Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139382e302f32332d3233203d3e20323633383437.roa
File: 3133382e3138352e3139382e302f32332d3233203d3e20323633383437.roa (raw, json)
Hash identifier: +o3i+RkEBwS6gNhxS7XVLcejWkc8phx4kgtsYuABNvo=
Subject key identifier: 5B:1F:FF:94:61:24:C7:DA:E4:49:4B:09:B2:36:FE:A6:CF:C9:C2:BF
Certificate issuer: /CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
Certificate serial: 62905DFCBB1C11ECDB6491FD34FBCA3CDF6FFB57
Authority key identifier: 70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139382e302f32332d3233203d3e20323633383437.roa
Signing time: Fri 30 Aug 2024 04:58:17 +0000
ROA not before: Fri 30 Aug 2024 04:53:17 +0000
ROA not after: Fri 29 Aug 2025 04:58:17 +0000
asID: 263847
IP address blocks: 138.185.198.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Mar 2025 17:14:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:90:5d:fc:bb:1c:11:ec:db:64:91:fd:34:fb:ca:3c:df:6f:fb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
Validity
Not Before: Aug 30 04:53:17 2024 GMT
Not After : Aug 29 04:58:17 2025 GMT
Subject: CN=5B1FFF946124C7DAE4494B09B236FEA6CFC9C2BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1b:4d:ed:3f:ae:95:0f:e4:70:01:0e:cc:4d:
21:f5:41:a4:89:50:bb:8f:e8:ee:21:b9:de:95:d3:
b9:72:6e:10:58:71:dd:45:47:4c:9e:1c:87:0e:f4:
e9:84:c7:9f:cc:af:ea:7f:ba:ed:e3:2b:d7:55:4d:
be:dc:8d:c8:f9:5f:65:e6:ef:30:a1:6b:b0:7b:a3:
1c:8d:87:ce:27:a4:74:3b:86:f7:39:af:dd:e6:dd:
28:84:a4:ca:fa:45:54:86:a1:51:c4:3f:11:f4:d7:
65:43:dd:e7:b0:2f:43:67:c6:da:0c:65:ac:18:43:
cf:5e:90:8f:67:8b:c3:9c:48:1e:60:30:26:0f:c9:
71:40:2f:de:25:64:52:6a:2c:e9:39:02:35:92:d4:
81:77:42:f8:b4:d7:19:2e:c4:a0:69:9a:c2:68:8d:
8e:25:49:66:3d:d6:ae:1c:12:df:8c:58:eb:e0:6d:
1b:20:9c:42:50:2d:43:b3:2f:d5:b7:14:84:62:8c:
26:84:bb:9b:51:88:a8:dc:b8:16:c0:e5:62:c0:bc:
25:d1:b7:ee:ce:31:47:03:b1:3c:75:af:62:83:13:
3f:05:ec:be:41:6a:95:18:d9:f1:cf:69:b5:27:79:
10:60:09:bd:cd:c1:c7:16:31:95:2f:3d:54:c2:ed:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1F:FF:94:61:24:C7:DA:E4:49:4B:09:B2:36:FE:A6:CF:C9:C2:BF
X509v3 Authority Key Identifier:
keyid:70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139382e302f32332d3233203d3e20323633383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.198.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:4d:00:60:35:00:28:6c:e8:b5:19:48:15:a7:cf:ca:4b:86:
96:81:19:27:f7:d7:f2:e5:2b:0e:0b:37:52:84:56:87:bb:77:
e0:d3:22:d1:0d:c0:c0:10:99:38:c7:c3:02:72:81:94:fa:4d:
0f:bb:52:72:37:b3:b8:79:24:c2:ed:f6:2e:a1:e5:10:8c:3c:
e9:e8:14:a7:c7:e8:c7:de:c5:a4:b7:97:e3:a3:52:62:56:f8:
4c:3e:89:33:00:76:d3:53:0d:3f:b0:5e:54:3d:d1:f8:8a:75:
be:2b:23:05:2e:e3:1c:06:86:ab:73:ab:73:30:91:c9:d3:66:
76:26:6c:c3:ad:65:13:04:19:b9:a7:e3:90:d9:d1:3d:4a:da:
94:67:18:18:e1:5b:ff:54:ed:b5:9a:28:81:48:b4:bb:cd:75:
ac:92:f4:8d:e5:76:f8:4d:85:36:35:7b:48:d3:4a:08:1c:8f:
60:77:32:49:a7:91:89:c6:97:f4:7e:76:64:38:8d:44:e7:45:
1f:1e:3e:01:aa:13:ef:21:69:73:88:e6:d9:a8:e2:b4:b4:a8:
f1:67:b5:37:8a:00:e0:9a:1c:58:bb:10:e8:a3:38:93:d5:c5:
a6:a1:03:1a:f8:1d:e1:ba:cd:72:de:f7:12:8b:d5:3b:6b:a9:
fd:b9:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:08:44 2025 by rpki-client