Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137362e302f32322d3234203d3e20323731313130.roa
File: 3136302e32302e3137362e302f32322d3234203d3e20323731313130.roa (raw, json)
Hash identifier: CRymNMoCf1fuGpGonipgnxksQyBFYZAuf2H3kdWLzBw=
Subject key identifier: BF:CA:CA:BB:9B:28:90:51:CD:3C:14:11:C1:98:4D:ED:80:9C:92:91
Certificate issuer: /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial: 227442AB5BACC570BD5522A27505C062D98EE7C7
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137362e302f32322d3234203d3e20323731313130.roa
Signing time: Thu 13 Mar 2025 12:59:18 +0000
ROA not before: Thu 13 Mar 2025 12:54:18 +0000
ROA not after: Thu 12 Mar 2026 12:59:18 +0000
asID: 271110
IP address blocks: 160.20.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 13:07:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:74:42:ab:5b:ac:c5:70:bd:55:22:a2:75:05:c0:62:d9:8e:e7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Validity
Not Before: Mar 13 12:54:18 2025 GMT
Not After : Mar 12 12:59:18 2026 GMT
Subject: CN=BFCACABB9B289051CD3C1411C1984DED809C9291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:62:fd:0a:df:5a:4b:a8:0b:98:3e:43:97:
fe:8f:6c:e5:f2:ba:5f:8b:79:33:13:05:20:36:b3:
1d:78:6f:42:64:53:fa:43:2a:04:05:2d:80:35:d9:
9e:bc:f6:3a:18:81:df:c0:54:5d:86:aa:37:46:a2:
90:2b:29:e4:a0:c3:a6:35:e2:46:c5:24:25:f5:d9:
07:27:6b:a7:6b:5b:34:31:f8:55:2b:2d:75:b3:b5:
38:83:15:55:d0:19:9f:98:86:da:b7:07:ae:99:a4:
29:22:54:ad:11:57:0a:af:0c:d1:1e:54:e9:4e:6d:
c6:e5:11:6b:56:ef:81:dd:98:26:4a:f0:f1:47:d9:
d7:eb:fd:89:13:58:32:73:6d:e8:d8:1c:d1:83:d8:
22:33:69:65:e3:aa:65:82:7c:b1:43:6b:2a:ea:40:
d9:a4:8b:59:f4:cc:06:87:ef:9a:77:db:c2:cb:1d:
23:7e:5a:32:9e:ff:b9:1e:3d:95:30:6b:b3:29:b6:
22:dc:12:95:cd:0e:31:d4:bb:11:16:53:84:4d:e1:
73:a9:03:81:f1:92:ec:30:77:c8:db:b0:7a:e7:04:
06:ca:d2:0f:20:96:4e:17:cc:b3:94:93:fa:ab:68:
b8:fc:0f:8a:05:51:41:ae:b9:8b:2d:50:f4:1a:78:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CA:CA:BB:9B:28:90:51:CD:3C:14:11:C1:98:4D:ED:80:9C:92:91
X509v3 Authority Key Identifier:
keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137362e302f32322d3234203d3e20323731313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.176.0/22
Signature Algorithm: sha256WithRSAEncryption
52:ae:f1:ad:8c:94:f7:b9:93:09:24:ce:41:ee:24:55:7d:5f:
dd:18:f0:b6:8a:cb:f1:7a:b5:19:12:7c:3a:d1:c0:a3:22:6d:
5d:b2:52:30:06:aa:b3:32:d8:d6:d1:28:b4:f5:21:b3:30:b7:
b5:6b:72:97:e5:e8:03:4b:b0:ac:71:3d:43:56:8b:b4:81:a2:
f7:cd:d3:d7:f0:59:2a:60:ee:8f:d3:f9:0c:f4:a9:c7:0d:08:
0a:d0:c3:a7:31:c9:e5:19:9a:27:2c:d9:7b:03:2c:01:03:e4:
ae:b5:ad:a5:35:a2:2d:c2:19:17:62:76:2e:31:24:71:f2:11:
ab:80:ad:8b:ba:59:c9:b5:e0:1c:69:47:df:3a:21:9b:1c:6d:
80:b7:07:3a:2b:a2:43:2c:46:a3:5d:3e:b0:b4:26:c4:96:da:
c3:d8:04:18:fd:15:3e:be:d3:19:bc:df:36:ab:55:7c:b6:f4:
9f:68:39:87:db:3a:71:dc:fa:97:c9:d4:d1:75:2e:22:52:35:
04:71:d8:26:23:92:a3:ac:dd:f2:b6:14:af:f4:87:fc:13:13:
3d:f1:52:25:80:4c:30:4f:15:ea:d5:5b:9c:a0:12:27:c1:ba:
24:ee:74:58:74:07:19:15:3c:51:07:10:f4:cc:5a:b6:45:56:
30:75:a4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:05:05 2025 by rpki-client