Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232302e302f32342d3234203d3e20323632393738.roa
File: 3133322e3235352e3232302e302f32342d3234203d3e20323632393738.roa (raw, json)
Hash identifier: ysrZ3O4mtbu1m5tnSyjJcvllCWpiu7AOZL0+fW2WpjY=
Subject key identifier: A6:F0:88:7B:AA:61:18:F5:20:E2:1A:17:FF:7E:1E:CE:72:E2:DB:D0
Certificate issuer: /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial: 5A98AB9F01DC59200AA27E1C1285F0EB3CC94114
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232302e302f32342d3234203d3e20323632393738.roa
Signing time: Thu 01 May 2025 02:24:42 +0000
ROA not before: Thu 01 May 2025 02:19:42 +0000
ROA not after: Thu 30 Apr 2026 02:24:42 +0000
asID: 262978
IP address blocks: 132.255.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 04:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:98:ab:9f:01:dc:59:20:0a:a2:7e:1c:12:85:f0:eb:3c:c9:41:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Validity
Not Before: May 1 02:19:42 2025 GMT
Not After : Apr 30 02:24:42 2026 GMT
Subject: CN=A6F0887BAA6118F520E21A17FF7E1ECE72E2DBD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:0d:44:34:8a:50:bc:d1:d8:1e:d1:02:1c:
30:09:f5:40:ea:6b:0e:2a:2f:d5:76:45:54:e9:7f:
f8:a2:7d:09:2e:fd:d6:d0:9f:d9:ad:1f:22:e3:1a:
f6:57:e4:e9:27:18:50:e2:f4:56:76:2e:7e:f6:88:
07:80:45:9c:4a:07:56:23:4e:21:9f:b6:8e:e6:24:
9b:95:7d:67:8b:64:87:c8:4f:e3:d6:83:ed:c6:91:
36:1b:49:3f:4b:ea:2a:81:95:e5:4e:9f:8c:8e:d7:
f1:c1:40:42:ab:32:a2:ea:63:b0:a3:4c:79:03:ba:
1f:d2:f1:d4:2d:a0:bb:9f:c7:c9:cb:c0:52:ef:99:
18:9d:22:fb:59:ca:4b:a5:68:67:44:b2:68:7c:48:
ac:47:e3:4a:03:de:a7:31:cb:30:20:2c:b4:49:cd:
2b:e7:09:38:2e:a3:63:ec:56:f4:b9:c5:8e:8c:77:
23:6f:8e:1a:53:00:2f:9f:ca:43:ca:a1:bb:01:7e:
8f:6b:54:5f:09:e9:c7:ed:5f:75:27:77:ea:c7:f4:
0b:71:4d:3b:4b:b0:57:7d:49:2a:dd:65:4f:25:e0:
ac:59:5c:ee:18:77:23:31:88:72:c6:34:ef:d4:0a:
b9:c4:4d:d0:e5:26:b7:17:f1:ec:d8:2f:4c:ff:3b:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F0:88:7B:AA:61:18:F5:20:E2:1A:17:FF:7E:1E:CE:72:E2:DB:D0
X509v3 Authority Key Identifier:
keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232302e302f32342d3234203d3e20323632393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.220.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f3:38:c7:50:c7:59:67:99:21:2e:92:6e:d4:62:88:62:6c:
84:94:41:0d:d9:ea:cc:d8:1e:81:13:4f:4a:28:0e:10:c3:48:
e6:b6:4d:61:da:1d:b3:68:96:ee:b2:40:f5:88:88:1c:eb:a5:
d8:b2:6e:52:b6:43:b3:64:26:cb:88:db:7b:82:e2:f5:ba:5b:
04:b7:ef:8f:79:b9:5b:07:0c:db:dd:41:7f:fe:89:11:71:b1:
7f:49:36:44:2e:a3:1f:76:e6:a0:ba:9d:f9:95:80:84:11:6a:
b7:c1:83:78:1d:3d:f1:85:9c:75:6b:1a:96:81:32:d1:9e:75:
37:38:69:1b:ab:fe:a8:7d:db:75:e6:0d:23:30:95:f4:92:a3:
17:6e:44:40:54:0b:7b:d1:5b:56:83:fe:17:5b:44:b8:30:a8:
e9:79:aa:50:f2:88:ec:3f:52:fe:19:9d:c1:69:27:f0:af:f5:
7c:62:56:b6:b5:f1:7a:2a:6e:b0:6f:2d:96:28:cd:f9:88:f3:
6e:f8:12:c9:b7:4b:b4:3e:ec:24:69:09:4d:27:02:d7:c7:c8:
56:7c:a5:71:19:0f:6c:76:f3:76:21:fe:03:bc:1d:e3:0e:65:
28:57:cc:4d:58:98:b9:d2:79:6f:ec:f0:ae:3a:bc:6a:db:2e:
c3:a8:b4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:54:59 2025 by rpki-client