Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137302e3233392e33362e302f32342d3234203d3e20323633313531.roa
File: 3137302e3233392e33362e302f32342d3234203d3e20323633313531.roa (raw, json)
Hash identifier: CVlEww/ey+Xz3yzjuvVW+eLj5Gr7dLS2lZudHu6suTg=
Subject key identifier: 17:07:27:6A:9B:36:68:94:46:9C:8F:26:53:A6:40:19:EF:44:6C:A5
Certificate issuer: /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial: 3D64B1594398CECC2DE2B4328282C6FEC73B96
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137302e3233392e33362e302f32342d3234203d3e20323633313531.roa
Signing time: Mon 10 Mar 2025 15:22:35 +0000
ROA not before: Mon 10 Mar 2025 15:17:35 +0000
ROA not after: Mon 09 Mar 2026 15:22:35 +0000
asID: 263151
IP address blocks: 170.239.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 15:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:64:b1:59:43:98:ce:cc:2d:e2:b4:32:82:82:c6:fe:c7:3b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Validity
Not Before: Mar 10 15:17:35 2025 GMT
Not After : Mar 9 15:22:35 2026 GMT
Subject: CN=1707276A9B366894469C8F2653A64019EF446CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:f7:8b:2e:e7:74:1c:0e:b4:ee:36:7a:92:
ea:a6:ca:ea:41:f2:f5:e4:90:ee:95:3f:3a:ff:eb:
56:2f:c9:c0:a9:89:1c:32:50:29:9f:77:14:66:de:
9a:69:03:87:77:a7:d8:90:6b:f8:fb:16:9f:20:33:
3b:ad:2e:b4:90:84:6b:68:fd:75:9b:71:8d:a7:09:
e5:47:33:b6:36:a2:39:4b:d7:e6:dc:aa:79:86:82:
9b:ac:3a:68:f6:27:2d:16:10:9e:fb:2c:6c:07:45:
11:68:61:99:c4:0e:67:b3:49:cf:69:30:2f:40:77:
97:5a:2f:5b:00:93:f2:83:42:a6:89:99:2c:42:b2:
29:fc:b8:4f:89:71:61:c4:4d:a4:e2:c7:ec:4b:af:
18:9b:4a:ed:55:77:68:d6:99:b1:67:3d:88:42:e4:
52:8b:36:01:2f:04:ef:46:41:ae:e5:b2:a8:08:27:
c7:6f:8b:b7:0e:45:08:c7:89:b4:6c:82:36:a5:44:
ee:40:d1:6e:2d:d0:a1:cb:ca:f0:9c:7b:00:4d:86:
a7:12:1f:f0:d5:ed:1c:df:fa:f1:9c:1e:50:8b:e0:
48:67:72:9f:b0:41:84:a4:eb:e9:be:05:a8:0e:63:
44:33:5f:1f:8d:fc:76:16:e7:e7:ec:cb:04:c5:81:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:07:27:6A:9B:36:68:94:46:9C:8F:26:53:A6:40:19:EF:44:6C:A5
X509v3 Authority Key Identifier:
keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137302e3233392e33362e302f32342d3234203d3e20323633313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.36.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a7:74:ef:8f:6f:64:04:a8:99:97:b8:d7:ec:f8:e0:2d:ba:
cb:cd:59:82:2e:61:4e:82:a3:4d:37:56:a0:4a:6a:88:7c:8c:
71:31:04:f3:f7:a7:11:be:c9:8d:75:16:49:8f:e1:d9:f3:de:
70:f1:f4:8b:10:8d:05:53:2c:1f:0b:11:10:bd:66:64:f7:0c:
51:08:c2:64:65:ec:46:25:2f:22:b9:22:35:94:67:d3:22:bf:
79:ef:81:ba:b0:84:32:a2:91:b1:c9:32:58:8a:3a:7f:5b:bc:
3b:cd:98:c5:27:c2:6f:31:d3:fb:09:81:f6:01:d1:1c:c0:dd:
f1:d9:6b:4d:49:3a:16:54:3e:e6:81:2b:f9:4d:e9:d8:ed:21:
09:a0:f9:ca:21:c7:44:c1:bb:b0:e9:3a:38:13:c9:6c:a4:d1:
3f:9c:89:f2:bd:00:f3:d8:6c:d7:f3:d5:ed:0e:73:18:43:03:
5b:19:82:f3:e0:8e:15:26:d7:63:14:ed:62:83:b6:3d:61:6f:
a3:25:f6:f8:f0:67:16:f3:35:de:37:0a:81:ae:67:71:01:d2:
61:9d:54:c4:29:21:a6:c0:c3:33:2b:c1:33:79:8e:7c:cd:43:
8c:25:c5:9a:59:43:48:06:3c:91:d5:e3:10:80:61:63:b0:ee:
23:42:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:00:34 2025 by rpki-client