Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133382e3132312e3235342e302f32332d3233203d3e20323632373635.roa
File: 3133382e3132312e3235342e302f32332d3233203d3e20323632373635.roa (raw, json)
Hash identifier: wBm4b39Oys4F/0uo4u/0ltNOQaRVb7LJtKE2Dm4wMvA=
Subject key identifier: BC:63:D8:34:3B:29:DA:74:07:A4:E4:20:75:B6:E0:A7:A5:AA:B7:00
Certificate issuer: /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial: 49F3108D9B46596F9590A7B8E958D9B4AFE4F6D4
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133382e3132312e3235342e302f32332d3233203d3e20323632373635.roa
Signing time: Thu 04 Apr 2024 20:47:52 +0000
ROA not before: Thu 04 Apr 2024 20:42:52 +0000
ROA not after: Thu 03 Apr 2025 20:47:52 +0000
asID: 262765
IP address blocks: 138.121.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 01 Nov 2024 13:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f3:10:8d:9b:46:59:6f:95:90:a7:b8:e9:58:d9:b4:af:e4:f6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Validity
Not Before: Apr 4 20:42:52 2024 GMT
Not After : Apr 3 20:47:52 2025 GMT
Subject: CN=BC63D8343B29DA7407A4E42075B6E0A7A5AAB700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:e0:41:b5:ea:bc:97:75:c8:a5:de:c3:ce:
6e:4d:1e:d2:74:6b:17:62:9e:a1:c5:38:3f:75:24:
76:1a:22:41:d7:cf:93:5d:5f:8c:e2:e1:da:f5:66:
17:67:7f:fa:e8:8b:29:d3:1b:a1:8f:13:54:ea:a8:
20:52:cf:2c:50:00:84:7c:ca:39:e7:61:af:f6:00:
de:ed:1b:d0:39:ef:78:ce:08:0b:3d:dd:a8:71:ba:
08:45:f1:e2:e8:93:cc:25:6e:47:a4:5d:0a:45:01:
8f:fa:c1:2d:58:16:e1:9b:69:2b:22:f5:84:c7:79:
53:73:a8:09:0b:91:fd:99:15:c5:21:0b:9d:d3:4a:
99:46:95:59:30:15:27:f2:29:14:ba:12:94:a8:c3:
aa:50:5f:01:92:e9:62:5b:6f:b2:77:5e:06:41:5b:
8d:92:09:38:3e:5c:a2:f9:47:f1:0b:8d:6d:c7:fd:
56:1c:cf:1c:87:6e:a0:2a:f1:60:36:4c:5d:0a:b9:
1f:7a:d1:58:f6:f9:ab:aa:e9:05:ea:5f:e1:a7:9f:
a2:92:31:9c:01:df:54:e2:3c:e0:49:0f:17:81:29:
47:9a:f6:e1:0f:7c:4d:f5:12:a0:5b:fe:2b:6f:5d:
a0:63:81:6d:e8:ca:78:bb:66:52:3c:a3:39:1f:e5:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:63:D8:34:3B:29:DA:74:07:A4:E4:20:75:B6:E0:A7:A5:AA:B7:00
X509v3 Authority Key Identifier:
keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133382e3132312e3235342e302f32332d3233203d3e20323632373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.254.0/23
Signature Algorithm: sha256WithRSAEncryption
54:91:a5:31:4d:2c:1d:aa:37:2a:bb:df:f7:ab:13:7c:65:d9:
c3:c2:39:9a:03:cd:fa:ba:de:06:0f:93:ad:89:ff:3a:d2:7c:
74:98:62:b0:b2:f0:c5:a0:ea:13:67:46:66:f8:c6:33:f9:bb:
e8:12:63:ef:d1:a3:76:3d:51:b9:32:40:5a:30:42:a1:3d:37:
ab:1d:eb:bf:59:e0:ff:04:b3:f5:a5:84:ed:00:5b:c3:5b:80:
ac:a7:79:92:05:b2:7e:ec:d9:55:4a:2a:9b:f9:cf:5a:7e:15:
42:6e:68:06:18:46:56:90:83:bf:6f:1b:aa:87:9b:f8:78:39:
00:98:86:c0:d8:43:8a:06:59:14:16:c6:9a:60:22:b4:d0:30:
56:ba:6a:cf:a3:77:52:4f:9c:a4:e2:55:bf:6b:7b:11:0b:3d:
40:82:0c:89:cb:53:df:a2:82:31:b1:80:6a:b0:ca:aa:7e:ca:
92:57:54:88:fc:a9:c4:77:ab:4b:0d:9d:6d:75:56:21:cb:3f:
ee:2f:84:d5:39:04:2f:31:16:a4:24:c5:40:88:af:6a:d5:32:
ad:65:77:3c:3b:10:2a:6d:d6:2e:23:a1:8e:b5:7a:3d:15:57:
6d:03:2b:07:9b:39:cc:ae:23:04:dd:30:87:ba:14:c3:8f:0c:
40:8e:7d:12
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSfMQjZtGWW+VkKe46VjZtK/k9tQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENG
QzhBRjI4RDAeFw0yNDA0MDQyMDQyNTJaFw0yNTA0MDMyMDQ3NTJaMDMxMTAvBgNV
BAMTKEJDNjNEODM0M0IyOURBNzQwN0E0RTQyMDc1QjZFMEE3QTVBQUI3MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP9+BBteq8l3XIpd7Dzm5NHtJ0
axdinqHFOD91JHYaIkHXz5NdX4zi4dr1Zhdnf/roiynTG6GPE1TqqCBSzyxQAIR8
yjnnYa/2AN7tG9A573jOCAs93ahxughF8eLok8wlbkekXQpFAY/6wS1YFuGbaSsi
9YTHeVNzqAkLkf2ZFcUhC53TSplGlVkwFSfyKRS6EpSow6pQXwGS6WJbb7J3XgZB
W42SCTg+XKL5R/ELjW3H/VYczxyHbqAq8WA2TF0KuR960Vj2+auq6QXqX+Gnn6KS
MZwB31TiPOBJDxeBKUea9uEPfE31EqBb/itvXaBjgW3oyni7ZlI8ozkf5SBbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUvGPYNDsp2nQHpOQgdbbgp6WqtwAwHwYDVR0j
BBgwFoAUj4AOHOJ7h/JP1912w0tp3PyK8o0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzEvOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENGQzhBRjI4RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84RjgwMEUxQ0UyN0I4N0YyNEZE
N0RENzZDMzRCNjlEQ0ZDOEFGMjhELmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzEvMzEz
MzM4MmUzMTMyMzEyZTMyMzUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
MjM3MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAYp5/jANBgkqhkiG9w0BAQsFAAOCAQEAVJGlMU0s
Hao3Krvf96sTfGXZw8I5mgPN+rreBg+TrYn/OtJ8dJhisLLwxaDqE2dGZvjGM/m7
6BJj79Gjdj1RuTJAWjBCoT03qx3rv1ng/wSz9aWE7QBbw1uArKd5kgWyfuzZVUoq
m/nPWn4VQm5oBhhGVpCDv28bqoeb+Hg5AJiGwNhDigZZFBbGmmAitNAwVrpqz6N3
Uk+cpOJVv2t7EQs9QIIMictT36KCMbGAarDKqn7KkldUiPypxHerSw2dbXVWIcs/
7i+E1TkELzEWpCTFQIivatUyrWV3PDsQKm3WLiOhjrV6PRVXbQMrB5s5zK4jBN0w
h7oUw48MQI59Eg==
-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:57 2024 by rpki-client on console-ams.rpki-client.org