Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32332d3233203d3e20323634313935.roa
File: 3133382e39372e3139362e302f32332d3233203d3e20323634313935.roa (raw, json)
Hash identifier: hJjiZLHBKL7qQJnSsbk7133jLq4lOuxpexSej2ehuKY=
Subject key identifier: 63:05:3C:1C:FB:D0:19:64:04:74:CD:5D:AB:3D:19:2A:1B:DC:BE:E2
Certificate issuer: /CN=21079D52F0579C141357012117FF7963C76BBFC2
Certificate serial: 01A2DDF4A9A5F3B05F43FDCBB04420B1375877CA
Authority key identifier: 21:07:9D:52:F0:57:9C:14:13:57:01:21:17:FF:79:63:C7:6B:BF:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21079D52F0579C141357012117FF7963C76BBFC2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32332d3233203d3e20323634313935.roa
Signing time: Sun 11 May 2025 00:14:15 +0000
ROA not before: Sun 11 May 2025 00:09:15 +0000
ROA not after: Sun 10 May 2026 00:14:15 +0000
asID: 264195
IP address blocks: 138.97.196.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 11 May 2025 00:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a2:dd:f4:a9:a5:f3:b0:5f:43:fd:cb:b0:44:20:b1:37:58:77:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21079D52F0579C141357012117FF7963C76BBFC2
Validity
Not Before: May 11 00:09:15 2025 GMT
Not After : May 10 00:14:15 2026 GMT
Subject: CN=63053C1CFBD019640474CD5DAB3D192A1BDCBEE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:41:9a:09:7b:80:d7:4a:32:16:18:bd:1a:
fa:96:3c:d8:55:3a:5f:8d:b1:d6:99:36:92:39:2c:
7e:26:02:48:41:aa:d4:07:1b:40:45:54:40:54:65:
33:d0:7f:13:10:4e:2c:9d:b6:ad:2d:e7:02:78:93:
3e:13:aa:b2:cb:01:c0:8d:d8:ae:a9:9a:1c:b4:94:
76:67:60:56:88:30:2c:d7:6d:de:d3:3c:42:5e:90:
ac:db:8e:63:2d:4c:b8:27:ed:ac:6c:04:93:9e:ff:
e2:36:81:98:aa:1c:43:0c:21:22:a8:ab:3f:4b:d5:
a8:25:a5:ae:91:20:8d:a7:11:5d:50:ec:90:84:cb:
ae:9f:ea:46:cc:43:69:78:ed:4d:f5:a7:14:bf:5c:
53:87:40:44:10:02:5c:e4:1e:f9:53:e8:5a:17:98:
98:17:4f:02:90:84:6e:b5:a1:0c:d6:d4:ce:15:18:
af:41:b8:c2:ad:72:f1:1c:3e:bc:5b:c6:bd:55:ff:
9a:90:f9:1d:f4:75:96:1e:61:0c:20:8c:bb:1e:ea:
3f:53:0d:cf:d5:86:b6:b0:e2:01:e4:2e:11:53:ab:
a4:50:c0:4d:2d:e8:b2:5d:d0:03:6a:d2:d2:24:3c:
da:09:e7:00:68:64:fd:54:6c:5f:28:b8:eb:00:c2:
14:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:05:3C:1C:FB:D0:19:64:04:74:CD:5D:AB:3D:19:2A:1B:DC:BE:E2
X509v3 Authority Key Identifier:
keyid:21:07:9D:52:F0:57:9C:14:13:57:01:21:17:FF:79:63:C7:6B:BF:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/21079D52F0579C141357012117FF7963C76BBFC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21079D52F0579C141357012117FF7963C76BBFC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32332d3233203d3e20323634313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.196.0/23
Signature Algorithm: sha256WithRSAEncryption
06:7b:c8:aa:c2:06:47:86:5b:ff:46:fd:7f:da:a7:bc:a2:8a:
be:63:00:b8:b4:bb:1f:da:d9:1b:0d:07:c4:d0:72:f3:8c:3c:
67:b1:d6:a2:a7:d5:79:75:1a:40:fb:37:61:f9:c5:75:63:31:
4c:3f:c6:0c:56:7f:d9:22:b0:9a:53:ab:18:42:d9:6e:fc:67:
01:44:6d:f2:68:e8:c3:05:fc:1e:6b:a9:9c:ca:27:1a:a0:fe:
de:47:d7:1f:52:05:ba:10:c8:b6:84:f8:79:6c:d3:0f:ff:dc:
56:ec:6b:d3:b5:db:74:45:3d:06:00:c5:16:1a:3f:fe:84:7f:
8b:be:00:be:f7:86:4f:41:13:88:a4:12:d5:d8:57:d4:01:9c:
f9:f1:33:27:19:df:a8:30:c7:ea:2c:ca:c4:9d:d3:ef:8e:27:
89:28:76:e9:7d:75:d7:f0:ef:c4:94:03:17:2f:e5:2e:6a:11:
0b:a9:8c:aa:b4:d7:3c:71:89:e7:1f:b7:32:ee:ad:5a:b5:40:
54:38:aa:44:e8:04:e5:38:a2:48:d5:5f:8e:89:4e:e3:a8:b3:
31:3e:c7:65:6e:65:5a:9d:f0:67:32:23:62:bf:66:a9:4c:1d:
0f:7b:af:53:ae:fe:4a:fe:fb:0f:a2:f1:fe:aa:21:a1:5f:6c:
60:da:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 04:51:05 2025 by rpki-client