Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232312e302f32342d3234203d3e20323632393738.roa
File: 3133322e3235352e3232312e302f32342d3234203d3e20323632393738.roa (raw, json)
Hash identifier: fPU42iU2WgqXZ+3ZdhoPp/EWKRhAGZXpdYWf8wrKMDM=
Subject key identifier: B3:07:DB:BB:88:74:33:75:D4:68:27:ED:94:5C:8C:3C:B0:00:63:2B
Certificate issuer: /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial: 15954FF3D1FBE13C4B0EA147FF89DF6DE1A497CB
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232312e302f32342d3234203d3e20323632393738.roa
Signing time: Thu 01 May 2025 02:24:44 +0000
ROA not before: Thu 01 May 2025 02:19:44 +0000
ROA not after: Thu 30 Apr 2026 02:24:44 +0000
asID: 262978
IP address blocks: 132.255.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 04:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:95:4f:f3:d1:fb:e1:3c:4b:0e:a1:47:ff:89:df:6d:e1:a4:97:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Validity
Not Before: May 1 02:19:44 2025 GMT
Not After : Apr 30 02:24:44 2026 GMT
Subject: CN=B307DBBB88743375D46827ED945C8C3CB000632B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:0d:50:62:01:a2:49:42:38:03:55:cf:7a:
76:c7:91:b3:84:c7:e1:bb:35:e0:e5:11:31:28:d5:
b7:0c:91:a3:be:6d:93:1f:57:5a:eb:e8:a5:ea:ca:
d3:07:3e:cf:98:0b:e9:95:d3:a0:55:cc:d0:e3:b6:
c6:aa:07:43:82:86:d0:58:a8:9e:3d:37:41:c4:70:
c0:1f:59:9c:63:2c:5a:92:3d:a2:9c:e6:99:e2:d3:
c6:ce:12:a2:b9:71:fb:29:2a:bb:53:09:6d:61:86:
f7:13:0b:9e:d7:83:38:2a:17:91:51:30:5a:27:8f:
f1:f3:d3:79:0c:35:20:05:d4:c1:6b:97:3c:a5:31:
36:d4:ca:50:2c:87:4a:2e:b5:1c:e0:d1:29:af:f6:
54:b3:ff:5d:78:9c:0e:21:9d:4e:21:1d:db:2a:b2:
be:7d:5e:8b:f8:be:f9:6c:03:af:57:f5:25:1c:f3:
eb:53:5d:54:20:d8:37:45:33:98:67:9e:3d:33:2c:
5e:72:6d:83:83:65:66:8a:9d:6c:19:c7:dc:a7:50:
a3:b3:08:87:f4:01:4b:eb:04:eb:8f:4b:c4:15:30:
12:a4:1c:d9:24:73:4a:68:c8:ea:4d:48:9c:33:f2:
16:1e:5e:5f:00:c8:f1:bf:a0:a1:b2:9e:0c:d4:51:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:07:DB:BB:88:74:33:75:D4:68:27:ED:94:5C:8C:3C:B0:00:63:2B
X509v3 Authority Key Identifier:
keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232312e302f32342d3234203d3e20323632393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e6:50:85:80:f2:71:87:b3:50:f1:54:91:ad:07:bd:f0:8e:
c2:f5:0f:88:96:7b:65:85:5a:e3:a6:65:69:3f:db:5d:1b:dc:
82:fb:1e:4a:74:54:2d:f4:16:41:bb:f8:04:95:b3:5c:cd:1c:
73:d0:3b:9d:bd:f6:57:62:75:8e:fc:d9:e5:e4:a8:3a:1f:8f:
bb:fc:07:b7:74:08:07:7a:97:79:6d:d3:33:de:ee:6d:f6:c4:
06:99:10:da:3e:54:7c:42:59:48:fb:5d:c0:45:14:48:3e:10:
f1:a7:1f:96:d9:bc:3a:b4:ad:92:14:40:84:85:14:15:d7:2b:
51:3a:e4:a0:66:23:0b:94:56:a0:34:a4:db:3c:fe:11:dd:d6:
47:d4:82:7a:de:92:9f:3a:3a:d1:f6:c4:a0:e1:c7:2c:93:ce:
e0:4f:af:f1:fa:91:9e:45:cb:1e:5e:2e:96:ac:4a:b9:87:87:
ba:9d:42:b3:66:ff:8a:01:f4:2b:72:34:23:36:4c:b5:59:6d:
f1:e1:98:44:31:a8:45:0a:7b:2f:0b:1a:79:0c:5c:84:4a:a4:
92:90:94:80:a7:d5:2e:ed:6d:14:ff:72:34:e6:0e:fc:e1:5c:
be:0d:c1:b0:4f:d2:c3:9e:39:89:2a:68:5d:12:97:9e:54:8d:
85:1a:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:33:40 2025 by rpki-client