Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/3136382e302e3131322e302f32332d3233203d3e20323635323439.roa
File: 3136382e302e3131322e302f32332d3233203d3e20323635323439.roa (raw, json)
Hash identifier: riIb9DIBwfbDwQ89n8rM46Rvaw3iMNF7Dbg19F+PvOQ=
Subject key identifier: A9:88:D1:F4:B2:CF:54:2B:F9:2C:12:42:96:25:3F:BF:C7:46:AE:BE
Certificate issuer: /CN=7F41F2DF45380ED28EBC66827733788836A8955D
Certificate serial: 26A3CF6708EAF0250E747D7D9AE510E58B0055B9
Authority key identifier: 7F:41:F2:DF:45:38:0E:D2:8E:BC:66:82:77:33:78:88:36:A8:95:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F41F2DF45380ED28EBC66827733788836A8955D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/3136382e302e3131322e302f32332d3233203d3e20323635323439.roa
Signing time: Tue 10 Jun 2025 12:02:20 +0000
ROA not before: Tue 10 Jun 2025 11:57:20 +0000
ROA not after: Tue 09 Jun 2026 12:02:20 +0000
asID: 265249
IP address blocks: 168.0.112.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 14 Jun 2025 03:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a3:cf:67:08:ea:f0:25:0e:74:7d:7d:9a:e5:10:e5:8b:00:55:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F41F2DF45380ED28EBC66827733788836A8955D
Validity
Not Before: Jun 10 11:57:20 2025 GMT
Not After : Jun 9 12:02:20 2026 GMT
Subject: CN=A988D1F4B2CF542BF92C124296253FBFC746AEBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:21:ab:fa:be:5c:6b:e3:31:9f:eb:c9:ab:
5b:09:dc:0e:e3:ec:1d:9b:ab:8d:9b:a7:42:c6:df:
d2:00:d7:e4:3b:23:55:d8:41:34:46:72:8a:bf:8d:
9a:37:df:79:6b:3b:d6:dd:c9:e8:42:27:c2:45:6d:
11:d4:ef:a5:26:88:61:7c:f2:24:5e:10:eb:a3:0f:
49:d6:e0:9c:cd:f5:e0:9a:5c:96:02:12:b4:fa:4c:
d0:5f:95:92:a2:88:84:72:d9:36:bd:ab:3e:ef:87:
f5:c1:37:a3:ce:c0:0f:55:74:10:b4:4e:48:fc:66:
a4:f0:71:73:99:5e:11:9e:28:33:b2:a8:bb:d9:4c:
87:3f:29:94:42:27:ab:75:43:46:37:14:a4:f1:88:
f6:85:f9:96:ef:2b:9e:c5:c4:f5:21:b9:f4:ab:17:
4b:1a:d8:3a:e8:3c:c2:66:c2:bd:c9:32:0f:1b:98:
0c:20:d3:93:5c:cb:c0:20:d9:73:10:a1:5d:0e:a9:
bf:a8:d8:eb:f3:d4:4b:8e:ed:53:ea:19:de:b5:b1:
27:4f:75:d7:47:a6:9c:e1:5c:97:ed:94:03:a9:96:
05:df:93:33:f6:90:09:36:4f:5d:9c:1e:89:35:5e:
46:6c:93:7b:45:87:78:6d:12:4e:9d:ad:23:1b:9d:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:88:D1:F4:B2:CF:54:2B:F9:2C:12:42:96:25:3F:BF:C7:46:AE:BE
X509v3 Authority Key Identifier:
keyid:7F:41:F2:DF:45:38:0E:D2:8E:BC:66:82:77:33:78:88:36:A8:95:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/7F41F2DF45380ED28EBC66827733788836A8955D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F41F2DF45380ED28EBC66827733788836A8955D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/3136382e302e3131322e302f32332d3233203d3e20323635323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.112.0/23
Signature Algorithm: sha256WithRSAEncryption
57:bc:72:85:ca:46:a1:8b:e3:b7:39:dd:a8:ec:96:f8:73:3d:
a4:c0:91:d0:05:6e:1b:98:60:9d:21:f9:a0:0f:71:77:89:ec:
77:25:21:28:2d:57:81:d1:5e:59:ac:6a:c3:60:f9:7d:61:c2:
29:83:38:45:12:29:32:80:a5:02:b4:f0:f7:a3:75:44:92:d3:
b4:42:44:95:d7:7d:19:4c:a1:7e:85:ba:51:16:a9:3d:20:ac:
29:7b:25:3a:0a:df:94:0b:4c:ec:83:2b:8d:10:a3:a4:e5:6c:
03:7f:bb:a3:d4:92:6b:47:31:73:e1:af:ce:16:dd:33:6d:44:
6a:7e:59:62:32:39:b2:e3:1a:fa:cb:83:ed:eb:6c:21:ab:f8:
af:69:6c:fa:50:e2:67:6b:3f:6b:f3:69:d6:5d:1f:70:e0:3f:
33:af:65:af:4e:a9:2f:cb:49:51:31:8d:d7:ad:3a:90:c8:c6:
81:1a:65:6d:fb:32:f7:86:d5:d7:26:6e:77:df:63:a1:d8:ca:
03:9e:a0:b7:66:2d:80:5e:52:05:18:1d:03:27:90:e4:d8:1e:
c5:5e:9e:6f:fd:08:ab:70:c4:73:e8:dc:d8:fa:b4:ab:a6:7d:
e8:2f:80:0f:4b:b4:ed:7d:2d:ce:23:03:e8:5b:7f:87:6e:e5:
03:0f:4a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 01:18:06 2025 by rpki-client