Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32322e302f32342d3234203d3e20323635343139.roa
File: 3136382e3139352e32322e302f32342d3234203d3e20323635343139.roa (raw, json)
Hash identifier: fENpXwHXGhNEkTrUukz9/724FnqfqNotu3ABALGgEfQ=
Subject key identifier: F0:99:58:6B:93:40:D9:0E:03:93:21:98:CB:F6:46:90:7D:23:BC:C5
Certificate issuer: /CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
Certificate serial: 35DF159E84B357C07D06B4A19D356B0DD2946DBF
Authority key identifier: C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32322e302f32342d3234203d3e20323635343139.roa
Signing time: Tue 11 Mar 2025 19:22:03 +0000
ROA not before: Tue 11 Mar 2025 19:17:03 +0000
ROA not after: Tue 10 Mar 2026 19:22:03 +0000
asID: 265419
IP address blocks: 168.195.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 19:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:df:15:9e:84:b3:57:c0:7d:06:b4:a1:9d:35:6b:0d:d2:94:6d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
Validity
Not Before: Mar 11 19:17:03 2025 GMT
Not After : Mar 10 19:22:03 2026 GMT
Subject: CN=F099586B9340D90E03932198CBF646907D23BCC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:10:e2:b4:63:d9:b1:2b:81:d0:3b:91:b8:9c:
b7:ac:c0:5d:fb:dc:2f:67:57:65:66:17:4f:6a:11:
ad:37:80:59:21:cd:22:49:7a:cb:19:70:90:52:fc:
d3:5d:22:38:ad:4e:b8:7f:6c:e5:8c:40:61:24:6d:
17:c0:34:a7:79:c6:a0:d8:fb:9a:88:05:4d:e3:c4:
29:c5:f1:16:25:f9:c7:06:d4:45:1c:cf:fd:b9:c7:
25:9b:0e:a8:36:29:27:ed:36:c7:80:75:fa:e6:30:
20:84:eb:04:4e:1a:eb:84:8c:59:0c:ac:3a:f9:cb:
b2:18:e3:61:de:82:ed:dc:73:d8:1b:48:23:ca:21:
3d:2d:c2:81:c7:35:18:9c:90:92:f1:49:a0:c4:d8:
10:89:4f:78:72:b2:52:c5:fe:fc:38:83:23:b8:72:
94:a0:d7:e0:b8:12:b6:cb:e8:a9:1c:cb:24:94:21:
9f:75:ad:ce:a6:02:ad:dd:cc:57:92:ce:d2:70:13:
b6:ad:60:e6:ab:f0:5a:2a:3c:7c:ee:b6:65:92:e9:
19:69:6e:0f:7d:6a:32:a3:4c:ca:59:12:d1:40:d5:
12:d1:95:56:15:0d:2b:80:72:52:b2:39:ca:3c:49:
80:e5:ce:c8:5d:36:d8:f1:85:bd:1e:17:6a:7e:6f:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:99:58:6B:93:40:D9:0E:03:93:21:98:CB:F6:46:90:7D:23:BC:C5
X509v3 Authority Key Identifier:
keyid:C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32322e302f32342d3234203d3e20323635343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.22.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:2f:95:8e:a0:2e:f5:02:3b:e2:8b:67:6b:f6:bd:fa:2f:df:
c1:9d:88:99:54:e7:82:3f:e2:97:fa:46:33:27:24:27:29:5c:
39:28:db:6d:8a:87:5e:b1:48:88:91:78:eb:ee:03:74:a8:26:
4d:ae:71:ca:5c:68:37:da:76:58:bf:8c:08:0d:38:d2:12:ff:
57:8e:9c:91:b5:27:c6:65:ba:12:f3:7d:be:b2:52:8d:87:4d:
0c:43:dc:8a:84:12:5c:05:47:c8:37:ef:fc:dd:91:22:bf:4e:
38:ea:a6:00:0f:f4:54:19:0d:3e:45:81:3f:df:82:a2:e5:0f:
56:59:66:0d:85:3f:68:c1:e5:09:f5:e9:ea:42:0e:7e:0b:8b:
a2:f5:5b:12:4c:a9:c2:d6:4b:e0:4e:ef:85:a0:20:46:17:f5:
b6:11:3e:d0:d3:4e:6b:e6:a4:35:87:4b:70:1d:5a:2f:f9:13:
c2:57:75:3d:88:2e:6e:24:0b:ca:43:01:06:6f:22:f7:f2:fe:
1b:bd:2e:3c:0a:c0:a1:d7:c7:16:d0:c3:dd:41:17:50:a5:5c:
63:ad:30:11:7f:f0:ad:cc:ad:b4:2b:5a:27:d5:e7:6a:07:22:
e3:92:f4:51:d0:8a:14:60:b5:19:59:55:4d:11:a5:aa:6b:c0:
0c:3d:77:58
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNd8VnoSzV8B9BrShnTVrDdKUbb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNEM0EzMzZCRjRDODE0MjBFREMxRDRDQjQ5NEQ4NEQz
NzE0RTEzQTAeFw0yNTAzMTExOTE3MDNaFw0yNjAzMTAxOTIyMDNaMDMxMTAvBgNV
BAMTKEYwOTk1ODZCOTM0MEQ5MEUwMzkzMjE5OENCRjY0NjkwN0QyM0JDQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfEOK0Y9mxK4HQO5G4nLeswF37
3C9nV2VmF09qEa03gFkhzSJJessZcJBS/NNdIjitTrh/bOWMQGEkbRfANKd5xqDY
+5qIBU3jxCnF8RYl+ccG1EUcz/25xyWbDqg2KSftNseAdfrmMCCE6wROGuuEjFkM
rDr5y7IY42Hegu3cc9gbSCPKIT0twoHHNRickJLxSaDE2BCJT3hyslLF/vw4gyO4
cpSg1+C4ErbL6KkcyySUIZ91rc6mAq3dzFeSztJwE7atYOar8FoqPHzutmWS6Rlp
bg99ajKjTMpZEtFA1RLRlVYVDSuAclKyOco8SYDlzshdNtjxhb0eF2p+b5YtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8JlYa5NA2Q4DkyGYy/ZGkH0jvMUwHwYDVR0j
BBgwFoAUw9OjNr9MgUIO3B1MtJTYTTcU4TowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJZZG5wNnNxOWdUeWMxTXBKVmFTejZhNEI5TWhIU1VlSnJ4eFNBd3Ry
OGMvMC9DM0QzQTMzNkJGNEM4MTQyMEVEQzFENENCNDk0RDg0RDM3MTRFMTNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzRDNBMzM2QkY0QzgxNDIw
RURDMUQ0Q0I0OTREODREMzcxNEUxM0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyWWRucDZzcTlnVHljMU1wSlZhU3o2YTRCOU1oSFNVZUpyeHhTQXd0cjhjLzAv
MzEzNjM4MmUzMTM5MzUyZTMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzNDMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACowxYwDQYJKoZIhvcNAQELBQADggEBANcvlY6g
LvUCO+KLZ2v2vfov38GdiJlU54I/4pf6RjMnJCcpXDko222Kh16xSIiReOvuA3So
Jk2uccpcaDfadli/jAgNONIS/1eOnJG1J8ZluhLzfb6yUo2HTQxD3IqEElwFR8g3
7/zdkSK/TjjqpgAP9FQZDT5FgT/fgqLlD1ZZZg2FP2jB5Qn16epCDn4Li6L1WxJM
qcLWS+BO74WgIEYX9bYRPtDTTmvmpDWHS3AdWi/5E8JXdT2ILm4kC8pDAQZvIvfy
/hu9LjwKwKHXxxbQw91BF1ClXGOtMBF/8K3MrbQrWifV52oHIuOS9FHQihRgtRlZ
VU0RpaprwAw9d1g=
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:56 2025 by rpki-client