Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137382e302f32342d3234203d3e20323633313531.roa
File: 3139312e3234322e3137382e302f32342d3234203d3e20323633313531.roa (raw, json)
Hash identifier: AqtECfMxXU6A5U5XIAVTaX5WfVzL5bmfqjGSB51/9To=
Subject key identifier: 4D:02:9F:2D:4E:00:BC:E7:2F:D6:68:CB:A9:B1:47:72:9B:9C:DE:62
Certificate issuer: /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial: 11565829E80B01D7C4FBBB36FC8E132346E5351A
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137382e302f32342d3234203d3e20323633313531.roa
Signing time: Mon 10 Mar 2025 15:22:08 +0000
ROA not before: Mon 10 Mar 2025 15:17:08 +0000
ROA not after: Mon 09 Mar 2026 15:22:08 +0000
asID: 263151
IP address blocks: 191.242.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 15:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:56:58:29:e8:0b:01:d7:c4:fb:bb:36:fc:8e:13:23:46:e5:35:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Validity
Not Before: Mar 10 15:17:08 2025 GMT
Not After : Mar 9 15:22:08 2026 GMT
Subject: CN=4D029F2D4E00BCE72FD668CBA9B147729B9CDE62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a5:d6:dc:9a:f2:81:b3:93:38:7d:3c:54:70:
f1:12:f9:bc:f1:cc:83:95:4e:24:5d:c1:6d:bd:e1:
5e:7f:32:78:eb:7c:30:35:ac:1c:b7:6d:61:67:df:
ba:b4:ac:33:15:1c:5d:19:72:86:20:52:37:6c:0f:
76:df:71:c5:07:cb:b2:4c:89:82:0b:c1:71:c1:6a:
d4:8c:87:05:81:82:a5:c3:9d:dd:1a:68:37:97:1a:
2f:56:4f:7e:3d:0c:f5:31:81:f2:4e:c6:2d:a9:4f:
d5:28:47:78:32:cf:cf:26:96:97:9e:08:db:2a:27:
05:ad:22:73:3a:8b:be:0b:f2:f8:e6:f3:4d:11:b4:
eb:b0:33:81:f7:22:80:ee:9d:bc:c4:43:07:c9:56:
1f:8f:8d:2c:7c:78:5a:07:6c:26:fd:92:13:fd:dc:
49:89:ef:f5:ae:ff:cb:eb:9a:f2:06:48:9d:b2:e6:
36:32:f4:b4:ca:ff:eb:a3:c6:25:e2:e3:41:96:64:
15:71:3d:d7:8a:1b:d6:00:dc:c5:67:3a:44:87:df:
a0:f6:a9:df:f2:67:9f:26:cc:5e:cc:f2:05:8c:5f:
3e:ed:c4:db:e0:26:fb:ef:56:4c:d3:dd:f5:e0:37:
37:ed:b7:60:ff:e5:df:70:1c:11:81:aa:1c:09:d8:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:02:9F:2D:4E:00:BC:E7:2F:D6:68:CB:A9:B1:47:72:9B:9C:DE:62
X509v3 Authority Key Identifier:
keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137382e302f32342d3234203d3e20323633313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.178.0/24
Signature Algorithm: sha256WithRSAEncryption
63:08:aa:5d:91:ba:57:c5:c7:f5:49:62:20:18:86:0f:60:7a:
ad:94:8d:93:f5:54:b1:a8:ae:e7:80:e3:57:dd:2c:3e:4b:84:
57:47:e8:01:06:55:7c:fe:03:76:3a:00:82:d8:26:55:b6:ea:
d3:98:6d:13:fb:2a:77:28:06:d1:85:76:35:99:30:06:55:3e:
bc:68:3b:e6:3e:80:8f:56:08:7d:e7:df:95:79:30:b1:46:da:
f4:a6:7f:37:2c:aa:e2:3a:97:85:61:2a:44:db:ff:bc:4a:fd:
db:99:02:01:d3:4e:30:3e:10:52:ae:26:d3:eb:0f:2b:5a:80:
71:5e:bb:30:c3:80:05:09:a8:e9:9c:13:87:f8:b5:56:06:c6:
ea:ad:c4:69:40:ef:0a:c0:26:12:5c:c4:51:3e:61:0f:2c:88:
e9:a5:65:13:0f:64:e1:7a:3a:cf:3c:a4:fc:6a:69:a5:87:15:
20:0f:e1:69:89:f1:e6:ae:17:63:ca:82:b3:e2:b1:aa:26:2e:
a9:1f:43:4e:65:fd:ca:e6:27:85:a6:ef:75:78:b3:ae:4d:33:
23:26:ba:f3:c9:ed:9e:3b:aa:de:db:b7:91:79:63:ed:f5:e3:
ab:a8:77:af:37:1a:af:7e:eb:33:ee:ea:b2:c6:41:87:a6:3b:
47:86:e3:03
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEVZYKegLAdfE+7s2/I4TI0blNRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhBRDg3NjExRkREQzlDOTlCMjE1N0ZCQzUwMzQzMERF
ODc0NURCRDAeFw0yNTAzMTAxNTE3MDhaFw0yNjAzMDkxNTIyMDhaMDMxMTAvBgNV
BAMTKDREMDI5RjJENEUwMEJDRTcyRkQ2NjhDQkE5QjE0NzcyOUI5Q0RFNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDopdbcmvKBs5M4fTxUcPES+bzx
zIOVTiRdwW294V5/MnjrfDA1rBy3bWFn37q0rDMVHF0ZcoYgUjdsD3bfccUHy7JM
iYILwXHBatSMhwWBgqXDnd0aaDeXGi9WT349DPUxgfJOxi2pT9UoR3gyz88mlpee
CNsqJwWtInM6i74L8vjm800RtOuwM4H3IoDunbzEQwfJVh+PjSx8eFoHbCb9khP9
3EmJ7/Wu/8vrmvIGSJ2y5jYy9LTK/+ujxiXi40GWZBVxPdeKG9YA3MVnOkSH36D2
qd/yZ58mzF7M8gWMXz7txNvgJvvvVkzT3fXgNzftt2D/5d9wHBGBqhwJ2BHbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTQKfLU4AvOcv1mjLqbFHcpuc3mIwHwYDVR0j
BBgwFoAUiK2HYR/dycmbIVf7xQNDDeh0Xb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGlMekw0S2hkVnBERm9DSmV5clVuSnBLaDFmcTRBWTVFV2lzY2c4emp6
YXMvMC84OEFEODc2MTFGRERDOUM5OUIyMTU3RkJDNTAzNDMwREU4NzQ1REJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4QUQ4NzYxMUZEREM5Qzk5
QjIxNTdGQkM1MDM0MzBERTg3NDVEQkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hpTHpMNEtoZFZwREZvQ0pleXJVbkpwS2gxZnE0QVk1RVdpc2NnOHpqemFzLzAv
MzEzOTMxMmUzMjM0MzIyZTMxMzczODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMxMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/ysjANBgkqhkiG9w0BAQsFAAOCAQEAYwiq
XZG6V8XH9UliIBiGD2B6rZSNk/VUsaiu54DjV90sPkuEV0foAQZVfP4DdjoAgtgm
Vbbq05htE/sqdygG0YV2NZkwBlU+vGg75j6Aj1YIfefflXkwsUba9KZ/Nyyq4jqX
hWEqRNv/vEr925kCAdNOMD4QUq4m0+sPK1qAcV67MMOABQmo6ZwTh/i1VgbG6q3E
aUDvCsAmElzEUT5hDyyI6aVlEw9k4Xo6zzyk/GpppYcVIA/haYnx5q4XY8qCs+Kx
qiYuqR9DTmX9yuYnhabvdXizrk0zIya688ntnjuq3tu3kXlj7fXjq6h3rzcar37r
M+7qssZBh6Y7R4bjAw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:34:29 2025 by rpki-client