Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32302d3230203d3e203238313834.roa
File: 3138392e38392e36342e302f32302d3230203d3e203238313834.roa (raw, json)
Hash identifier: TjHEcRYlAowJudUjjsWYW5k53cxtkqRQ2QV51SVaK24=
Subject key identifier: 73:63:86:13:DC:15:52:E9:15:92:13:E5:7D:1F:32:DB:C8:9A:3C:81
Certificate issuer: /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial: 522AD1147EE977CF28C70C83320CA37F8DEF3EDE
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32302d3230203d3e203238313834.roa
Signing time: Tue 11 Mar 2025 19:05:02 +0000
ROA not before: Tue 11 Mar 2025 19:00:02 +0000
ROA not after: Tue 10 Mar 2026 19:05:02 +0000
asID: 28184
IP address blocks: 189.89.64.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 24 Mar 2025 18:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:2a:d1:14:7e:e9:77:cf:28:c7:0c:83:32:0c:a3:7f:8d:ef:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Validity
Not Before: Mar 11 19:00:02 2025 GMT
Not After : Mar 10 19:05:02 2026 GMT
Subject: CN=73638613DC1552E9159213E57D1F32DBC89A3C81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:a7:29:4e:da:79:fa:6a:31:79:30:92:0b:
d1:ed:57:22:40:67:82:1f:28:c9:00:77:8c:5d:3f:
6a:d0:ca:15:67:4c:5c:b5:98:2a:02:88:dd:06:24:
40:06:72:a5:f4:e7:53:c7:90:96:58:ea:02:e2:c7:
5b:03:2d:56:0a:f8:f2:83:ee:6e:14:9f:bd:e0:88:
5e:58:fe:b8:84:1f:63:22:69:65:db:0a:6b:17:cb:
87:be:2b:b0:e1:6e:a4:d9:94:4d:3b:61:c5:7e:ab:
71:c7:62:1a:85:00:8b:8e:10:21:cd:ce:34:d6:5d:
5e:89:2d:14:0b:08:bd:5d:f8:37:e1:ed:99:83:32:
0b:25:dc:90:c6:ae:ba:fc:55:b4:07:51:f0:4f:82:
7f:f3:f2:44:aa:c4:de:d6:63:82:29:cd:3e:39:db:
8d:1f:dd:7f:69:82:c4:f6:cf:48:1a:d6:60:e6:c3:
8e:c6:ba:43:60:c4:86:e9:17:49:55:87:49:64:be:
da:95:3d:fa:41:a3:e0:6f:ac:76:24:bb:09:96:28:
af:6d:38:c7:b1:1c:98:11:af:e6:48:4d:9d:4a:c3:
40:0c:27:c8:ae:06:5d:66:b0:4a:2c:18:4f:8a:8f:
54:75:e0:61:fd:c4:74:83:41:05:e4:e3:ef:5c:91:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:63:86:13:DC:15:52:E9:15:92:13:E5:7D:1F:32:DB:C8:9A:3C:81
X509v3 Authority Key Identifier:
keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32302d3230203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.64.0/20
Signature Algorithm: sha256WithRSAEncryption
25:0b:7a:03:4b:a8:54:8e:3c:56:0b:cb:db:f4:ee:18:09:e5:
8c:71:4f:5c:b9:7f:ae:fa:ab:27:35:56:11:0d:79:df:d3:15:
f1:18:41:c1:c5:44:b6:73:24:d6:ed:66:ee:a7:33:8b:12:a5:
58:fe:79:b0:d8:9c:1b:5f:50:ae:97:22:fb:ca:ba:e7:a4:69:
b5:39:d4:12:13:0b:0a:90:aa:fa:17:c1:90:79:d2:14:d0:07:
07:06:2e:dc:d6:0c:40:37:12:d1:af:c1:00:be:4f:6e:23:cc:
57:ab:28:9e:b8:a8:24:e6:e5:63:8f:8a:2f:8a:b3:7c:b2:0f:
70:3a:30:e1:8d:c8:cd:13:35:44:58:ba:6f:6e:94:2c:d7:2d:
9c:38:56:52:8e:b4:6a:c5:5b:52:6e:f2:a6:e4:9f:a8:a0:f9:
2a:32:66:96:b1:b2:13:24:29:90:99:68:da:94:d6:ed:84:87:
91:37:ee:05:29:88:fb:4c:ab:53:84:57:12:2c:4e:c7:d7:14:
9f:a0:cf:9e:09:c3:89:09:ea:aa:bc:ab:1f:4c:02:04:76:fa:
88:f2:47:1f:76:9d:ce:d6:35:19:a4:17:af:1d:52:b8:54:49:
d9:9e:5c:e4:87:25:75:82:67:97:bb:23:e6:a1:5e:87:51:89:
e8:95:d5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:37:19 2025 by rpki-client