Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e3132322e302e302f32322d3234203d3e20323632373733.roa
File: 3133382e3132322e302e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier: 4+0n098zZvay+Y5+U8nyxjcFzZZdXcbO45kRD+0kX28=
Subject key identifier: 7C:8D:0D:D7:C9:AB:92:0E:36:D0:5A:B3:09:50:1C:D5:F6:A9:8D:AF
Certificate issuer: /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial: 4E6D2B658C016AE67FE874D383A95A7A3A82AA23
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e3132322e302e302f32322d3234203d3e20323632373733.roa
Signing time: Wed 14 May 2025 17:00:24 +0000
ROA not before: Wed 14 May 2025 16:55:24 +0000
ROA not after: Wed 13 May 2026 17:00:24 +0000
asID: 262773
IP address blocks: 138.122.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 23:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6d:2b:65:8c:01:6a:e6:7f:e8:74:d3:83:a9:5a:7a:3a:82:aa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Validity
Not Before: May 14 16:55:24 2025 GMT
Not After : May 13 17:00:24 2026 GMT
Subject: CN=7C8D0DD7C9AB920E36D05AB309501CD5F6A98DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:46:a6:bf:33:a1:2c:bc:73:99:1d:b1:c2:
53:37:54:6d:c0:cb:2a:0a:a2:33:a5:a1:98:89:ca:
93:11:1d:ed:bb:f1:cb:07:9e:4f:88:8b:be:79:b3:
98:31:38:5a:7f:54:8b:40:a2:ba:f2:0d:2d:c8:64:
c3:48:89:0d:8c:39:53:b2:f7:97:07:e0:0b:f7:f1:
69:b3:08:3d:6b:99:93:e1:20:11:c7:44:84:2d:27:
1d:2f:7d:a4:78:b4:ea:1e:b7:f5:13:83:c7:10:b8:
a0:28:72:9e:88:4c:a9:50:1a:3c:ed:ad:22:a2:96:
ad:e9:98:ce:4e:77:16:ef:a6:b6:39:d8:fc:b8:0f:
bb:7b:67:a7:c5:0f:b1:72:5d:94:5a:e8:e6:5c:d4:
39:e2:fe:c3:83:4d:6f:73:10:c1:f6:41:70:e0:a2:
13:e0:04:a7:31:09:ff:63:b1:fe:8d:8e:58:9b:f1:
34:53:e3:0a:dd:04:0c:ee:4b:70:48:2a:98:ad:64:
86:e2:63:1d:d0:dc:91:0c:b0:9f:67:b7:37:be:f3:
eb:99:46:9c:fb:ff:c8:9b:f6:98:63:88:63:15:c3:
1d:27:20:fb:dc:a7:1d:fa:89:7c:46:a0:ec:1a:cb:
12:86:8d:e5:f3:60:e7:93:a9:fd:8c:ef:a6:df:a1:
7d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8D:0D:D7:C9:AB:92:0E:36:D0:5A:B3:09:50:1C:D5:F6:A9:8D:AF
X509v3 Authority Key Identifier:
keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e3132322e302e302f32322d3234203d3e20323632373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.0.0/22
Signature Algorithm: sha256WithRSAEncryption
48:9f:c8:6e:84:fe:91:be:16:a0:c1:0e:1c:ba:68:64:f1:af:
11:02:73:bc:0b:46:53:90:95:98:b4:29:bb:94:41:5e:d9:73:
0e:eb:ee:92:02:26:3d:db:ce:8c:ef:84:b2:e3:00:64:dc:4e:
94:47:e1:c5:e6:c7:36:62:ce:e0:b3:3f:45:92:f7:18:73:4e:
c4:be:8a:7e:a6:3c:14:e5:0e:b1:b5:6f:6d:5c:de:8a:48:a2:
6a:7c:7f:3f:c1:13:69:90:46:32:09:40:36:59:57:4d:ad:df:
3e:57:28:cb:72:d8:73:e1:3b:9c:b3:55:a7:1e:1a:36:61:54:
85:65:62:c3:3a:8f:b8:17:c5:02:4c:09:57:54:30:9b:a1:e5:
71:72:63:c8:de:d1:f7:bb:bd:cb:98:7f:16:09:81:5a:d8:79:
b2:9b:f5:47:9f:9f:f7:3f:48:08:1f:b9:13:db:c8:85:06:ca:
ab:ea:d4:55:fa:4b:b6:fe:b3:28:17:c4:b1:90:79:96:f2:1f:
83:b0:8e:44:3a:a7:ec:f3:f0:57:37:72:6c:47:56:68:99:c2:
25:9b:7d:0f:9c:f6:ee:c9:80:a4:00:df:40:b2:39:22:46:ac:
fa:88:d8:ad:eb:9c:cb:09:30:56:0c:04:95:d3:23:6f:b1:1e:
3a:44:37:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:53:08 2025 by rpki-client