Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38322e302f32342d3234203d3e20323634353731.roa
File: 3133382e33362e38322e302f32342d3234203d3e20323634353731.roa (raw, json)
Hash identifier: Dc9VLfaKBA7rYCt86j/N1sptiEkhMXQeF/BlZx72/vo=
Subject key identifier: A2:77:D1:33:AC:D3:86:A7:AB:A6:E7:05:58:A6:55:C7:45:2E:F3:B2
Certificate issuer: /CN=84210C699884A23E38D45F40B27833D84A440F91
Certificate serial: 2C51FE8621F88664DFC7C5AA5E93E739DA5C0F24
Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38322e302f32342d3234203d3e20323634353731.roa
Signing time: Wed 03 Apr 2024 18:32:11 +0000
ROA not before: Wed 03 Apr 2024 18:27:11 +0000
ROA not after: Wed 02 Apr 2025 18:32:11 +0000
asID: 264571
IP address blocks: 138.36.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:51:fe:86:21:f8:86:64:df:c7:c5:aa:5e:93:e7:39:da:5c:0f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91
Validity
Not Before: Apr 3 18:27:11 2024 GMT
Not After : Apr 2 18:32:11 2025 GMT
Subject: CN=A277D133ACD386A7ABA6E70558A655C7452EF3B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:db:c7:44:7a:d4:ec:71:20:ca:62:d0:0d:
31:02:7e:fc:c4:5b:f9:5e:e1:0c:7a:d3:c5:d6:21:
1d:82:e2:dc:ec:2f:28:26:ad:38:47:ae:2b:c3:5d:
33:71:0b:0a:21:56:4d:9b:fa:36:d5:ee:80:8e:ab:
7c:a6:91:1f:19:ca:76:f2:68:6e:62:c1:fd:67:43:
43:1a:de:27:6f:99:e3:99:bc:c7:9e:f7:81:b6:79:
85:a2:1b:84:2e:ca:85:f5:40:ce:2c:1a:4b:df:1a:
76:63:cd:13:d3:b4:28:e5:73:6a:d7:d4:c4:aa:81:
45:5a:b9:3f:19:54:dd:74:70:52:19:7a:4c:f0:a5:
1c:1e:0c:81:70:61:fc:7f:e1:c2:d3:13:7b:89:e1:
eb:86:fc:29:b8:a8:8f:dc:63:90:e9:2b:fd:f9:f4:
86:70:19:93:3d:ef:4c:dc:50:4c:df:ce:c0:c8:6f:
7b:5f:51:b5:54:5c:4b:91:4c:11:61:16:2b:6d:3b:
95:ec:aa:08:cd:af:35:bb:a9:e3:20:fc:9d:88:19:
99:ad:3f:be:0e:9b:62:9f:68:01:7a:a3:40:18:83:
ab:dd:6b:28:ad:23:a9:a3:2a:a1:d9:eb:ff:df:d0:
50:a5:1f:4e:89:28:aa:26:d9:0f:0c:14:6f:4e:b8:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:77:D1:33:AC:D3:86:A7:AB:A6:E7:05:58:A6:55:C7:45:2E:F3:B2
X509v3 Authority Key Identifier:
keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38322e302f32342d3234203d3e20323634353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.82.0/24
Signature Algorithm: sha256WithRSAEncryption
67:08:e0:71:61:17:d2:62:4f:30:e8:b6:56:eb:dd:5d:28:99:
b1:5c:eb:f8:11:ef:21:20:ae:59:66:46:26:ae:3b:10:9c:69:
d3:cb:69:cc:12:0c:c4:51:bc:34:08:e6:f6:a2:fe:f6:cc:af:
e6:f9:88:c7:e4:90:bc:41:21:98:76:cb:5d:c4:7e:93:3c:df:
3f:4f:99:f3:85:dc:3b:b4:cb:32:65:e8:c3:38:87:5b:83:b9:
23:6d:45:be:fd:26:38:be:46:bd:b5:60:89:fa:e0:9d:cb:4a:
c6:98:b7:4a:cc:cf:cf:2b:3e:63:30:16:9b:f1:93:fb:b4:e8:
bf:9d:7b:d7:7f:3a:f3:f8:b5:42:a5:7c:db:4e:eb:0b:b5:ae:
5c:6d:f3:e7:a5:10:13:c6:41:d9:92:02:a2:70:66:bb:e0:3e:
2e:58:d2:e1:d3:75:fe:02:46:82:97:56:81:d2:6b:70:3d:fe:
28:34:4a:d1:74:1a:a1:ad:7a:8a:cf:de:04:8b:17:fe:48:6f:
1c:0a:7e:43:a0:d1:dc:ee:5e:68:7c:56:4e:7b:69:a4:fe:bd:
23:b6:2f:32:8e:b5:8d:cd:38:3b:c0:d0:90:e7:b7:3e:2a:b2:
57:fb:fc:38:12:fa:39:1a:90:37:2c:ac:9d:ae:8c:d7:86:7d:
16:02:82:d7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULFH+hiH4hmTfx8WqXpPnOdpcDyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQyMTBDNjk5ODg0QTIzRTM4RDQ1RjQwQjI3ODMzRDg0
QTQ0MEY5MTAeFw0yNDA0MDMxODI3MTFaFw0yNTA0MDIxODMyMTFaMDMxMTAvBgNV
BAMTKEEyNzdEMTMzQUNEMzg2QTdBQkE2RTcwNTU4QTY1NUM3NDUyRUYzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKSdvHRHrU7HEgymLQDTECfvzE
W/le4Qx608XWIR2C4tzsLygmrThHrivDXTNxCwohVk2b+jbV7oCOq3ymkR8Zynby
aG5iwf1nQ0Ma3idvmeOZvMee94G2eYWiG4QuyoX1QM4sGkvfGnZjzRPTtCjlc2rX
1MSqgUVauT8ZVN10cFIZekzwpRweDIFwYfx/4cLTE3uJ4euG/Cm4qI/cY5DpK/35
9IZwGZM970zcUEzfzsDIb3tfUbVUXEuRTBFhFittO5XsqgjNrzW7qeMg/J2IGZmt
P74Om2KfaAF6o0AYg6vdayitI6mjKqHZ6//f0FClH06JKKom2Q8MFG9OuCK9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUonfRM6zThqerpucFWKZVx0Uu87IwHwYDVR0j
BBgwFoAUhCEMaZiEoj441F9Asngz2EpED5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55
RkYvMS84NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MjEwQzY5OTg4NEEyM0Uz
OEQ0NUY0MEIyNzgzM0Q4NEE0NDBGOTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NQeGhOcWc1RUFjZ2hVRGpVNFlCZWVzbW1LYUZkcW52RTNyNUdLNWZueUZGLzEv
MzEzMzM4MmUzMzM2MmUzODMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzUzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAiiRSMA0GCSqGSIb3DQEBCwUAA4IBAQBnCOBxYRfS
Yk8w6LZW691dKJmxXOv4Ee8hIK5ZZkYmrjsQnGnTy2nMEgzEUbw0COb2ov72zK/m
+YjH5JC8QSGYdstdxH6TPN8/T5nzhdw7tMsyZejDOIdbg7kjbUW+/SY4vka9tWCJ
+uCdy0rGmLdKzM/PKz5jMBab8ZP7tOi/nXvXfzrz+LVCpXzbTusLta5cbfPnpRAT
xkHZkgKicGa74D4uWNLh03X+AkaCl1aB0mtwPf4oNErRdBqhrXqKz94Eixf+SG8c
Cn5DoNHc7l5ofFZOe2mk/r0jti8yjrWNzTg7wNCQ57c+KrJX+/w4Evo5GpA3LKyd
rozXhn0WAoLX
-----END CERTIFICATE-----
Generated at Tue Aug 13 19:14:39 2024 by rpki-client on console-fra.rpki-client.org