Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32342d3234203d3e203238313834.roa
File: 3138392e38392e36342e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier: 3h++GlcQrggHJZR7jxH1p8dSoZUwfN8j9P7xz7GvgxI=
Subject key identifier: AB:FB:47:DF:C8:93:FA:EA:7F:11:B3:5B:AD:FD:B3:AD:0D:7D:64:36
Certificate issuer: /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial: 3B6D79A9C3047874D6E7CAB5B6204C491F7213FB
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32342d3234203d3e203238313834.roa
Signing time: Tue 11 Mar 2025 19:05:08 +0000
ROA not before: Tue 11 Mar 2025 19:00:08 +0000
ROA not after: Tue 10 Mar 2026 19:05:08 +0000
asID: 28184
IP address blocks: 189.89.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 18:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6d:79:a9:c3:04:78:74:d6:e7:ca:b5:b6:20:4c:49:1f:72:13:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Validity
Not Before: Mar 11 19:00:08 2025 GMT
Not After : Mar 10 19:05:08 2026 GMT
Subject: CN=ABFB47DFC893FAEA7F11B35BADFDB3AD0D7D6436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:30:67:34:0e:3b:14:d5:51:38:05:6d:a0:
1b:8b:a4:57:5f:b1:5f:c3:ce:e5:81:b2:38:af:51:
19:e1:63:58:45:52:4e:dc:c5:2f:1b:03:ef:bd:12:
c9:ab:92:55:29:ad:b7:de:74:7d:e9:4b:27:bf:22:
fc:a8:ba:ed:3b:76:70:aa:0b:38:3a:88:38:ce:59:
c8:c0:0f:b6:91:fc:e8:f4:84:d8:3b:1c:87:36:cc:
f7:02:59:8e:4c:d6:a0:cf:fa:82:ef:50:ff:1b:09:
76:b3:f2:8b:84:5a:13:10:04:51:0a:5a:cf:e9:f3:
2d:d5:9c:26:50:a2:52:37:fa:2a:e6:da:6e:12:c2:
1b:a0:6e:e4:ad:3c:44:d8:f3:f4:e2:0d:4f:9f:31:
93:a7:77:24:33:27:c5:dd:16:6b:7a:70:6d:d8:bd:
13:73:43:f8:be:42:93:95:be:d7:cb:03:74:c3:54:
9c:65:55:b0:87:6f:06:65:5c:a5:4e:df:e1:4f:0d:
c8:3c:23:2c:01:1d:3e:e5:6b:52:ef:f1:3d:e1:57:
b2:3f:ce:70:7f:00:8b:70:bd:c5:25:6f:94:52:7f:
57:97:cb:74:9d:4e:6b:84:26:6d:cb:0e:ed:f2:0e:
ba:51:5a:3f:69:44:fa:30:22:9f:df:bb:8d:42:9e:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FB:47:DF:C8:93:FA:EA:7F:11:B3:5B:AD:FD:B3:AD:0D:7D:64:36
X509v3 Authority Key Identifier:
keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32342d3234203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.64.0/24
Signature Algorithm: sha256WithRSAEncryption
00:15:6e:79:33:20:12:1d:a4:50:52:55:23:73:d6:3a:e4:5c:
8b:b1:6c:a3:09:21:56:2e:19:98:f6:da:b1:b7:74:ff:af:db:
b3:fa:4a:72:3c:1f:79:b9:dd:60:00:0b:50:31:1e:db:9a:e6:
d8:7f:63:ec:4c:18:56:a2:a6:01:d2:31:c7:18:e6:18:f5:bc:
92:b9:5c:42:52:ac:4b:a5:85:e7:9b:86:39:4c:0e:65:67:e0:
1d:ed:cc:a0:1b:27:4b:82:15:87:42:73:4f:9c:41:9e:d4:f5:
8e:69:c4:e6:54:5f:f5:1d:9f:7f:7c:9e:a9:04:0c:12:2f:c9:
76:31:41:18:7f:dd:a6:ed:dd:09:32:ef:08:b4:d2:a1:02:18:
35:96:c5:9c:59:c2:38:76:27:62:a3:63:9e:9e:06:c2:f8:a1:
20:85:86:ce:c3:2c:dd:ea:fb:11:44:6f:8f:bc:a0:95:bf:00:
c0:23:9b:17:dc:62:a5:28:a6:d9:05:b2:e3:3b:54:de:cb:fa:
14:de:70:19:34:c4:51:b3:cb:4d:31:19:32:29:20:6c:fc:74:
30:7e:fa:a6:44:27:b5:6e:1d:7b:2d:97:86:69:11:d8:2b:89:
53:f4:a3:ba:3b:ab:aa:84:a0:b4:5a:82:14:e0:10:e8:1b:8b:
4e:c3:9f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:36:20 2025 by rpki-client