Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232322e302f32342d3234203d3e20323632393738.roa
File: 3133322e3235352e3232322e302f32342d3234203d3e20323632393738.roa (raw, json)
Hash identifier: AaLvWR9qRpXm8cFYnpTzsBG8JTZXaRfswx+4jTmVdu4=
Subject key identifier: 65:88:2C:86:8C:27:A5:90:9C:1E:40:FB:A3:51:3A:EF:07:B7:89:1D
Certificate issuer: /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial: 152A8001865C847E55B3FDD006B488046441C69C
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232322e302f32342d3234203d3e20323632393738.roa
Signing time: Thu 01 May 2025 02:24:47 +0000
ROA not before: Thu 01 May 2025 02:19:47 +0000
ROA not after: Thu 30 Apr 2026 02:24:47 +0000
asID: 262978
IP address blocks: 132.255.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 04:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2a:80:01:86:5c:84:7e:55:b3:fd:d0:06:b4:88:04:64:41:c6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Validity
Not Before: May 1 02:19:47 2025 GMT
Not After : Apr 30 02:24:47 2026 GMT
Subject: CN=65882C868C27A5909C1E40FBA3513AEF07B7891D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4d:ba:34:81:f3:87:ee:ed:8a:97:e5:a9:0b:
ad:30:43:35:7a:87:70:2e:67:49:89:61:46:ab:14:
e8:c4:6a:ae:12:9c:12:32:63:a6:6a:f8:04:d6:66:
02:62:6d:68:d4:90:a2:45:a3:af:fd:57:26:30:c8:
b9:2e:6d:cf:55:e5:1c:13:ab:fe:16:27:61:63:d8:
b2:36:91:19:95:97:bd:3d:d5:f0:aa:27:39:b3:8c:
43:04:c7:46:24:68:d9:ed:b3:b0:ce:9d:42:02:1d:
de:65:d0:50:8d:5b:7c:be:9b:f2:35:1a:7f:16:6a:
07:c6:f9:cf:64:d0:59:21:00:5d:fb:34:2a:eb:89:
42:c7:fc:35:a2:06:d2:bf:cf:ed:f9:e3:b6:c3:9a:
a8:08:87:ec:bc:ec:de:1e:74:b4:d3:ad:20:0e:2c:
6b:b6:dc:2b:e2:79:ea:ec:a7:80:c6:a5:85:75:7b:
46:a0:81:3c:86:70:1c:dc:f3:09:a2:54:15:03:97:
57:8e:a8:16:bf:87:61:c8:b2:89:0d:8b:32:b1:19:
48:e1:4e:3f:77:9e:05:06:cb:8d:60:75:bd:ac:21:
fd:e5:e7:56:4c:e2:61:41:09:a6:2f:dc:df:49:66:
0b:f7:4d:14:05:4b:d9:8e:01:f6:43:23:4f:e2:b8:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:88:2C:86:8C:27:A5:90:9C:1E:40:FB:A3:51:3A:EF:07:B7:89:1D
X509v3 Authority Key Identifier:
keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232322e302f32342d3234203d3e20323632393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.222.0/24
Signature Algorithm: sha256WithRSAEncryption
46:31:a4:f9:5a:30:05:e3:ce:60:42:42:36:24:0d:de:a7:de:
6a:62:e0:46:2d:12:30:d2:b7:d2:7b:3d:d0:4f:d8:68:65:eb:
b6:3d:94:bb:08:7e:47:2e:37:b0:10:0b:ff:66:d1:9e:35:37:
a3:4c:05:4c:6d:4d:f8:c8:98:20:85:86:6f:3d:10:02:13:83:
63:9c:cf:61:49:84:99:92:f6:03:6e:0a:49:5f:21:fb:7f:13:
3f:79:5f:25:48:1b:81:9f:0c:a6:8e:53:af:7f:78:27:0a:11:
6a:af:cf:6e:79:61:90:b9:d1:0c:d5:de:ba:9c:0e:23:4e:34:
7d:1f:f0:38:65:3a:ed:3a:73:e8:76:fe:cc:7c:32:76:7f:09:
91:35:27:1d:7a:fb:9c:13:da:60:0d:fd:6e:40:63:33:11:12:
c9:22:8b:2c:3e:44:4c:86:22:3c:d0:65:81:5e:a4:8a:1f:46:
d0:33:d6:47:ec:ac:74:b6:bb:c6:59:be:14:51:55:ec:5a:f8:
1a:99:e2:fb:f3:f0:46:0f:fc:aa:52:43:a1:0c:d4:bb:c1:8e:
be:da:00:5e:8a:f6:1a:9c:0b:b3:24:3e:a0:84:27:cf:34:c8:
8e:ec:7a:cb:d0:5f:18:11:c8:0f:50:3b:de:7d:bc:07:de:10:
0d:ce:e2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:09:23 2025 by rpki-client