Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3135302e302f32342d3234203d3e20323634313937.roa
File: 3133382e39372e3135302e302f32342d3234203d3e20323634313937.roa (raw, json)
Hash identifier: MeNOqcP/TnFMsDUKgxwRBeIWqpI2PGsahtNhC59eZDQ=
Subject key identifier: 85:B8:A3:5C:1E:54:F3:6E:DA:82:54:20:39:3C:DC:06:AF:43:9F:9C
Certificate issuer: /CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Certificate serial: 64EDAF2EE35B73D4DDB4DBE9E152289C3EDEAD6A
Authority key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3135302e302f32342d3234203d3e20323634313937.roa
Signing time: Thu 06 Mar 2025 19:01:12 +0000
ROA not before: Thu 06 Mar 2025 18:56:12 +0000
ROA not after: Thu 05 Mar 2026 19:01:12 +0000
asID: 264197
IP address blocks: 138.97.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 18:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ed:af:2e:e3:5b:73:d4:dd:b4:db:e9:e1:52:28:9c:3e:de:ad:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Validity
Not Before: Mar 6 18:56:12 2025 GMT
Not After : Mar 5 19:01:12 2026 GMT
Subject: CN=85B8A35C1E54F36EDA825420393CDC06AF439F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:df:31:20:e0:90:56:77:1c:d3:17:a7:aa:21:
aa:98:00:f2:d7:f9:d1:bf:51:af:77:5d:8c:62:de:
ac:6f:86:ee:b3:d1:19:ea:b3:63:9f:36:90:9d:19:
b0:ff:12:19:b3:07:c7:cd:20:99:8f:4d:79:e5:f2:
e7:e1:23:ad:69:72:81:52:19:5d:63:22:9f:27:52:
cf:22:50:75:bc:98:23:09:00:6e:49:f4:cd:27:c9:
72:53:58:3a:3c:81:31:15:38:89:cb:15:f3:fa:12:
ce:2a:76:0d:d6:b0:f9:7a:15:57:b4:97:50:95:c3:
d6:cf:c9:e3:56:e6:ea:c6:26:60:ea:1d:99:91:01:
18:fb:9a:25:53:d1:9a:da:a6:cd:73:a8:4d:56:af:
89:83:c4:4d:b4:57:40:fd:d1:7e:44:79:c8:c7:22:
b7:f8:9a:a2:cd:f9:dd:67:f8:b7:c3:33:5f:95:b4:
7a:3b:98:90:35:fd:71:45:41:35:a6:7a:ce:28:0f:
b0:0d:09:b5:2e:10:0b:52:03:34:e2:b3:1f:d8:25:
4d:16:f0:09:49:b2:bb:f4:31:d3:4b:ff:26:4d:c2:
67:28:91:a9:06:93:31:84:16:56:ff:10:ea:e3:a9:
eb:29:43:1c:94:14:bb:3d:8b:69:97:db:4f:18:a2:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B8:A3:5C:1E:54:F3:6E:DA:82:54:20:39:3C:DC:06:AF:43:9F:9C
X509v3 Authority Key Identifier:
keyid:AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3135302e302f32342d3234203d3e20323634313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.150.0/24
Signature Algorithm: sha256WithRSAEncryption
69:08:f7:73:a0:62:fd:d2:e4:29:f8:c3:75:10:c6:1f:1c:bc:
58:b5:34:77:41:2e:46:51:57:4a:f4:1d:56:46:20:d1:cf:47:
ab:f8:22:3a:ff:aa:b8:bd:a3:56:9d:45:e1:fc:e0:9b:5c:78:
5b:a2:18:fc:df:41:6d:f0:71:4f:f1:e6:0e:cd:d2:77:2a:81:
b3:79:1d:4f:06:4b:2f:92:a4:50:cf:3b:59:a1:d5:b7:e2:d8:
ec:10:c6:60:73:c5:fe:82:94:5b:29:97:24:ce:da:44:0b:5c:
0c:4d:81:66:08:4b:02:2a:94:78:34:f9:a4:9e:d6:37:88:1a:
d0:6f:65:df:9b:a2:22:43:78:70:13:d3:30:b6:87:d7:65:a7:
5a:3c:c6:f0:d8:8e:ce:65:9d:e6:f5:2a:e9:4c:e9:98:bf:95:
4a:b9:f7:1f:9c:4d:52:83:18:8d:5b:83:04:f4:c2:89:f2:e2:
7f:06:1c:31:b1:67:c2:74:13:17:5a:5d:19:94:ed:7f:37:27:
67:f8:6c:f9:2e:a1:49:9a:45:15:12:a7:5f:fd:d2:a6:ee:a8:
02:dd:db:0b:b6:58:30:f8:66:9b:3d:3f:e3:99:e5:6c:c2:3a:
4c:c1:50:bc:92:bc:c8:5a:62:be:88:a7:b3:56:99:d3:b4:2b:
f6:ce:e0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:36:40 2025 by rpki-client