Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232332e302f32342d3234203d3e20323632393738.roa
File: 3133322e3235352e3232332e302f32342d3234203d3e20323632393738.roa (raw, json)
Hash identifier: XsX/lkOWUJya5lcfCNay7cFhOfL+tx0InpnBbZHxblw=
Subject key identifier: 1B:A7:84:DC:5F:A1:70:22:0B:EB:74:44:95:21:41:46:8A:90:82:3A
Certificate issuer: /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial: 689A7033685585D3D4F8637B28B5531A16E45C1A
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232332e302f32342d3234203d3e20323632393738.roa
Signing time: Thu 01 May 2025 02:24:50 +0000
ROA not before: Thu 01 May 2025 02:19:50 +0000
ROA not after: Thu 30 Apr 2026 02:24:50 +0000
asID: 262978
IP address blocks: 132.255.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 04:04:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:9a:70:33:68:55:85:d3:d4:f8:63:7b:28:b5:53:1a:16:e4:5c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Validity
Not Before: May 1 02:19:50 2025 GMT
Not After : Apr 30 02:24:50 2026 GMT
Subject: CN=1BA784DC5FA170220BEB7444952141468A90823A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:c9:41:f9:04:6c:11:36:7c:ff:04:56:15:
3b:98:60:56:96:a2:57:06:06:a1:e0:98:81:48:47:
bb:7b:9d:ce:db:3b:bf:45:f6:fd:d4:3a:48:86:32:
37:16:92:b7:8f:27:e2:e2:1a:43:e9:ae:eb:d8:cb:
a2:18:2f:e2:fd:e7:32:f1:88:90:e9:9e:da:ca:39:
f1:b6:c7:8e:a9:d6:1b:8b:28:ef:28:85:c1:95:b0:
d6:22:62:1f:06:1e:31:4c:1b:c4:48:09:ab:64:1a:
ab:9e:68:df:52:b4:cf:ad:b5:d5:b3:80:25:cd:33:
b5:33:de:f4:52:8d:8e:09:58:00:ec:f6:c5:ab:5c:
16:0d:d1:47:77:22:e3:1f:66:e0:31:65:41:1a:9a:
8f:f8:7a:a1:a5:89:81:04:4b:a1:dd:4b:19:29:56:
8c:1d:0b:db:5d:97:41:77:04:d2:ed:93:d7:fd:14:
92:f6:0b:3f:50:d8:5b:de:5c:7b:53:b9:d0:79:e9:
e0:a8:3d:48:34:6b:95:0f:8f:23:a2:17:e4:8e:b8:
e2:89:58:7c:f1:aa:1e:e2:05:04:ea:07:17:19:27:
b2:e0:86:40:5f:66:53:bb:60:b6:ea:8d:eb:45:b7:
43:8a:8a:13:3a:66:c9:d2:af:61:33:92:86:a1:b3:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A7:84:DC:5F:A1:70:22:0B:EB:74:44:95:21:41:46:8A:90:82:3A
X509v3 Authority Key Identifier:
keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232332e302f32342d3234203d3e20323632393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.223.0/24
Signature Algorithm: sha256WithRSAEncryption
60:25:be:ab:dc:e8:2f:a4:8c:0b:ae:82:8d:e2:18:08:e1:96:
67:d4:18:30:4f:30:e9:fa:b7:a1:1c:1d:b6:77:8d:bb:a3:a3:
d4:73:8b:86:1b:a2:b8:d1:df:c7:0a:23:5d:ba:02:db:e6:ac:
41:e8:0b:b5:cc:59:4e:fc:44:1b:87:fd:87:58:6d:cd:1a:17:
f7:a6:52:1f:2e:27:e1:bd:da:98:f6:69:f4:7d:4c:26:bc:27:
8b:f5:2a:e4:2a:95:28:4f:60:31:19:ee:00:a9:3d:4c:41:14:
ee:f0:eb:3a:6e:ff:62:2c:4f:07:5a:ab:a9:4c:09:00:d4:4a:
91:1b:8f:b3:39:64:26:a7:36:50:66:ab:c2:d4:57:46:c3:42:
97:26:f1:eb:36:a1:37:03:f2:45:5d:0d:16:46:dc:94:51:0a:
95:a0:6b:00:94:67:7f:32:18:06:64:d5:80:ac:4f:e1:8f:b1:
07:93:40:81:b9:19:be:ce:10:cb:1d:ff:7b:c9:7b:d0:57:07:
f9:9f:13:dd:69:5e:e1:ff:0f:f9:ae:75:b6:f6:4e:ab:7a:b4:
42:6b:c7:50:5e:ee:7f:15:2d:43:7d:d5:f7:c3:27:d4:d1:37:
fe:d7:6e:bb:23:67:05:f2:17:0a:56:6a:08:23:a5:f6:94:20:
44:3b:e0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:25:11 2025 by rpki-client