Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137372e302f32342d3234203d3e20323633313531.roa
File: 3139312e3234322e3137372e302f32342d3234203d3e20323633313531.roa (raw, json)
Hash identifier: Utq1VUYH1EnoaODh/u1wNTnBjxa2Rr6ZTpfz5TkpDQ8=
Subject key identifier: BE:E1:40:FC:A0:20:A4:F3:2D:6C:78:81:4E:9E:A8:15:EB:81:CE:7F
Certificate issuer: /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial: 7533EB51FF15025686FC8B686355075D38B3616F
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137372e302f32342d3234203d3e20323633313531.roa
Signing time: Mon 10 Mar 2025 15:22:12 +0000
ROA not before: Mon 10 Mar 2025 15:17:12 +0000
ROA not after: Mon 09 Mar 2026 15:22:12 +0000
asID: 263151
IP address blocks: 191.242.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 15:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:33:eb:51:ff:15:02:56:86:fc:8b:68:63:55:07:5d:38:b3:61:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Validity
Not Before: Mar 10 15:17:12 2025 GMT
Not After : Mar 9 15:22:12 2026 GMT
Subject: CN=BEE140FCA020A4F32D6C78814E9EA815EB81CE7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2c:3f:a6:52:ca:d6:c0:b5:d3:c9:b9:c0:da:
d6:3b:77:e5:22:cf:d1:41:f9:99:3c:35:29:e2:bb:
38:a3:50:eb:9a:97:4a:e8:ba:88:c9:9d:b1:be:64:
a5:c9:c9:4c:86:be:bd:f3:81:6c:b4:ef:d7:5f:c8:
8e:62:86:a4:0c:0d:42:ca:ec:e4:b5:e6:f8:62:4d:
0d:28:42:90:a9:f3:e8:a7:a7:75:96:f7:ca:52:43:
45:9d:fd:4d:40:7e:00:7d:60:0d:4e:a1:19:11:20:
6d:ba:fa:46:6e:26:e4:97:4e:8b:9f:02:c0:92:0f:
34:78:a7:98:27:2e:47:94:87:5b:72:b3:5b:01:37:
e9:97:61:23:1c:4b:46:1b:8d:cb:f6:f6:bd:42:75:
57:93:41:95:69:ff:a3:38:b7:a3:57:7c:aa:b2:aa:
6e:df:b6:eb:da:1c:b2:84:5a:1a:b4:fd:bd:bf:06:
c8:55:fb:73:a3:7b:13:59:86:1d:d4:4b:9b:9d:7d:
b8:b9:82:cc:80:10:17:15:7f:10:09:cb:73:19:bb:
a3:d3:d8:07:d7:16:af:4d:7b:2d:82:3a:81:3f:ba:
84:e3:89:18:69:82:14:5d:b0:20:1e:19:4f:80:f5:
85:f3:13:84:d2:b5:d3:69:6d:65:fb:58:60:9b:32:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E1:40:FC:A0:20:A4:F3:2D:6C:78:81:4E:9E:A8:15:EB:81:CE:7F
X509v3 Authority Key Identifier:
keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137372e302f32342d3234203d3e20323633313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.177.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:09:25:d6:34:63:4f:97:fd:c8:9f:36:05:14:d4:ce:d3:da:
d9:04:d5:07:93:8d:10:3f:68:a1:71:c4:e9:3b:db:d4:5e:8e:
86:37:7f:48:90:b6:86:a3:6e:3e:f6:92:90:ce:41:3e:a1:54:
6c:35:51:c3:73:5d:10:cd:53:fd:6a:1c:3e:77:40:64:de:e9:
22:8a:d8:d7:5e:9b:4f:32:2d:2b:08:15:35:08:96:5c:82:59:
21:18:ad:90:6b:9f:16:e3:5e:f6:2e:24:13:d1:4e:f9:da:b6:
40:3d:69:38:85:37:a3:42:4d:6a:32:fc:bc:9c:f3:0b:e4:51:
27:56:b3:b9:85:07:7e:f8:6f:7b:c7:51:b4:9a:38:2f:cb:f5:
e1:f8:0e:e8:5d:80:97:e3:f9:13:99:40:b8:34:d2:28:dd:27:
67:8b:95:aa:19:d4:08:ee:92:fd:26:c2:70:73:47:68:f8:d0:
43:0a:e9:31:56:01:55:b3:37:1c:7f:cf:40:8b:21:b6:5a:31:
a0:e3:49:a6:79:91:65:da:aa:c9:80:62:43:b0:f6:25:e0:96:
5a:de:0d:e9:53:07:d7:1a:24:41:0a:a6:d1:b0:96:07:0b:6e:
ab:7c:cc:55:0b:02:e0:37:da:ef:21:26:5a:8a:12:19:d6:09:
4e:b6:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:40:56 2025 by rpki-client