Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134392e302f32342d3234203d3e20323634313937.roa
File: 3133382e39372e3134392e302f32342d3234203d3e20323634313937.roa (raw, json)
Hash identifier: x0hbcKC0TuQuApUiiq2WcZ/utormAb3pdPbj91woqpU=
Subject key identifier: 68:39:5C:89:5E:65:63:44:32:C5:68:F4:81:A9:95:95:79:D8:C1:75
Certificate issuer: /CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Certificate serial: 3373626EA1FBF72226290D7C9208956C2823BB5C
Authority key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134392e302f32342d3234203d3e20323634313937.roa
Signing time: Thu 06 Mar 2025 19:01:12 +0000
ROA not before: Thu 06 Mar 2025 18:56:12 +0000
ROA not after: Thu 05 Mar 2026 19:01:12 +0000
asID: 264197
IP address blocks: 138.97.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 18:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:73:62:6e:a1:fb:f7:22:26:29:0d:7c:92:08:95:6c:28:23:bb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Validity
Not Before: Mar 6 18:56:12 2025 GMT
Not After : Mar 5 19:01:12 2026 GMT
Subject: CN=68395C895E65634432C568F481A9959579D8C175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:0b:c4:e7:0b:68:17:f0:8a:f5:25:0a:10:
86:f1:b7:19:64:f4:b0:42:75:da:38:e5:85:84:01:
38:f1:4b:25:92:dc:ac:f5:da:ec:c4:14:3a:80:2b:
05:63:68:cd:19:c2:8a:41:e5:bb:92:a2:0d:dd:12:
61:e2:97:f1:b7:77:42:b0:10:3b:b3:bc:7e:8a:a5:
bb:a3:1e:53:68:a7:cb:f6:4e:f7:b2:5b:75:0d:87:
2f:3b:84:09:ac:2c:e8:41:a3:a4:22:6d:1f:e2:2a:
43:a2:67:b0:82:52:42:1e:47:77:29:56:4d:cd:01:
51:db:9d:4d:ea:ed:20:39:d1:f1:3d:86:11:47:c0:
cc:af:51:15:62:96:85:8b:26:5d:49:89:d6:b6:cf:
31:1f:29:de:67:a1:77:4b:77:79:0b:93:a7:2e:84:
34:99:1f:7b:5b:43:57:a6:d1:2c:d2:98:29:8e:5c:
a4:83:75:9c:0c:e6:16:b9:ef:e3:c5:55:61:08:e1:
48:96:f7:22:d3:d4:da:20:28:89:8a:dc:03:bc:d1:
7f:01:c7:94:fb:a4:80:9a:6b:fb:88:a1:58:7c:59:
ec:d1:ae:d6:21:3f:d7:9a:9c:d1:eb:dc:1c:73:94:
98:a4:23:30:8b:34:ac:ef:38:cb:7d:44:35:d8:a1:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:39:5C:89:5E:65:63:44:32:C5:68:F4:81:A9:95:95:79:D8:C1:75
X509v3 Authority Key Identifier:
keyid:AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134392e302f32342d3234203d3e20323634313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e4:e9:e1:1c:3c:22:d7:2c:2a:ff:a5:26:f2:72:6d:23:49:
00:09:ab:22:e6:81:93:ca:68:30:f7:f9:00:84:32:ac:37:a5:
8b:fd:b4:4a:55:ea:a4:ca:8a:48:c2:96:ba:37:c7:57:6a:c7:
f4:9f:74:ab:13:62:0c:c8:32:e1:08:10:2d:11:e2:26:da:e6:
fd:e2:a0:7f:27:6d:37:df:a7:de:1a:b2:6a:22:7a:b2:d8:2c:
e4:fb:7c:53:44:17:0b:fb:c9:56:d5:6d:4b:05:88:05:97:95:
2f:b1:e9:31:79:5b:69:4e:d8:71:a3:90:99:ac:51:77:52:19:
96:0f:8b:f7:e0:6e:00:f5:61:d0:e3:78:6d:78:05:25:03:10:
82:03:a0:19:5b:05:26:4d:26:ca:eb:6a:1d:80:cd:59:4a:2d:
35:97:19:1a:2e:c1:1f:d3:ef:db:0b:ae:cd:b4:85:d2:89:0b:
e0:82:50:6c:85:35:5b:d5:5f:61:36:25:85:fb:59:3f:ce:e8:
83:a1:6d:aa:f4:41:af:39:6f:39:36:06:1c:07:02:4c:2c:87:
07:ac:d9:7a:85:9f:29:05:2e:4c:9c:79:59:a9:6f:af:11:ef:
2c:cf:0d:41:e8:54:78:19:e1:e2:2f:b9:ab:29:7f:00:3f:3c:
6a:03:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:36:37 2025 by rpki-client