:25:32:54:
4c:a6:90:43:c3:d7:47:d5:14:04:9e:25:7b:ec:af:
ac:73:f7:d4:3d:a2:db:56:f4:4f:12:89:63:1a:a8:
3b:c3:6a:44:bc:4f:b9:88:b9:b0:d9:d2:a3:94:43:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CD:9F:7F:EF:BC:CC:5D:20:ED:95:8D:35:1A:17:46:60:0C:5D:10
X509v3 Authority Key Identifier:
keyid:0A:09:45:5F:3B:85:C8:20:AD:F8:A8:A5:B0:0E:6B:24:E5:2D:9D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e34352e3139322e302f32302d3234203d3e203238333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.192.0/20
Signature Algorithm: sha256WithRSAEncryption
91:6d:a8:ed:72:73:c3:45:50:93:cf:d6:63:bc:0c:c0:63:90:
52:de:82:ef:5c:a7:9a:92:70:7e:78:f2:cb:6e:3a:ac:62:aa:
81:1a:19:e5:21:0b:35:86:da:8e:c6:97:81:b9:33:d5:5b:78:
26:99:70:75:ff:29:f6:8b:cb:40:6c:a1:28:d1:60:93:dd:13:
3e:3b:c7:31:57:48:f3:67:24:36:71:0a:4c:52:b2:75:04:4f:
56:3a:45:bd:30:3c:62:e5:fa:63:78:f4:7e:0f:2e:b2:06:84:
fc:2c:9a:75:29:80:b9:e7:c6:04:dc:34:08:bc:de:eb:7a:f8:
0a:9a:44:20:e1:2d:bd:50:e6:d0:1e:5b:d3:d3:21:86:84:6e:
60:45:47:1f:49:06:e6:f0:9b:63:4d:95:6d:f2:4b:be:8e:ca:
c7:21:94:88:05:e5:c9:91:22:4b:88:39:b3:1e:9d:70:2d:5b:
c9:8b:75:6f:54:83:2b:b7:3c:39:96:5f:dc:57:73:e5:91:8a:
70:90:95:8c:08:fd:dd:9f:3e:9e:76:70:ca:1f:ed:c9:01:52:
bc:fe:c4:76:dd:2b:85:9f:1b:ff:54:f8:ba:5d:92:9e:ee:b6:
f6:a1:85:1b:06:a8:0b:30:4c:f3:93:dd:bb:3e:9b:a3:e7:25:
66:58:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:55:30 2025 by rpki-client