Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137302e3233392e33382e302f32342d3234203d3e20323633313531.roa
File: 3137302e3233392e33382e302f32342d3234203d3e20323633313531.roa (raw, json)
Hash identifier: tQ7xTJYNwBjmcXtehD41/xsK+rgMLEFcQQ/OMluHkUE=
Subject key identifier: 06:FF:17:02:D2:91:92:D7:E3:65:07:66:A1:5C:39:83:A6:02:AC:26
Certificate issuer: /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial: 639D319E6609A4146CF9C9B144F4C129B8B0F4D3
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137302e3233392e33382e302f32342d3234203d3e20323633313531.roa
Signing time: Mon 10 Mar 2025 15:22:26 +0000
ROA not before: Mon 10 Mar 2025 15:17:26 +0000
ROA not after: Mon 09 Mar 2026 15:22:26 +0000
asID: 263151
IP address blocks: 170.239.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 15:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:9d:31:9e:66:09:a4:14:6c:f9:c9:b1:44:f4:c1:29:b8:b0:f4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Validity
Not Before: Mar 10 15:17:26 2025 GMT
Not After : Mar 9 15:22:26 2026 GMT
Subject: CN=06FF1702D29192D7E3650766A15C3983A602AC26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:47:8c:d3:ec:f6:3c:ea:13:7d:ec:88:45:
63:86:be:4c:cf:f4:e2:6a:6f:23:be:b2:de:e3:4b:
b4:8b:6f:fe:98:4f:e1:7a:39:a8:f0:46:4e:5a:58:
c4:32:84:3c:b4:28:53:be:2c:de:6f:da:83:56:f6:
b5:ff:50:68:af:a4:6b:c9:9e:58:48:ea:4a:96:72:
c6:c7:cc:e6:f7:e1:b4:25:f1:0a:1c:56:02:18:a8:
65:8c:43:68:1a:de:87:3b:c0:4c:c4:71:5d:ad:19:
01:65:eb:51:c1:d4:f0:18:42:3b:53:3a:55:e8:53:
f3:10:58:de:af:3c:ce:50:76:51:04:e3:d7:cb:4d:
97:15:47:52:91:40:22:01:a2:32:1a:7f:91:64:9f:
bf:7e:da:03:83:b9:8e:36:86:c6:19:d3:c3:1e:9f:
31:d3:e7:79:92:9f:26:1b:fa:8b:6b:87:e2:28:e9:
4a:bb:f7:a2:8f:90:70:42:7d:3a:a1:f6:94:1a:0c:
f2:06:ac:22:5e:14:bc:8f:c3:77:65:9b:9a:f9:cb:
2e:66:6e:c5:79:58:aa:3d:d5:ce:c8:d4:44:4e:5f:
7d:b6:df:6b:7d:db:46:90:51:9e:e4:c1:89:e2:7d:
74:69:fc:7d:b0:08:a9:c2:6e:54:f4:c5:a3:f7:47:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FF:17:02:D2:91:92:D7:E3:65:07:66:A1:5C:39:83:A6:02:AC:26
X509v3 Authority Key Identifier:
keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137302e3233392e33382e302f32342d3234203d3e20323633313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.38.0/24
Signature Algorithm: sha256WithRSAEncryption
68:49:98:57:56:88:ce:02:31:25:cb:1d:8d:5b:03:78:e9:91:
a5:96:3c:a9:85:f9:61:27:f2:40:6c:b2:96:12:46:dd:3b:a0:
7a:e3:c9:9e:e6:cb:23:30:22:77:27:db:f4:bd:fd:fb:a7:01:
bf:b4:0c:d5:ed:87:fb:e5:55:72:ab:f9:ef:b6:3d:6a:cd:3b:
ae:c4:4c:a2:38:24:32:40:95:1d:02:e8:2b:7f:e3:fe:bd:56:
25:4e:e3:47:92:90:13:1f:a6:9a:46:80:c5:e1:63:20:08:2f:
05:00:99:23:00:1f:64:6d:dc:cf:da:31:09:23:d2:06:c4:4f:
dd:91:ac:31:2a:6a:f9:81:23:b3:31:a8:44:0c:e0:4b:89:b8:
37:77:7c:81:28:31:a6:7c:df:ca:5e:0a:fe:6d:76:11:dc:88:
85:37:99:8b:fa:a6:46:30:e3:ee:71:a8:8c:5e:7e:a8:80:e4:
af:6b:7a:f7:34:99:47:02:61:4a:fc:60:76:15:1c:45:34:45:
1e:31:88:05:b9:2b:27:bc:4e:0a:4f:1b:98:e0:08:34:3c:1d:
3c:ef:09:04:ac:c2:eb:b1:ed:d9:4b:3a:ac:8d:4d:0a:84:2e:
a6:13:17:f7:ee:c3:91:69:f5:4b:da:db:33:b9:6e:20:8c:cb:
c3:d8:10:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:37:17 2025 by rpki-client