Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35322e302f32322d3232203d3e203631373438.roa
File: 3133312e3130302e35322e302f32322d3232203d3e203631373438.roa (raw, json)
Hash identifier: ohIKyIt0oBCPrtlHpAT5ria970OA55xPpyyj2Uuj2A0=
Subject key identifier: EE:5D:8C:06:9F:70:37:6F:3C:2B:38:72:4A:C2:0B:80:C5:B2:25:63
Certificate issuer: /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial: 3BA0891908F93944DFB8E3146642254CC09107D2
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35322e302f32322d3232203d3e203631373438.roa
Signing time: Wed 10 Apr 2024 19:18:44 +0000
ROA not before: Wed 10 Apr 2024 19:13:44 +0000
ROA not after: Wed 09 Apr 2025 19:18:44 +0000
asID: 61748
IP address blocks: 131.100.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 09 Apr 2025 19:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a0:89:19:08:f9:39:44:df:b8:e3:14:66:42:25:4c:c0:91:07:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Validity
Not Before: Apr 10 19:13:44 2024 GMT
Not After : Apr 9 19:18:44 2025 GMT
Subject: CN=EE5D8C069F70376F3C2B38724AC20B80C5B22563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:68:fb:13:d4:eb:a9:48:8c:7d:28:26:00:
94:75:04:52:be:e3:80:6b:a3:70:02:dd:c2:7f:19:
ee:42:f2:3c:b3:5b:fc:0d:f5:d8:16:83:cd:e4:77:
6d:a4:4d:68:f9:7f:9d:a4:98:62:89:21:e4:2f:cd:
73:da:37:96:fb:e7:96:d4:e5:95:6e:47:ac:8b:48:
bf:55:1c:86:b0:b1:82:7d:33:a8:4d:b5:eb:3c:18:
bb:69:2c:a0:40:3c:d7:99:15:c5:0d:b7:ed:ff:55:
50:cc:51:f7:99:b0:be:19:bf:4e:f2:9f:b7:b9:53:
01:70:f5:b8:c4:f7:c7:68:79:c0:96:35:f3:7d:95:
e1:cc:88:7b:6e:49:dc:15:81:6a:e6:67:80:da:26:
34:cc:f6:16:d8:fc:f0:be:48:78:7b:b6:d0:3a:8a:
19:c4:b2:ca:2a:46:2d:3d:5d:2b:14:06:0f:26:21:
98:32:b2:f9:23:a9:53:da:5b:ba:f4:b2:68:0c:20:
ab:5b:28:15:b8:29:a3:19:73:18:f2:01:c5:88:bc:
5f:85:c0:c8:b8:12:c9:cc:6e:b2:36:7b:eb:fc:99:
0b:2f:fc:6d:3d:bc:c3:9f:38:b0:d5:87:55:42:6f:
a8:bb:91:a1:54:52:65:f9:f9:b3:93:44:21:22:0a:
d6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5D:8C:06:9F:70:37:6F:3C:2B:38:72:4A:C2:0B:80:C5:B2:25:63
X509v3 Authority Key Identifier:
keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35322e302f32322d3232203d3e203631373438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.52.0/22
Signature Algorithm: sha256WithRSAEncryption
19:fa:e6:69:09:6a:8e:70:cb:4a:89:5a:8e:84:c2:92:2b:c0:
27:24:b7:c5:ae:bd:47:1f:2a:65:64:0b:1f:dd:e7:77:42:d5:
d7:29:64:fa:5b:c8:89:f4:e6:13:8f:39:45:4d:d4:08:8a:99:
e1:ed:d7:e2:a7:68:bf:09:91:62:1d:3c:92:d9:1d:e0:68:13:
ab:31:a8:3d:db:d3:ee:2f:75:ba:a5:b5:10:63:46:4e:72:5a:
50:97:a6:03:5a:a9:c8:6b:19:0c:7e:ba:e7:e4:c2:21:d9:cd:
4a:51:16:3e:84:7e:53:af:9d:4d:d8:48:d5:83:4d:9a:35:13:
7d:c8:07:d5:93:95:12:d1:27:13:e5:d8:31:ae:94:a6:55:07:
6f:56:ae:35:d4:dc:f2:44:4d:74:61:72:89:b7:05:a6:eb:eb:
ab:6c:7f:3f:48:05:5a:cc:11:05:c3:05:c0:8e:fa:e7:25:34:
e2:ac:31:a8:67:4e:3d:04:06:8f:64:84:a0:90:46:77:6c:d7:
35:79:68:62:25:3c:d5:bc:fa:ab:99:1b:57:1c:fb:7b:eb:61:
eb:80:f2:9a:c9:54:f4:d9:66:28:6c:5a:d7:04:cf:0f:a4:46:
49:15:cb:17:0c:80:6f:05:40:dc:e1:6e:06:dd:06:47:af:b8:
5d:56:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:02:32 2025 by rpki-client