Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS28212.roa
File: AS28212.roa (raw, json)
Hash identifier: 4IDBvQnr4muF3V1TifOBiHOd9mGL+JPuB1OZMKxYCFQ=
Subject key identifier: 17:8A:DC:A5:8E:7F:F7:94:3A:B9:A0:1D:EA:90:B8:81:1D:58:07:AA
Certificate issuer: /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial: 2638F125F7F97C43DACB35307AE9E209401BC16A
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS28212.roa
Signing time: Mon 20 Jan 2025 16:28:47 +0000
ROA not before: Mon 20 Jan 2025 16:23:47 +0000
ROA not after: Mon 19 Jan 2026 16:28:47 +0000
asID: 28212
IP address blocks: 187.63.16.0/20 maxlen: 20
187.63.16.0/21 maxlen: 21
187.63.16.0/22 maxlen: 22
187.63.16.0/23 maxlen: 23
187.63.16.0/24 maxlen: 24
187.63.17.0/24 maxlen: 24
187.63.18.0/23 maxlen: 23
187.63.18.0/24 maxlen: 24
187.63.19.0/24 maxlen: 24
187.63.20.0/22 maxlen: 22
187.63.20.0/23 maxlen: 23
187.63.20.0/24 maxlen: 24
187.63.21.0/24 maxlen: 24
187.63.22.0/23 maxlen: 23
187.63.22.0/24 maxlen: 24
187.63.23.0/24 maxlen: 24
187.63.24.0/21 maxlen: 21
187.63.24.0/22 maxlen: 22
187.63.24.0/23 maxlen: 23
187.63.24.0/24 maxlen: 24
187.63.25.0/24 maxlen: 24
187.63.26.0/23 maxlen: 23
187.63.27.0/24 maxlen: 24
187.63.28.0/22 maxlen: 22
187.63.28.0/23 maxlen: 23
187.63.28.0/24 maxlen: 24
187.63.29.0/24 maxlen: 24
187.63.30.0/23 maxlen: 23
187.63.30.0/24 maxlen: 24
187.63.31.0/24 maxlen: 24
189.113.96.0/20 maxlen: 20
189.113.96.0/21 maxlen: 21
189.113.96.0/22 maxlen: 22
189.113.96.0/23 maxlen: 23
189.113.96.0/24 maxlen: 24
189.113.97.0/24 maxlen: 24
189.113.98.0/23 maxlen: 23
189.113.98.0/24 maxlen: 24
189.113.99.0/24 maxlen: 24
189.113.100.0/22 maxlen: 22
189.113.100.0/23 maxlen: 23
189.113.100.0/24 maxlen: 24
189.113.101.0/24 maxlen: 24
189.113.102.0/23 maxlen: 23
189.113.102.0/24 maxlen: 24
189.113.103.0/24 maxlen: 24
189.113.104.0/21 maxlen: 21
189.113.104.0/22 maxlen: 22
189.113.104.0/23 maxlen: 23
189.113.104.0/24 maxlen: 24
189.113.105.0/24 maxlen: 24
189.113.106.0/23 maxlen: 23
189.113.106.0/24 maxlen: 24
189.113.107.0/24 maxlen: 24
189.113.108.0/22 maxlen: 22
189.113.108.0/23 maxlen: 23
189.113.108.0/24 maxlen: 24
189.113.109.0/24 maxlen: 24
189.113.110.0/23 maxlen: 23
189.113.110.0/24 maxlen: 24
189.113.111.0/24 maxlen: 24
2804:32d8::/32 maxlen: 32
2804:32d8::/33 maxlen: 33
2804:32d8::/34 maxlen: 34
2804:32d8::/35 maxlen: 35
2804:32d8::/36 maxlen: 36
2804:32d8:1000::/36 maxlen: 36
2804:32d8:2000::/35 maxlen: 35
2804:32d8:2000::/36 maxlen: 36
2804:32d8:3000::/36 maxlen: 36
2804:32d8:4000::/34 maxlen: 34
2804:32d8:4000::/35 maxlen: 35
2804:32d8:4000::/36 maxlen: 36
2804:32d8:5000::/36 maxlen: 36
2804:32d8:6000::/35 maxlen: 35
2804:32d8:6000::/36 maxlen: 36
2804:32d8:7000::/36 maxlen: 36
2804:32d8:8000::/33 maxlen: 33
2804:32d8:8000::/34 maxlen: 34
2804:32d8:8000::/35 maxlen: 35
2804:32d8:8000::/36 maxlen: 36
2804:32d8:9000::/36 maxlen: 36
2804:32d8:a000::/35 maxlen: 35
2804:32d8:a000::/36 maxlen: 36
2804:32d8:b000::/36 maxlen: 36
2804:32d8:c000::/34 maxlen: 34
2804:32d8:c000::/35 maxlen: 35
2804:32d8:c000::/36 maxlen: 36
2804:32d8:d000::/36 maxlen: 36
2804:32d8:e000::/35 maxlen: 35
2804:32d8:e000::/36 maxlen: 36
2804:32d8:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 20 May 2025 03:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:38:f1:25:f7:f9:7c:43:da:cb:35:30:7a:e9:e2:09:40:1b:c1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Validity
Not Before: Jan 20 16:23:47 2025 GMT
Not After : Jan 19 16:28:47 2026 GMT
Subject: CN=178ADCA58E7FF7943AB9A01DEA90B8811D5807AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:8e:38:0d:53:bd:8d:c6:7c:07:a5:ba:e3:
9c:27:26:51:c4:3f:7c:a4:98:39:26:92:7f:4f:ca:
2e:6c:7c:54:86:65:f5:43:03:8f:25:a2:b4:95:13:
89:64:61:79:70:7b:14:c9:88:89:6e:24:7f:a5:51:
63:b5:29:d1:79:c6:3d:7b:86:0a:8c:89:b9:05:1f:
52:53:4b:55:61:a8:67:fc:a4:47:cf:07:b6:05:26:
b7:d5:64:6e:5d:f5:48:02:dc:d0:be:c9:81:49:8d:
b6:7c:61:35:56:da:ef:54:24:9d:6d:34:90:1d:d3:
42:4a:11:c8:9f:ec:02:37:56:d5:3b:02:d7:6e:e6:
1a:40:5d:ad:4c:dd:49:e6:0b:de:19:35:c1:bc:a0:
40:71:15:a9:f3:a6:5b:24:7a:f2:d3:b2:72:2d:fb:
ce:ae:e4:ae:ff:b2:67:76:24:4a:4a:9e:52:36:62:
d6:aa:b3:80:49:3e:06:6d:72:80:b9:2b:ed:71:e5:
b9:43:8c:f0:18:37:7c:e8:98:5b:a5:73:f8:73:cf:
f4:a1:00:e2:da:f3:d0:78:ed:a3:76:8e:bf:da:43:
05:db:b8:f8:93:5f:9b:c6:1f:4f:25:ae:78:11:12:
bb:0d:a5:66:85:bb:d6:ec:b4:3a:b4:f5:20:0f:0e:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8A:DC:A5:8E:7F:F7:94:3A:B9:A0:1D:EA:90:B8:81:1D:58:07:AA
X509v3 Authority Key Identifier:
keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS28212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.63.16.0/20
189.113.96.0/20
IPv6:
2804:32d8::/32
Signature Algorithm: sha256WithRSAEncryption
15:7e:89:6e:32:e0:c3:28:2b:b2:a4:2c:4d:cd:d7:40:f5:1f:
fb:51:b0:66:a8:d6:c3:cd:5e:92:c6:e6:4f:7a:31:85:c0:d9:
d5:29:7a:85:0a:b5:fe:2e:37:80:64:b0:c3:d5:02:32:66:bc:
ac:45:6c:45:dc:cf:86:f0:0c:fe:59:c3:37:5d:10:7e:40:b1:
b4:34:f3:84:ac:0e:ba:2c:b3:31:88:f4:e3:e2:af:7b:cf:21:
7d:cc:e0:33:9e:c5:40:7a:58:56:14:11:53:45:f2:64:d8:60:
b9:40:40:ac:8c:34:3a:f4:cf:cd:ed:35:fe:a1:7f:a0:3c:e3:
09:00:ac:8c:31:43:0c:fc:18:f9:57:10:c4:2d:95:82:d8:46:
00:9c:57:f3:a0:5e:0f:3a:9b:d7:32:37:c3:6b:57:6c:d4:2c:
e8:91:5c:a5:b6:7c:24:8a:5a:17:c2:e2:f0:75:be:f3:16:ea:
44:d6:17:37:65:1c:9e:a9:22:db:c0:20:4a:5f:73:f9:02:17:
60:4b:c6:f8:1d:d1:e4:be:4a:f9:6b:31:c7:9a:87:4e:f0:74:
9d:e4:1b:62:c1:7d:43:36:f2:f2:32:64:64:6d:8d:27:db:c3:
d8:37:98:df:4a:8b:8d:9a:da:c1:37:c2:d9:ae:b6:20:6a:ed:
63:c5:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:11:11 2025 by rpki-client