Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3136382e3230352e32342e302f32342d3234203d3e20323633313531.roa
File: 3136382e3230352e32342e302f32342d3234203d3e20323633313531.roa (raw, json)
Hash identifier: HePKNcMZvTXI0v9g02kajRWwo/Z37ARGWxSWtmwrRXA=
Subject key identifier: 0E:56:B0:BB:45:A2:26:D5:17:90:54:E0:23:0F:60:EF:5C:4B:7F:FF
Certificate issuer: /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial: 0AFB69CCDF18C35EBB2AC04F1AE6D42FCF98F27F
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3136382e3230352e32342e302f32342d3234203d3e20323633313531.roa
Signing time: Mon 10 Mar 2025 15:22:44 +0000
ROA not before: Mon 10 Mar 2025 15:17:44 +0000
ROA not after: Mon 09 Mar 2026 15:22:44 +0000
asID: 263151
IP address blocks: 168.205.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 15:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:fb:69:cc:df:18:c3:5e:bb:2a:c0:4f:1a:e6:d4:2f:cf:98:f2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Validity
Not Before: Mar 10 15:17:44 2025 GMT
Not After : Mar 9 15:22:44 2026 GMT
Subject: CN=0E56B0BB45A226D5179054E0230F60EF5C4B7FFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:43:0c:31:19:83:1d:cf:4f:61:5e:c9:e6:
bb:8f:b9:bf:7b:87:be:92:2a:1c:1e:34:d5:c1:ef:
7c:65:ca:3a:63:24:ad:57:c6:1c:a8:4d:5e:9d:81:
6b:e1:be:a4:86:de:5a:16:dd:da:d2:da:42:f0:88:
ad:74:e8:95:b6:2d:40:c2:43:d1:5c:d6:c0:d9:d3:
f5:50:d4:62:51:76:5a:a9:12:c2:85:dd:1c:f9:c5:
c5:39:6d:89:7d:17:31:35:91:59:c8:bc:16:1b:0b:
68:82:46:bf:74:3e:1c:e4:b5:6e:cd:ed:0d:bf:70:
88:aa:85:ce:4c:ad:d1:3a:ae:b1:e2:ab:b5:5d:d1:
b1:22:7c:59:93:cf:bd:3a:4c:ac:27:34:f5:be:58:
e6:36:be:1c:31:49:20:78:8f:87:5d:c1:aa:50:12:
60:93:cd:2c:7e:48:69:9d:e1:76:20:bc:fe:b3:66:
f6:2e:d9:b8:b7:fa:ec:76:cf:48:46:05:ea:73:05:
40:89:39:3e:c2:63:6c:75:38:ca:cb:37:07:72:76:
3e:bd:4b:da:ac:07:34:90:6c:77:24:2a:ef:b3:04:
9a:a0:8f:69:e2:44:56:84:0e:29:38:6b:be:d0:eb:
a0:a1:e2:c7:e3:66:ab:0d:41:ff:18:44:b6:5f:87:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:56:B0:BB:45:A2:26:D5:17:90:54:E0:23:0F:60:EF:5C:4B:7F:FF
X509v3 Authority Key Identifier:
keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3136382e3230352e32342e302f32342d3234203d3e20323633313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.24.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:8e:a7:cc:05:d1:f3:1f:3d:5a:bb:3a:8e:30:82:de:b3:70:
d8:35:a1:85:55:33:aa:5f:4f:21:9f:28:9b:5d:e1:a7:6e:e4:
e9:b0:6f:0b:68:8d:bc:fa:a8:fb:30:4b:6b:59:d6:27:e8:12:
1b:4e:44:07:d1:4d:b9:51:dd:da:52:90:56:23:00:22:bc:82:
9f:2f:59:49:61:f1:5a:eb:e2:60:db:a9:fc:e1:c4:f6:ef:49:
9f:47:ec:a2:61:87:4c:8d:33:ca:1a:c7:30:68:76:47:1d:3d:
c8:ec:11:d9:75:42:b8:ac:9a:e7:43:16:59:e9:63:21:a0:05:
e9:4b:94:e9:b8:a2:c6:ee:07:57:06:82:b7:5b:86:18:07:a3:
3b:f7:8c:18:a8:38:70:97:5a:6d:3c:ea:aa:61:ac:02:c3:0d:
41:25:fc:2e:18:7d:48:a3:e6:14:dc:8e:ff:3f:00:78:48:51:
16:51:14:dd:f5:ce:ee:73:a9:1b:5f:ea:7a:14:7a:43:0c:b4:
51:a4:3e:07:39:81:bd:ea:14:da:6c:a7:cd:81:5c:7e:e3:c0:
1a:5d:d4:62:f7:6d:62:64:a7:92:38:d0:81:76:0e:bd:ae:80:
6a:1b:e5:96:ba:c9:90:b9:06:3c:2b:78:73:9b:80:d2:11:80:
1f:37:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:31:59 2025 by rpki-client