Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa
File: 3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa (raw, json)
Hash identifier: +VTFccV8Dxm/sBCrI1+qVVBG1AMmneR+b/uCS8sBDqg=
Subject key identifier: 1D:38:5E:94:51:61:0F:6D:A1:23:31:A6:57:EC:85:FD:4C:26:79:AC
Certificate issuer: /CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Certificate serial: 60CF67F47D4B56706FF699BBE81FC46739836FAA
Authority key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa
Signing time: Thu 06 Mar 2025 19:01:13 +0000
ROA not before: Thu 06 Mar 2025 18:56:13 +0000
ROA not after: Thu 05 Mar 2026 19:01:13 +0000
asID: 264197
IP address blocks: 138.97.148.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 15 Apr 2025 18:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:cf:67:f4:7d:4b:56:70:6f:f6:99:bb:e8:1f:c4:67:39:83:6f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Validity
Not Before: Mar 6 18:56:13 2025 GMT
Not After : Mar 5 19:01:13 2026 GMT
Subject: CN=1D385E9451610F6DA12331A657EC85FD4C2679AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b9:3b:82:99:25:91:7f:73:e3:34:95:c9:f8:
db:45:02:f4:50:1b:37:68:8c:ef:81:c0:ec:2a:13:
99:b5:f4:01:de:04:24:5e:5a:07:29:21:a4:21:34:
1a:28:41:02:c0:31:3d:fe:df:e8:e8:ef:a5:f4:73:
e8:b5:8b:2e:38:19:75:d8:29:94:b4:46:7c:03:04:
f6:18:1b:f3:43:94:06:69:19:0e:07:cd:65:b3:45:
8b:90:fd:aa:63:47:2a:a5:20:fe:a2:af:3a:50:94:
6b:62:44:04:04:68:fc:a1:82:42:57:40:93:47:45:
27:5d:66:c6:74:5d:f4:10:7a:58:d1:b1:d5:fe:9c:
7e:96:f2:08:44:fe:f8:6f:a6:91:7a:8e:27:86:43:
17:f1:a2:ad:fd:fe:4f:aa:92:c1:26:82:8b:33:46:
ca:8f:29:5f:36:a4:e9:ef:b6:88:09:82:3c:82:d0:
8b:30:6d:a0:c4:6d:59:94:35:d2:c0:55:46:48:99:
cc:7a:06:db:79:fc:fa:26:91:2c:6c:75:75:41:95:
a7:02:44:5a:ac:97:a3:51:7f:f6:7d:7c:ab:f9:7f:
b9:1d:9e:ed:ab:58:bd:e9:7b:e3:68:b6:c2:cc:48:
dc:3d:80:1f:ca:13:2b:86:a0:de:2f:1e:74:6e:c5:
21:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:38:5E:94:51:61:0F:6D:A1:23:31:A6:57:EC:85:FD:4C:26:79:AC
X509v3 Authority Key Identifier:
keyid:AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.148.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:85:93:ed:2e:8d:ba:9f:51:3c:6b:d6:7d:c8:f8:71:a3:bb:
4a:16:d2:12:57:e5:f3:95:6d:6b:84:39:4f:ea:25:dc:bc:00:
80:4c:d1:56:7b:0e:e4:d2:d3:ed:63:43:6f:e5:25:6f:b1:21:
9d:c7:63:cd:7b:b9:63:75:51:df:aa:d5:86:1c:cc:27:c7:eb:
75:8b:08:e2:80:16:41:6a:3a:43:45:99:a1:4f:a1:eb:55:2f:
6e:02:71:d8:af:0d:59:1e:ea:6a:25:fa:eb:df:a3:be:83:72:
44:c8:b5:5f:3b:f9:e0:bd:21:e1:8d:97:e3:50:57:3a:5c:09:
56:fd:45:9d:89:8c:77:7f:80:f1:81:4a:64:2f:c7:b9:5f:f8:
4b:e2:f1:39:93:a7:37:30:42:92:f9:48:67:0f:0a:6c:0f:ea:
f9:0a:b5:cb:db:a6:3f:c9:29:33:69:14:bb:62:92:a4:41:b3:
c0:23:03:1b:7d:a9:aa:94:b4:7f:15:f9:e3:77:df:e7:5e:51:
87:cd:d1:03:a0:c9:4e:12:32:1e:d7:16:c5:f6:6d:17:9f:02:
d2:87:c9:55:d6:1c:23:4b:81:0d:42:0f:39:d3:74:d3:cf:71:
3f:3b:2c:60:6e:59:6f:aa:64:e5:58:70:3c:57:07:25:17:fd:
2c:d4:0f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:36:42 2025 by rpki-client