Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32322d3234203d3e20323634353434.roa
File: 3133382e302e3131322e302f32322d3234203d3e20323634353434.roa (raw, json)
Hash identifier: VDGtUS6h603w+lGRJQsdvFFJ0K/9boogDGZ+qQ/mEI8=
Subject key identifier: 6C:D7:0D:8C:D6:73:B8:B2:9D:B0:2F:78:B2:32:2A:8A:C7:46:26:03
Certificate issuer: /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial: 39C71864B814AE721A159D675C4D2874F3745816
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32322d3234203d3e20323634353434.roa
Signing time: Tue 04 Feb 2025 01:35:47 +0000
ROA not before: Tue 04 Feb 2025 01:30:47 +0000
ROA not after: Tue 03 Feb 2026 01:35:47 +0000
asID: 264544
IP address blocks: 138.0.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 02:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c7:18:64:b8:14:ae:72:1a:15:9d:67:5c:4d:28:74:f3:74:58:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Validity
Not Before: Feb 4 01:30:47 2025 GMT
Not After : Feb 3 01:35:47 2026 GMT
Subject: CN=6CD70D8CD673B8B29DB02F78B2322A8AC7462603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:e8:91:51:fa:b8:27:e3:a2:c2:9b:1b:79:
a7:de:ff:df:9e:84:61:d5:ff:8d:20:89:0a:30:a6:
13:f9:e2:30:14:94:8e:66:e6:48:9f:44:2a:eb:2e:
68:4f:f5:e8:33:0a:5e:7f:89:f4:18:3f:c3:cb:a1:
f0:89:7f:67:26:c5:ae:dd:b3:31:33:2a:b6:12:d4:
61:29:da:75:b6:55:71:1d:25:bf:c9:e2:e1:13:a5:
86:8a:62:44:ec:68:f9:75:6a:d2:c0:f0:40:e3:a4:
39:bc:0e:e6:ee:87:6c:a2:d2:e4:1a:8d:f0:d5:42:
4d:7a:b6:55:51:09:f5:24:81:0f:06:1f:c0:3c:33:
32:44:57:2c:44:0f:e5:51:20:3b:c5:df:94:12:69:
fd:f1:18:97:6f:4d:b1:3d:35:e5:e0:99:7f:f0:89:
62:d0:37:7a:74:44:59:17:14:91:71:29:c9:52:73:
94:a4:d0:be:a2:80:82:3b:ce:bc:64:25:12:66:f7:
08:b9:57:e0:05:03:08:3c:57:27:33:db:cb:da:dd:
e2:4e:aa:8c:ce:5e:1c:98:3a:8f:a0:2e:be:7e:dd:
98:8f:25:62:e9:7a:de:c0:aa:02:0b:2a:03:c2:0d:
03:b7:bd:54:88:a6:cd:cf:63:6d:e4:7b:02:35:e2:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D7:0D:8C:D6:73:B8:B2:9D:B0:2F:78:B2:32:2A:8A:C7:46:26:03
X509v3 Authority Key Identifier:
keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32322d3234203d3e20323634353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.112.0/22
Signature Algorithm: sha256WithRSAEncryption
95:92:74:0a:e1:10:c3:cc:90:5f:12:f5:b4:c9:c3:6a:56:a7:
6e:7e:7c:57:9a:e8:7a:f5:e6:17:b5:9b:f1:be:c1:a9:39:c8:
a2:54:ec:5c:fd:0a:89:13:5a:d1:97:9a:c8:e9:61:62:72:c8:
b4:2a:db:13:83:3d:69:6f:7a:d5:23:8c:b8:0e:70:e1:15:7b:
c6:6a:93:41:fd:74:36:c2:4f:e6:5f:0e:d5:f6:43:82:ad:3e:
fd:9f:78:40:5c:95:94:40:52:cc:b9:6e:9e:46:78:1e:45:fb:
c5:5e:ef:08:c3:c5:4e:f6:29:b9:ce:23:7f:ed:01:d5:4b:0c:
4f:ed:6c:0a:10:73:31:5f:e0:92:67:ba:0b:de:4d:da:f3:4e:
06:89:2e:ea:18:94:77:5c:6c:98:d8:a8:07:bd:3a:cc:6c:6f:
d8:cb:f4:85:34:5c:b0:bc:f9:a8:af:e8:07:22:69:ad:c7:f3:
4c:2a:73:76:9f:d7:a6:cb:1c:eb:cb:6c:91:40:3b:92:de:28:
c7:c3:c1:9f:fb:17:13:36:1e:4e:43:6c:d7:06:56:82:92:e7:
f2:b3:02:af:c7:3e:e1:0a:72:d7:3a:99:be:4d:76:57:7b:16:
58:18:e3:6b:ca:1d:47:da:16:67:ab:bf:17:49:99:b0:be:fc:
d2:cd:6a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:54 2025 by rpki-client