Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139362e302f32332d3233203d3e20323633383437.roa
File: 3133382e3138352e3139362e302f32332d3233203d3e20323633383437.roa (raw, json)
Hash identifier: V9K9CNnADslJnaJYWOIBlFUvmKpcpsAt4ZE5NfFCW2w=
Subject key identifier: 5C:10:60:75:54:90:20:9C:F6:16:BC:B5:22:A9:08:89:00:86:53:B7
Certificate issuer: /CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
Certificate serial: 6D5810550C1F74EA65680B10203743FA693BBC17
Authority key identifier: 70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139362e302f32332d3233203d3e20323633383437.roa
Signing time: Fri 30 Aug 2024 04:58:15 +0000
ROA not before: Fri 30 Aug 2024 04:53:15 +0000
ROA not after: Fri 29 Aug 2025 04:58:15 +0000
asID: 263847
IP address blocks: 138.185.196.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Mar 2025 17:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:58:10:55:0c:1f:74:ea:65:68:0b:10:20:37:43:fa:69:3b:bc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
Validity
Not Before: Aug 30 04:53:15 2024 GMT
Not After : Aug 29 04:58:15 2025 GMT
Subject: CN=5C1060755490209CF616BCB522A90889008653B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:b1:94:5d:ee:f4:9a:49:c2:8d:d4:10:52:
c6:2d:d0:8c:3e:29:56:a8:ee:2c:bc:9a:24:58:46:
21:2a:61:07:69:48:ca:23:7f:19:08:f9:61:b6:67:
eb:71:30:b5:10:26:fb:b2:e4:93:cd:73:0a:47:76:
88:34:24:2e:11:3a:a5:7f:45:e5:68:8d:8d:1d:71:
ab:14:d1:eb:f7:01:9a:2c:2f:68:76:c6:a8:59:11:
ea:a0:e4:c4:ce:3f:db:bd:0d:dc:70:03:46:f0:99:
bf:e4:12:47:a2:70:95:6d:8a:00:0b:08:a6:c0:eb:
da:37:51:dd:90:17:a2:f8:fe:86:74:b7:f6:64:4c:
da:63:f6:1c:90:8c:fa:26:de:7f:a7:4a:3f:1f:06:
f3:57:dd:3e:42:8e:9c:b7:b9:3b:31:cd:9d:09:3c:
2f:a8:66:84:df:98:48:cb:66:80:47:9a:6f:de:18:
08:ae:7b:71:cc:63:2d:75:27:89:b6:c8:ee:22:64:
47:9e:e3:e4:af:5a:ee:b5:9e:ba:d0:04:8c:c0:f7:
23:55:66:06:fe:80:18:a1:25:ee:86:df:cc:4d:82:
9d:f5:67:1f:40:f1:ab:02:4a:8f:f5:00:c2:09:db:
69:fe:49:a2:34:89:c9:43:2b:33:fd:d6:3b:c7:c7:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:10:60:75:54:90:20:9C:F6:16:BC:B5:22:A9:08:89:00:86:53:B7
X509v3 Authority Key Identifier:
keyid:70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139362e302f32332d3233203d3e20323633383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.196.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:05:ee:21:ca:94:c8:88:e4:ae:71:bc:2d:df:48:76:44:f9:
9d:45:f8:c7:03:e6:be:52:97:29:82:fc:02:15:58:7f:49:57:
ec:c4:71:a9:c7:0a:3f:37:3f:ef:57:c2:a3:3c:54:d6:d4:c8:
01:a6:df:3f:6f:18:57:f7:9a:f0:12:c6:1b:68:1d:4a:28:20:
58:9d:8e:d6:20:5c:92:5a:36:1a:d6:b1:d7:9c:59:91:5f:e4:
b2:e4:14:59:9c:05:21:52:76:a8:00:d3:39:6d:53:9a:dd:bf:
e7:4e:51:6e:89:5f:b5:14:62:02:af:92:41:e0:b6:97:46:98:
d1:2b:11:ac:2d:fe:b1:f2:40:20:8c:27:a7:09:b1:75:59:34:
f6:4d:15:6d:32:9f:b1:a3:09:6e:ff:3c:f3:ab:0e:31:8f:da:
a4:7a:61:94:e8:78:0d:99:4d:c2:da:be:0b:6f:4a:6c:b6:12:
e6:be:de:f2:8a:af:ca:86:6d:5c:b3:28:65:c7:b3:72:69:10:
3b:97:ef:6b:53:19:58:ac:4f:7e:6a:fc:ee:6d:c3:2c:a1:9d:
c7:f7:f5:29:e1:18:42:ec:51:21:01:9b:1b:78:ff:6a:b2:63:
06:00:4b:32:a8:fb:1f:c0:a9:73:ec:4a:4b:fc:a4:c2:67:ee:
a8:e7:15:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:09:06 2025 by rpki-client