Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139382e302f32332d3233203d3e20323634313935.roa
File: 3133382e39372e3139382e302f32332d3233203d3e20323634313935.roa (raw, json)
Hash identifier: HRCxBEfAvg3if8O0GpU8oLwMNxIalD0PD/3128rox8Q=
Subject key identifier: 5E:86:36:87:B5:CA:3B:CC:9F:23:D5:11:92:44:4A:15:F5:19:E6:AC
Certificate issuer: /CN=21079D52F0579C141357012117FF7963C76BBFC2
Certificate serial: 239AB65675A327758BA2E634B9867B22CADD1F80
Authority key identifier: 21:07:9D:52:F0:57:9C:14:13:57:01:21:17:FF:79:63:C7:6B:BF:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21079D52F0579C141357012117FF7963C76BBFC2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139382e302f32332d3233203d3e20323634313935.roa
Signing time: Sun 11 May 2025 00:14:20 +0000
ROA not before: Sun 11 May 2025 00:09:20 +0000
ROA not after: Sun 10 May 2026 00:14:20 +0000
asID: 264195
IP address blocks: 138.97.198.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 11 May 2025 00:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9a:b6:56:75:a3:27:75:8b:a2:e6:34:b9:86:7b:22:ca:dd:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21079D52F0579C141357012117FF7963C76BBFC2
Validity
Not Before: May 11 00:09:20 2025 GMT
Not After : May 10 00:14:20 2026 GMT
Subject: CN=5E863687B5CA3BCC9F23D51192444A15F519E6AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:55:1d:79:2e:1d:f1:7d:48:1a:c0:75:71:48:
1a:ca:d1:f6:74:09:e0:d8:6c:c6:05:57:26:29:32:
07:7c:87:11:55:01:a5:34:c7:a0:82:69:e9:d1:c2:
42:52:2a:a1:a9:db:ce:c4:22:bc:a4:61:42:7a:34:
24:48:ef:c4:20:f8:c1:19:a1:41:d0:4d:83:57:41:
c2:80:67:f3:40:12:18:66:84:4f:b4:46:6b:57:45:
8a:e7:95:b0:09:bf:60:52:7d:31:43:f8:d4:b8:d4:
5a:d2:0a:87:0e:8c:38:2d:87:9a:0a:ee:13:2a:30:
c4:01:4c:d0:18:42:11:24:b5:c7:ce:e6:40:0a:68:
af:32:44:1e:26:dd:64:1a:d7:ac:f3:38:95:37:51:
c4:03:7c:ea:75:a5:8d:9c:bf:c4:46:aa:80:7a:3c:
3f:61:5b:76:67:c7:12:a7:ea:5e:dc:4b:9e:d0:23:
0e:af:5e:34:8b:ae:46:1e:f0:08:ed:8d:93:bc:55:
4a:1e:a1:ac:f3:a4:84:ff:2f:b2:66:37:f1:61:2a:
a6:e7:1e:93:66:b1:06:8f:57:67:55:4a:4c:6a:34:
5c:42:c5:c1:2f:11:9c:73:27:e9:86:da:4e:3b:dd:
c2:e0:fb:81:7e:ec:b7:76:79:a6:d3:68:f9:71:b7:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:86:36:87:B5:CA:3B:CC:9F:23:D5:11:92:44:4A:15:F5:19:E6:AC
X509v3 Authority Key Identifier:
keyid:21:07:9D:52:F0:57:9C:14:13:57:01:21:17:FF:79:63:C7:6B:BF:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/21079D52F0579C141357012117FF7963C76BBFC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21079D52F0579C141357012117FF7963C76BBFC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139382e302f32332d3233203d3e20323634313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.198.0/23
Signature Algorithm: sha256WithRSAEncryption
98:6f:23:26:88:2b:f5:3c:4b:53:d7:cf:b5:d2:8f:b2:ec:79:
a0:5e:a6:c0:92:22:a1:35:77:23:57:40:07:b3:a5:6e:4d:ed:
ed:ef:66:ea:ae:ec:95:d8:9e:66:d4:cc:26:98:ee:34:20:a1:
35:4d:a6:28:c5:86:5d:d2:48:01:6d:7e:09:1d:6f:a5:3e:5d:
b8:11:80:6e:95:9b:55:1d:ce:ab:74:e8:ab:1c:de:33:de:fc:
3b:77:ad:f4:74:01:f5:f8:34:8c:ed:6b:1b:2c:e8:fa:a1:3d:
81:5c:33:25:32:f3:b5:8f:a4:97:9b:16:16:c5:4a:ac:bd:d8:
a2:dc:b9:86:b9:f8:0a:62:20:4d:74:a6:89:c3:82:aa:35:f3:
cc:07:f2:16:67:39:29:de:1a:a7:2c:36:66:58:4c:96:73:5d:
ac:e4:a8:e1:b3:7e:91:e9:48:55:75:6f:3d:dc:b6:d4:a0:ee:
03:fa:9e:44:d2:93:65:21:09:e2:d8:52:c5:39:cf:f4:7a:37:
1e:3e:bf:ee:f0:bc:e2:29:da:de:22:0a:89:be:d5:87:2e:a4:
2b:7f:78:23:2f:25:2d:e0:58:f9:6f:02:ba:60:97:15:af:76:
b1:63:ff:28:e0:60:6b:46:54:60:93:09:a2:61:e3:c4:92:d0:
fe:6f:f7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:36:13 2025 by rpki-client