Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e38352e3136302e302f32302d3234203d3e203238333433.roa
File: 3138372e38352e3136302e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier: Z0x8xBb1oWAUV+rCy0N3FyRlc4yMxwBk/e8P+pEa0so=
Subject key identifier: AA:BD:D7:EC:D4:63:79:25:F4:4A:C0:D3:76:52:37:78:FF:97:AF:46
Certificate issuer: /CN=0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80
Certificate serial: 7E74A9212DA77271909D1005DF6F78D494C8861D
Authority key identifier: 0A:09:45:5F:3B:85:C8:20:AD:F8:A8:A5:B0:0E:6B:24:E5:2D:9D:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e38352e3136302e302f32302d3234203d3e203238333433.roa
Signing time: Thu 03 Apr 2025 20:41:53 +0000
ROA not before: Thu 03 Apr 2025 20:36:53 +0000
ROA not after: Thu 02 Apr 2026 20:41:53 +0000
asID: 28343
IP address blocks: 187.85.160.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 11:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:74:a9:21:2d:a7:72:71:90:9d:10:05:df:6f:78:d4:94:c8:86:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80
Validity
Not Before: Apr 3 20:36:53 2025 GMT
Not After : Apr 2 20:41:53 2026 GMT
Subject: CN=AABDD7ECD4637925F44AC0D376523778FF97AF46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:5a:fc:a7:4b:c9:cd:1e:48:b5:96:28:7e:
43:fd:6f:5d:6f:2a:05:cd:62:f7:2d:c3:d0:f6:d2:
a9:de:98:b7:88:14:a9:d2:0e:09:ce:66:7d:07:17:
a6:59:a2:ab:90:ee:b0:a8:3a:34:d6:88:c4:dd:d1:
b9:32:3e:dd:83:a5:d4:ef:91:24:22:00:8e:4d:95:
26:40:f7:0a:a0:e3:48:94:17:50:a6:65:ac:ea:3b:
87:7a:ad:8d:fa:28:0b:9d:6f:e4:a8:f2:37:19:9d:
78:74:0b:fd:0b:f2:6c:77:37:2c:28:d6:4e:84:ef:
e6:46:29:a0:b1:46:ff:56:fe:f5:91:3e:90:36:37:
32:6d:38:ed:45:80:42:d2:ad:ff:d1:47:02:36:6f:
af:39:73:73:8a:82:0c:86:8d:87:05:f5:65:e9:95:
b3:f3:ad:f9:7a:82:ef:ee:17:0e:00:36:8e:b3:a3:
65:1f:1a:63:6b:b0:e1:2f:82:82:31:29:46:f1:d8:
72:e9:7c:53:55:16:1e:61:6c:5f:d4:b6:30:40:e6:
7f:3e:3f:38:a3:41:8d:89:bc:f0:ce:8f:bd:1f:ca:
e8:18:86:31:9e:7b:e2:07:8d:17:18:e0:52:59:12:
c1:6a:bb:90:27:5c:ae:21:f5:4e:42:cd:63:85:86:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BD:D7:EC:D4:63:79:25:F4:4A:C0:D3:76:52:37:78:FF:97:AF:46
X509v3 Authority Key Identifier:
keyid:0A:09:45:5F:3B:85:C8:20:AD:F8:A8:A5:B0:0E:6B:24:E5:2D:9D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e38352e3136302e302f32302d3234203d3e203238333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.85.160.0/20
Signature Algorithm: sha256WithRSAEncryption
49:87:db:18:4a:81:b2:f4:d0:2a:b0:1e:0e:6f:a3:af:7f:c3:
a2:bb:47:fa:6f:95:f6:87:3e:46:3f:e8:94:69:ee:25:f0:f3:
4b:61:85:ee:3c:59:84:42:6e:8d:3c:3b:db:5b:a0:bc:71:1b:
f4:bd:eb:53:a2:d6:02:12:6c:f2:d5:5c:e1:29:bf:fc:58:21:
e3:b9:60:c5:21:ec:26:30:65:0d:5b:4b:56:77:e1:b4:2d:b0:
a0:79:34:e7:3b:dc:c1:5d:5a:e7:d6:33:44:f5:93:6e:c8:6b:
20:56:20:69:ae:64:ae:38:a5:3b:c9:5d:63:57:34:28:3b:2e:
9d:0a:76:0a:06:cd:e5:f1:50:bf:46:d6:af:6c:7e:f2:2e:62:
41:16:78:93:df:69:92:4f:9a:82:0c:74:37:e8:ba:3d:09:04:
86:59:5b:6e:a4:bf:a8:1b:a3:ca:d7:22:ae:4f:d1:85:1a:b8:
28:a7:fb:0a:d1:2e:eb:7e:b0:66:e8:d4:84:43:7a:9e:70:62:
3a:50:e3:2e:78:8a:dd:20:92:bb:3f:b6:dd:02:f0:52:7a:8b:
7f:20:ba:a3:f1:b7:65:57:e1:87:b4:6c:8a:7e:da:83:24:54:
40:02:0e:b2:31:b0:fa:07:a6:de:11:c1:4a:0e:e2:45:10:c9:
cf:27:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:02:17 2025 by rpki-client