Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32322d3232203d3e203238313834.roa
File: 3138392e38392e36342e302f32322d3232203d3e203238313834.roa (raw, json)
Hash identifier: ZliE3astB+Ld3VPEgpMCJLVRFD1yBFX3iMrqDAaLq8o=
Subject key identifier: 11:C2:5A:CD:B2:AE:94:D4:E7:C8:52:E5:5B:A5:D9:4F:8E:74:7C:6A
Certificate issuer: /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial: 4B763C3B9C2B17C04B4C469DCBDD73F775479C97
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32322d3232203d3e203238313834.roa
Signing time: Wed 04 Dec 2024 17:35:05 +0000
ROA not before: Wed 04 Dec 2024 17:30:05 +0000
ROA not after: Wed 03 Dec 2025 17:35:05 +0000
asID: 28184
IP address blocks: 189.89.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 11 Mar 2025 19:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:76:3c:3b:9c:2b:17:c0:4b:4c:46:9d:cb:dd:73:f7:75:47:9c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Validity
Not Before: Dec 4 17:30:05 2024 GMT
Not After : Dec 3 17:35:05 2025 GMT
Subject: CN=11C25ACDB2AE94D4E7C852E55BA5D94F8E747C6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:aa:57:53:47:9c:93:ae:b0:33:18:89:b6:
e0:29:9d:35:89:19:1a:81:2d:fd:0c:3b:1b:d2:5e:
81:a8:fb:a1:c2:bc:60:f4:d1:6b:b0:20:f6:b0:70:
26:ac:59:17:4d:44:b2:bd:c0:b8:3e:b3:a5:93:b4:
4b:4f:20:b2:1a:1a:3a:9a:c8:40:ef:5c:0f:85:59:
81:89:ab:49:c8:04:84:d9:7b:68:be:ec:b0:1e:e5:
de:f8:5f:0e:e3:78:d4:83:44:71:0b:5c:01:f0:e5:
83:9e:27:1c:47:2b:c5:24:cc:bf:10:5c:7a:4a:fc:
a5:2e:f4:32:ef:07:e4:13:00:a8:8d:d8:1a:f2:69:
46:2b:a7:c9:7d:8c:e8:70:b9:f1:bf:d7:41:52:33:
24:f5:17:95:94:e5:85:47:9f:af:d3:74:01:3f:27:
39:cd:9d:74:05:81:85:1a:f5:e4:f3:90:ea:b4:88:
45:f6:4c:67:b3:d7:15:97:7d:ae:fc:2a:fa:d6:05:
35:2d:81:58:15:44:67:83:69:36:0a:3a:ed:62:3c:
19:26:ed:f6:f1:20:8c:75:b1:d5:81:b0:a5:b6:ef:
cc:89:62:2b:7a:79:c3:47:8d:5f:02:16:64:40:6b:
6e:36:ef:11:50:97:ae:ee:e6:d5:32:d5:f8:85:f6:
c4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C2:5A:CD:B2:AE:94:D4:E7:C8:52:E5:5B:A5:D9:4F:8E:74:7C:6A
X509v3 Authority Key Identifier:
keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32322d3232203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.64.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:7b:d9:33:3b:6d:98:41:bf:d3:48:bd:99:7c:e1:22:27:2f:
aa:de:ae:aa:79:d3:3b:86:21:00:0d:ea:42:05:54:19:79:0f:
0e:b6:b9:b4:f9:c1:5a:e2:c4:bc:74:c6:c6:cc:aa:26:54:9f:
15:e9:35:bf:93:14:70:93:35:06:4d:9b:e4:3a:c4:a1:11:c2:
d6:58:da:d5:81:c1:bb:a9:ad:7e:45:52:a9:0a:21:79:8c:af:
4f:78:b6:02:1d:08:0e:bf:85:90:0f:a2:00:34:a9:5c:3d:d3:
11:e9:c3:20:97:e0:ec:ad:f8:b4:21:29:37:1e:5f:41:6d:5c:
f5:02:a2:6b:a3:ff:f2:75:db:9c:b9:50:91:58:16:a2:e3:8e:
30:aa:94:0b:7c:99:da:be:1b:45:01:ab:ed:50:7a:8d:e8:4e:
a3:c7:2f:d9:a7:7c:85:68:21:a6:dc:85:f2:b3:c0:d3:74:ca:
d3:3c:1a:ed:31:32:79:15:d5:dc:ed:59:c2:8a:09:e0:38:f9:
84:e0:d3:63:cf:8b:be:8a:f6:d7:4f:f9:97:a7:d5:71:1f:61:
44:59:69:82:ac:4d:b2:c7:b0:87:05:b0:84:fb:05:84:57:35:
8f:46:60:c7:ef:d8:99:25:16:4c:b9:3c:c9:2f:e8:a3:c7:fc:
20:a1:97:09
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUS3Y8O5wrF8BLTEady91z93VHnJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDNkUwNTg3RkQ3RjcwMDExMzQ3QTlCOTM2NzlBMTEx
QTlBN0ZCOTAeFw0yNDEyMDQxNzMwMDVaFw0yNTEyMDMxNzM1MDVaMDMxMTAvBgNV
BAMTKDExQzI1QUNEQjJBRTk0RDRFN0M4NTJFNTVCQTVEOTRGOEU3NDdDNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLgqpXU0eck66wMxiJtuApnTWJ
GRqBLf0MOxvSXoGo+6HCvGD00WuwIPawcCasWRdNRLK9wLg+s6WTtEtPILIaGjqa
yEDvXA+FWYGJq0nIBITZe2i+7LAe5d74Xw7jeNSDRHELXAHw5YOeJxxHK8UkzL8Q
XHpK/KUu9DLvB+QTAKiN2BryaUYrp8l9jOhwufG/10FSMyT1F5WU5YVHn6/TdAE/
JznNnXQFgYUa9eTzkOq0iEX2TGez1xWXfa78KvrWBTUtgVgVRGeDaTYKOu1iPBkm
7fbxIIx1sdWBsKW278yJYit6ecNHjV8CFmRAa2427xFQl67u5tUy1fiF9sQ9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEcJazbKulNTnyFLlW6XZT450fGowHwYDVR0j
BBgwFoAU8sbgWH/X9wARNHqbk2eaERqaf7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9GMkM2RTA1ODdGRDdGNzAwMTEzNDdBOUI5MzY3OUExMTFBOUE3RkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyQzZFMDU4N0ZEN0Y3MDAx
MTM0N0E5QjkzNjc5QTExMUE5QTdGQjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAr1ZQDANBgkqhkiG9w0BAQsFAAOCAQEAqnvZMzttmEG/
00i9mXzhIicvqt6uqnnTO4YhAA3qQgVUGXkPDra5tPnBWuLEvHTGxsyqJlSfFek1
v5MUcJM1Bk2b5DrEoRHC1lja1YHBu6mtfkVSqQoheYyvT3i2Ah0IDr+FkA+iADSp
XD3TEenDIJfg7K34tCEpNx5fQW1c9QKia6P/8nXbnLlQkVgWouOOMKqUC3yZ2r4b
RQGr7VB6jehOo8cv2ad8hWghptyF8rPA03TK0zwa7TEyeRXV3O1ZwooJ4Dj5hODT
Y8+Lvor210/5l6fVcR9hRFlpgqxNssewhwWwhPsFhFc1j0Zgx+/YmSUWTLk8yS/o
o8f8IKGXCQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 00:44:34 2025 by rpki-client