Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32332d3233203d3e203238313834.roa
File: 3138392e38392e37362e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier: PLJrVCv6N+hgJPM5N8roAr+Xc78ZPhXA6lon3Asip2E=
Subject key identifier: B3:BA:73:F8:3C:6F:B5:A8:CE:FE:3B:1D:E1:36:61:1E:06:6B:18:14
Certificate issuer: /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial: BE9BF455E4076AF76CB2D802768FBC5C33CBFD
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32332d3233203d3e203238313834.roa
Signing time: Wed 04 Dec 2024 17:35:35 +0000
ROA not before: Wed 04 Dec 2024 17:30:35 +0000
ROA not after: Wed 03 Dec 2025 17:35:35 +0000
asID: 28184
IP address blocks: 189.89.76.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 11 Mar 2025 19:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
be:9b:f4:55:e4:07:6a:f7:6c:b2:d8:02:76:8f:bc:5c:33:cb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Validity
Not Before: Dec 4 17:30:35 2024 GMT
Not After : Dec 3 17:35:35 2025 GMT
Subject: CN=B3BA73F83C6FB5A8CEFE3B1DE136611E066B1814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b5:25:6e:a7:97:4a:5c:34:c1:2d:92:6a:1d:
d9:d1:71:47:da:8d:6b:c8:27:16:c1:f8:79:b7:c9:
17:e8:f4:9e:14:5a:0f:b6:1a:20:20:fe:f2:46:f8:
59:50:28:08:ef:65:83:33:0b:29:9c:ab:79:73:73:
94:ed:ea:5b:42:ea:c5:3d:5b:55:13:57:5d:48:80:
1a:14:9a:c8:22:4a:e2:95:8b:de:97:b7:2f:66:df:
6f:45:eb:bb:1e:fd:48:e3:4e:96:d0:94:77:21:31:
a9:c9:db:55:69:86:8c:34:58:6d:a3:d8:6e:b0:e0:
e9:92:f9:e9:da:e2:a5:24:69:05:15:7c:98:8a:99:
7f:15:65:96:e7:46:7c:c9:a4:e4:43:3f:d1:da:40:
16:fe:21:ec:fc:3c:24:1b:a2:61:29:29:d0:73:f2:
0b:82:f9:88:f8:f4:99:65:a9:97:2d:08:bf:39:f9:
fa:74:95:f2:cc:b3:3d:7b:9c:d9:66:d4:11:cf:18:
41:cf:fa:9a:a7:51:c0:0e:d3:36:0b:1c:a8:49:47:
e8:aa:83:5a:0d:99:bc:52:80:da:5b:fd:62:00:bf:
a9:ea:56:b0:7c:0b:7a:60:fa:08:63:2a:30:eb:a5:
8d:4b:27:06:5e:47:ee:b2:35:b6:13:ab:c1:49:1f:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BA:73:F8:3C:6F:B5:A8:CE:FE:3B:1D:E1:36:61:1E:06:6B:18:14
X509v3 Authority Key Identifier:
keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32332d3233203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.76.0/23
Signature Algorithm: sha256WithRSAEncryption
14:bc:cb:f6:ee:13:22:11:d2:e9:1b:cb:3e:51:bc:b9:0c:44:
83:33:8c:2e:dc:b4:96:6c:53:7d:5e:30:d5:f2:ac:c6:83:53:
22:cc:1e:d0:93:16:90:f7:d6:d1:b1:1c:b1:58:2f:d4:da:6a:
d8:61:3a:61:30:7a:53:7a:d9:96:b6:cb:b0:dc:04:07:88:c4:
39:9f:c7:06:8c:07:29:5b:88:55:1a:98:ce:b0:dc:b0:1d:39:
b4:6a:35:38:22:e7:d5:d8:c2:25:67:1a:a5:c7:cf:ea:74:f8:
de:c7:e8:5e:00:d8:99:a2:ed:3e:c9:f4:ec:8a:f3:0f:09:b9:
d1:99:73:4c:29:9a:ee:d1:41:19:75:1c:5e:57:0d:06:ca:68:
6d:b8:57:da:87:a1:40:17:f2:69:be:ae:57:ea:ec:2c:aa:ba:
ec:b4:f6:7c:da:10:77:3b:5d:64:b1:4a:a4:95:d1:92:e1:67:
d9:4e:b8:b1:44:9a:87:80:e4:9a:26:32:97:3c:de:9a:44:14:
40:f7:ea:08:15:46:f6:ea:4d:31:54:c9:7d:4e:00:63:0b:16:
69:db:91:0d:63:b4:19:13:a2:46:f1:57:9d:74:3e:94:d6:d6:
ee:57:e5:b3:06:b6:74:e1:f0:75:13:f4:d9:1e:1c:eb:0c:82:
cc:8f:c3:2b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAL6b9FXkB2r3bLLYAnaPvFwzy/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDNkUwNTg3RkQ3RjcwMDExMzQ3QTlCOTM2NzlBMTEx
QTlBN0ZCOTAeFw0yNDEyMDQxNzMwMzVaFw0yNTEyMDMxNzM1MzVaMDMxMTAvBgNV
BAMTKEIzQkE3M0Y4M0M2RkI1QThDRUZFM0IxREUxMzY2MTFFMDY2QjE4MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDotSVup5dKXDTBLZJqHdnRcUfa
jWvIJxbB+Hm3yRfo9J4UWg+2GiAg/vJG+FlQKAjvZYMzCymcq3lzc5Tt6ltC6sU9
W1UTV11IgBoUmsgiSuKVi96Xty9m329F67se/UjjTpbQlHchManJ21Vphow0WG2j
2G6w4OmS+ena4qUkaQUVfJiKmX8VZZbnRnzJpORDP9HaQBb+Iez8PCQbomEpKdBz
8guC+Yj49JllqZctCL85+fp0lfLMsz17nNlm1BHPGEHP+pqnUcAO0zYLHKhJR+iq
g1oNmbxSgNpb/WIAv6nqVrB8C3pg+ghjKjDrpY1LJwZeR+6yNbYTq8FJH0JpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUs7pz+DxvtajO/jsd4TZhHgZrGBQwHwYDVR0j
BBgwFoAU8sbgWH/X9wARNHqbk2eaERqaf7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9GMkM2RTA1ODdGRDdGNzAwMTEzNDdBOUI5MzY3OUExMTFBOUE3RkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyQzZFMDU4N0ZEN0Y3MDAx
MTM0N0E5QjkzNjc5QTExMUE5QTdGQjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAb1ZTDANBgkqhkiG9w0BAQsFAAOCAQEAFLzL9u4TIhHS
6RvLPlG8uQxEgzOMLty0lmxTfV4w1fKsxoNTIswe0JMWkPfW0bEcsVgv1Npq2GE6
YTB6U3rZlrbLsNwEB4jEOZ/HBowHKVuIVRqYzrDcsB05tGo1OCLn1djCJWcapcfP
6nT43sfoXgDYmaLtPsn07IrzDwm50ZlzTCma7tFBGXUcXlcNBspobbhX2oehQBfy
ab6uV+rsLKq67LT2fNoQdztdZLFKpJXRkuFn2U64sUSah4DkmiYylzzemkQUQPfq
CBVG9upNMVTJfU4AYwsWaduRDWO0GROiRvFXnXQ+lNbW7lflswa2dOHwdRP02R4c
6wyCzI/DKw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 00:45:08 2025 by rpki-client