Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa
File: 3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa (raw, json)
Hash identifier: uIVNMsBQp0W7PjXyC4HArwsDt2o7JGKgt/e4eVF7Kls=
Subject key identifier: C3:FB:0B:92:A2:83:B0:07:B5:E3:05:EF:7E:BB:58:A6:1D:81:C2:A2
Certificate issuer: /CN=4A518310DD6B72E134A4AFB53DBA5727F57D5D9E
Certificate serial: 552FD3018ED2339F5988690A49E4D3CB3DACC9CA
Authority key identifier: 4A:51:83:10:DD:6B:72:E1:34:A4:AF:B5:3D:BA:57:27:F5:7D:5D:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa
Signing time: Fri 14 Mar 2025 12:29:57 +0000
ROA not before: Fri 14 Mar 2025 12:24:57 +0000
ROA not after: Fri 13 Mar 2026 12:29:57 +0000
asID: 263444
IP address blocks: 138.36.164.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 20:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:2f:d3:01:8e:d2:33:9f:59:88:69:0a:49:e4:d3:cb:3d:ac:c9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A518310DD6B72E134A4AFB53DBA5727F57D5D9E
Validity
Not Before: Mar 14 12:24:57 2025 GMT
Not After : Mar 13 12:29:57 2026 GMT
Subject: CN=C3FB0B92A283B007B5E305EF7EBB58A61D81C2A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:fd:d4:85:14:76:49:74:bf:59:7e:bd:28:
e5:b2:cb:99:9c:44:82:8f:b8:eb:bc:41:e8:06:cc:
79:ef:bc:cb:04:b4:5f:7b:f7:8b:81:cd:d2:6f:26:
3e:11:08:6e:63:d6:49:64:a7:c8:7b:41:d7:0e:64:
7a:8d:6b:98:f8:84:b0:4b:b4:5c:0d:d5:f0:60:a8:
b4:65:e4:d3:93:68:fd:e9:2d:d1:d4:05:ce:94:f6:
05:8f:b2:82:f5:86:ee:9c:99:2f:f0:dc:21:14:72:
e4:05:3b:1a:a4:fc:13:7a:56:f2:ad:00:c4:5d:9e:
ae:51:e2:34:4e:87:25:64:97:0f:3b:6f:d9:65:30:
04:b6:37:79:30:f9:60:05:21:03:bb:17:a2:7a:25:
8f:f2:a6:1f:47:cb:d4:e6:24:c5:d7:00:3e:33:0d:
bb:ad:4a:c0:5c:1f:d8:cb:07:91:24:5e:53:1f:67:
67:a9:96:a7:0c:37:5d:40:08:fa:2c:e5:9b:4f:93:
da:85:6c:bd:d8:39:4e:e8:7e:f9:ec:87:5b:e9:5e:
ae:f6:f1:38:67:3f:27:5f:19:8d:89:01:ad:5b:1d:
c2:9c:5e:c7:0c:97:40:92:f9:8f:b9:e4:a7:35:d9:
02:ea:24:ec:2e:aa:58:ab:55:b9:5c:64:55:e7:1e:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FB:0B:92:A2:83:B0:07:B5:E3:05:EF:7E:BB:58:A6:1D:81:C2:A2
X509v3 Authority Key Identifier:
keyid:4A:51:83:10:DD:6B:72:E1:34:A4:AF:B5:3D:BA:57:27:F5:7D:5D:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.164.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:d9:e6:ba:93:aa:ef:08:20:e1:d6:35:4c:18:93:4b:e9:f6:
03:48:f8:62:9d:b5:28:7c:a3:0d:d6:49:a9:82:9d:a4:71:c4:
7c:7e:d3:74:df:8f:05:8e:f2:cb:9d:34:24:62:e2:70:16:ce:
4a:10:e4:4e:4d:6b:d6:e6:eb:a2:9a:ff:fd:cf:bc:60:3a:f8:
ea:ae:34:aa:d1:3d:fa:cf:2c:60:d5:3f:c6:d5:4c:69:65:dd:
33:24:fa:e2:e2:cc:1a:2c:4a:96:a5:5c:b4:0e:d9:a5:18:13:
93:0a:df:d2:f6:e0:9c:4c:c0:29:53:4e:89:ff:2e:bb:00:a8:
d0:5b:04:81:6d:23:d4:63:d6:2b:5c:21:0b:60:c9:c1:72:00:
df:96:74:78:39:57:df:66:f9:3e:59:42:48:9e:b4:a9:1b:f9:
f4:5e:04:a8:2e:b6:bb:49:14:12:1a:7d:77:88:e3:12:d3:d1:
5b:e4:58:12:f2:25:ce:a6:0d:af:79:cf:bd:b0:db:e4:00:cb:
fa:6f:59:be:ab:00:67:84:45:67:60:7b:b4:9f:b5:44:e0:3f:
30:7a:b4:c3:cb:b4:ce:26:d2:22:ff:ac:bf:d0:7f:c2:ee:4c:
4f:9a:0b:67:89:65:74:d3:84:a1:de:c8:93:a2:cc:1d:41:a4:
c1:c0:9c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:49:43 2025 by rpki-client