Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32332d3233203d3e203238313834.roa
File: 3138392e38392e36342e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier: 2gg7h38DDbTanjSHsdJXlhp4TLK2Guqjof7Wmfji7dU=
Subject key identifier: B8:50:EC:B7:FC:C4:CB:6F:D1:3F:F5:60:09:6E:19:82:99:05:48:F1
Certificate issuer: /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial: 63090DBF0D711FED4E2C63B0D1C2A2E52AF1D29C
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32332d3233203d3e203238313834.roa
Signing time: Wed 04 Dec 2024 17:35:08 +0000
ROA not before: Wed 04 Dec 2024 17:30:08 +0000
ROA not after: Wed 03 Dec 2025 17:35:08 +0000
asID: 28184
IP address blocks: 189.89.64.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 11 Mar 2025 19:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:09:0d:bf:0d:71:1f:ed:4e:2c:63:b0:d1:c2:a2:e5:2a:f1:d2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Validity
Not Before: Dec 4 17:30:08 2024 GMT
Not After : Dec 3 17:35:08 2025 GMT
Subject: CN=B850ECB7FCC4CB6FD13FF560096E1982990548F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:5d:c7:d5:66:38:f4:2f:b6:05:6a:e3:7b:
72:b7:1c:42:e4:6a:14:ad:f8:15:52:b2:77:08:6e:
01:98:df:0f:f0:a9:a6:2b:c4:08:0a:14:9f:a8:66:
65:38:6c:88:d2:fa:ff:0b:30:b8:58:5c:af:85:5a:
cd:6e:6a:32:10:b4:06:71:51:c8:2c:23:aa:c3:62:
02:ef:92:73:d3:c0:6f:af:be:b6:02:e9:4a:77:bd:
ed:b2:27:6d:3f:d9:8e:11:12:54:f7:68:95:6a:61:
49:76:8b:29:1e:cf:fb:b1:d8:19:95:55:2b:dd:da:
6f:be:1f:7b:1a:8f:be:1e:2e:3a:44:4d:34:e5:d3:
09:de:4e:25:7b:d0:cb:58:bc:c4:65:fe:88:61:f1:
7e:8e:79:c6:37:6c:a0:4e:01:5d:6c:3d:85:d4:9c:
fd:5f:36:b5:67:7c:4e:85:a4:1c:62:ca:ac:3f:a5:
72:af:f6:62:4a:3d:b1:48:ac:15:66:d8:4c:0d:fb:
4d:62:44:a4:6d:72:39:1c:f9:23:02:36:43:72:98:
65:94:ab:67:6d:29:39:0b:21:07:80:8f:4d:3d:9e:
e0:c6:bd:1d:4a:70:b7:d2:15:cf:c1:4f:29:e5:07:
9e:be:6a:cf:cd:ec:d2:58:60:ac:bd:e4:40:f8:22:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:50:EC:B7:FC:C4:CB:6F:D1:3F:F5:60:09:6E:19:82:99:05:48:F1
X509v3 Authority Key Identifier:
keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32332d3233203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.64.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:6a:8c:9f:60:d1:3b:09:cb:ed:f5:6a:39:55:08:de:78:fb:
38:98:bd:d9:d7:38:97:cb:3a:40:7b:4d:d8:28:60:7f:41:23:
aa:14:5d:b4:14:77:ab:ce:1c:c1:ad:3e:3c:43:6c:1c:2c:79:
cb:2b:49:68:38:89:c3:fd:92:28:19:97:97:b4:66:72:71:18:
6a:8f:aa:ad:f1:ec:1e:fc:be:3b:b7:6b:61:2f:6a:00:e2:20:
b8:bb:ff:cc:1f:34:8d:1c:ac:ee:25:61:ca:67:5e:48:35:cb:
7e:11:27:de:bd:c5:10:dd:c5:e5:73:77:f5:d9:98:5b:d0:4d:
7f:ff:7a:df:7f:c4:16:32:b1:c4:df:cb:fd:16:02:6b:41:08:
b2:27:3b:7c:57:31:92:68:4d:27:a8:54:3b:d9:20:eb:86:5d:
0f:e3:45:93:d5:86:01:b2:6b:27:3d:17:6b:59:17:79:0d:ed:
fc:5b:bd:6a:1f:d1:e2:2b:2a:7b:e6:59:7e:cb:6c:dd:20:29:
26:c1:fb:57:25:bc:a8:70:c1:23:f8:32:d1:7a:50:61:5d:63:
31:98:ef:e9:12:67:f8:e6:42:fe:5b:9c:16:0e:35:16:99:fa:
25:f0:2b:0a:68:c9:4e:c7:4f:04:d8:ad:ff:ef:4d:d4:1f:b3:
a0:e6:22:50
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUYwkNvw1xH+1OLGOw0cKi5Srx0pwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDNkUwNTg3RkQ3RjcwMDExMzQ3QTlCOTM2NzlBMTEx
QTlBN0ZCOTAeFw0yNDEyMDQxNzMwMDhaFw0yNTEyMDMxNzM1MDhaMDMxMTAvBgNV
BAMTKEI4NTBFQ0I3RkNDNENCNkZEMTNGRjU2MDA5NkUxOTgyOTkwNTQ4RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUl13H1WY49C+2BWrje3K3HELk
ahSt+BVSsncIbgGY3w/wqaYrxAgKFJ+oZmU4bIjS+v8LMLhYXK+FWs1uajIQtAZx
UcgsI6rDYgLvknPTwG+vvrYC6Up3ve2yJ20/2Y4RElT3aJVqYUl2iykez/ux2BmV
VSvd2m++H3saj74eLjpETTTl0wneTiV70MtYvMRl/ohh8X6OecY3bKBOAV1sPYXU
nP1fNrVnfE6FpBxiyqw/pXKv9mJKPbFIrBVm2EwN+01iRKRtcjkc+SMCNkNymGWU
q2dtKTkLIQeAj009nuDGvR1KcLfSFc/BTynlB56+as/N7NJYYKy95ED4IlI9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUuFDst/zEy2/RP/VgCW4ZgpkFSPEwHwYDVR0j
BBgwFoAU8sbgWH/X9wARNHqbk2eaERqaf7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9GMkM2RTA1ODdGRDdGNzAwMTEzNDdBOUI5MzY3OUExMTFBOUE3RkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyQzZFMDU4N0ZEN0Y3MDAx
MTM0N0E5QjkzNjc5QTExMUE5QTdGQjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAb1ZQDANBgkqhkiG9w0BAQsFAAOCAQEAxmqMn2DROwnL
7fVqOVUI3nj7OJi92dc4l8s6QHtN2Chgf0EjqhRdtBR3q84cwa0+PENsHCx5yytJ
aDiJw/2SKBmXl7RmcnEYao+qrfHsHvy+O7drYS9qAOIguLv/zB80jRys7iVhymde
SDXLfhEn3r3FEN3F5XN39dmYW9BNf/9633/EFjKxxN/L/RYCa0EIsic7fFcxkmhN
J6hUO9kg64ZdD+NFk9WGAbJrJz0Xa1kXeQ3t/Fu9ah/R4isqe+ZZfsts3SApJsH7
VyW8qHDBI/gy0XpQYV1jMZjv6RJn+OZC/lucFg41Fpn6JfArCmjJTsdPBNit/+9N
1B+zoOYiUA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:32:13 2025 by rpki-client