Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232302e302f32322d3232203d3e20323632393738.roa
File: 3133322e3235352e3232302e302f32322d3232203d3e20323632393738.roa (raw, json)
Hash identifier: 5f6PhnbpIdbqS2U2hLe5/76d1NDmmBuU1YTCr8QSP3s=
Subject key identifier: 8A:8A:48:85:2B:E8:8C:30:AC:3D:93:4E:FC:7D:5E:50:7B:79:63:CB
Certificate issuer: /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial: 647BD1F42D154C618DE0A062324E8C13BFF383B5
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232302e302f32322d3232203d3e20323632393738.roa
Signing time: Thu 01 May 2025 02:24:37 +0000
ROA not before: Thu 01 May 2025 02:19:37 +0000
ROA not after: Thu 30 Apr 2026 02:24:37 +0000
asID: 262978
IP address blocks: 132.255.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 04:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:7b:d1:f4:2d:15:4c:61:8d:e0:a0:62:32:4e:8c:13:bf:f3:83:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Validity
Not Before: May 1 02:19:37 2025 GMT
Not After : Apr 30 02:24:37 2026 GMT
Subject: CN=8A8A48852BE88C30AC3D934EFC7D5E507B7963CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:20:a6:de:14:73:7b:93:6d:91:7f:be:82:
74:3a:fd:df:71:59:be:f2:32:11:04:6d:b4:10:f7:
b1:a3:dd:ae:8e:f1:4c:8a:0e:f3:23:af:1a:7d:0b:
4c:34:1b:e6:20:2b:90:36:54:90:46:86:dc:89:0e:
32:f2:ee:a2:44:35:b3:c1:3a:01:e9:3a:b1:f3:b7:
85:da:13:32:61:52:aa:04:4c:dc:33:bf:16:f7:45:
ca:b2:95:93:21:62:33:45:ab:e0:80:4f:ab:de:cf:
5f:4e:cb:44:b8:16:00:be:d0:89:97:a2:5e:38:c9:
bb:ec:75:b4:5c:e7:25:8c:45:71:ac:08:fa:9c:dc:
fc:7d:24:f5:ba:b7:1d:81:f0:7b:90:e1:fe:52:55:
b9:03:a4:49:4d:44:e3:cd:1f:c0:6d:32:45:04:8c:
20:b1:95:4d:e1:03:7e:73:65:c3:0b:57:47:e6:59:
60:ca:e4:9e:11:b1:2a:93:d1:3c:97:67:34:32:fc:
fd:92:9c:cc:a3:0c:62:d9:e0:df:76:73:cf:85:04:
4f:3b:19:a9:62:da:ec:27:d0:7a:16:94:80:1a:b7:
8d:54:f5:7d:6f:ff:72:5f:4b:02:65:33:fb:ea:43:
67:4e:7b:89:fa:ff:c7:71:ec:08:3b:57:79:79:9f:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8A:48:85:2B:E8:8C:30:AC:3D:93:4E:FC:7D:5E:50:7B:79:63:CB
X509v3 Authority Key Identifier:
keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232302e302f32322d3232203d3e20323632393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.220.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:9f:a9:48:c8:7e:9f:28:b8:4c:12:66:b6:2c:42:23:b2:00:
65:24:46:6f:9c:db:2f:dd:a7:57:a9:26:5a:cd:2c:90:2c:ec:
20:e0:51:de:3b:c6:96:01:c4:4e:77:7e:5d:70:2f:21:b1:b8:
d7:29:22:1f:46:52:11:e2:8e:eb:d4:bf:35:2a:e6:63:78:21:
7f:e9:fd:a9:d0:58:34:63:46:9e:8c:de:d9:a0:a7:1a:07:67:
cb:91:da:b4:69:c7:fa:40:3e:96:21:60:4b:c2:6a:7b:74:be:
b9:23:17:c2:90:68:90:de:a6:13:d3:a5:d9:64:72:23:fe:6f:
06:7a:4b:4e:4d:cd:7b:e2:58:23:54:99:7b:0f:f3:19:ea:e4:
03:ca:25:df:7f:30:f8:14:fc:62:bb:6a:3e:f9:98:f4:f3:12:
82:9e:64:ce:b2:ac:9c:a9:6d:53:e4:c5:7d:49:82:86:dd:5b:
e6:22:49:9c:6d:49:c3:aa:57:2a:3c:da:87:ab:2b:1d:88:42:
d5:31:86:05:87:41:6a:d3:73:cf:d0:a8:e5:d5:b3:d8:c2:9e:
32:f1:20:be:db:e7:58:07:6f:91:d2:5d:59:c8:fe:ef:9a:c4:
63:d5:f2:f0:46:d8:30:35:e1:05:ed:73:ba:e0:91:ad:10:c5:
11:28:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:41:23 2025 by rpki-client