Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32322d3232203d3e20323635393335.roa
File: 3136342e3136332e32302e302f32322d3232203d3e20323635393335.roa (raw, json)
Hash identifier: idn305Tn8kl1C98aCVVUbS256yxtIHHlitEwR59Rpu0=
Subject key identifier: C1:49:43:41:2B:C4:BC:F9:EC:6D:73:B0:DC:0E:4E:3C:02:DA:26:3F
Certificate issuer: /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial: 22CE053964C428D3CE528F70CAE898C3591B568D
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32322d3232203d3e20323635393335.roa
Signing time: Thu 06 Mar 2025 07:52:47 +0000
ROA not before: Thu 06 Mar 2025 07:47:47 +0000
ROA not after: Thu 05 Mar 2026 07:52:47 +0000
asID: 265935
IP address blocks: 164.163.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 14 Apr 2025 21:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ce:05:39:64:c4:28:d3:ce:52:8f:70:ca:e8:98:c3:59:1b:56:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Validity
Not Before: Mar 6 07:47:47 2025 GMT
Not After : Mar 5 07:52:47 2026 GMT
Subject: CN=C14943412BC4BCF9EC6D73B0DC0E4E3C02DA263F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:66:d5:f2:18:06:3f:5c:c8:41:95:18:c6:93:
82:6c:a2:df:f1:c4:44:a8:da:56:a5:45:5b:bc:0f:
de:a1:91:2d:7f:86:c5:4d:aa:f1:31:41:55:ec:49:
d3:94:1f:99:2c:53:e1:89:f3:c0:ee:03:0d:49:a7:
35:57:8e:8d:03:ec:79:31:6a:0e:82:7a:5c:92:3f:
1d:e8:5e:2b:f4:e2:7d:9c:b3:00:67:3c:ec:bc:0d:
a8:dd:33:35:c3:9b:f9:5a:c6:3d:63:22:cd:e2:56:
fd:9f:36:f5:3a:61:75:5e:f4:fb:f9:7b:f0:22:61:
c6:bd:da:2e:96:b6:77:32:61:70:c7:d8:3e:f0:68:
05:fb:96:94:34:34:17:46:4e:b8:ad:1a:fe:1c:30:
4a:69:7c:19:5d:b0:01:af:64:d5:97:67:3a:e8:1b:
b4:e3:f7:d8:fd:c8:c1:31:6e:bd:a2:be:38:3f:e3:
3f:ba:32:8b:ce:62:55:75:7b:2b:f1:35:13:bb:bf:
b0:34:76:6f:b8:9f:58:df:8e:7f:4d:24:4f:1d:71:
7d:d4:6d:35:c1:57:f3:43:36:ae:a0:79:fe:bf:6a:
a2:3d:34:ee:d1:05:fb:62:d1:b7:85:9b:58:93:66:
d2:92:d0:64:7d:19:de:ab:b3:46:0e:c5:99:61:39:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:49:43:41:2B:C4:BC:F9:EC:6D:73:B0:DC:0E:4E:3C:02:DA:26:3F
X509v3 Authority Key Identifier:
keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32322d3232203d3e20323635393335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.20.0/22
Signature Algorithm: sha256WithRSAEncryption
24:5c:c1:70:c3:c9:ab:00:64:9c:d1:1a:82:fc:28:33:a3:ab:
72:a1:02:15:c6:06:6d:52:38:97:88:34:20:a0:72:72:36:f2:
80:1c:5d:e5:d2:78:0f:3e:e2:ce:ff:d9:a3:b8:4d:b9:dd:9c:
c9:f7:34:36:82:d6:15:36:a5:60:5f:94:4a:b5:de:c2:8e:20:
b2:57:04:29:b0:35:9c:eb:1c:6a:be:b1:ad:49:c7:f1:65:a3:
c3:01:3d:98:18:0a:32:95:ca:f6:40:49:44:94:b2:4c:ec:41:
ff:73:45:3c:9e:f6:f7:58:98:36:17:66:e0:de:54:23:db:8f:
3c:f5:8a:ae:dc:b1:2a:70:d4:e3:0a:f2:6d:e2:17:bf:7e:f9:
ee:ef:d0:4b:f8:13:3b:30:05:c3:57:76:b8:7b:2c:aa:9c:62:
f2:17:5c:ba:a1:2e:65:7e:9a:85:59:b5:1a:15:a6:5e:0f:2f:
be:9b:6e:c6:6d:6c:2a:7a:f1:66:27:2e:85:dd:3f:4a:0f:3b:
d7:f3:4a:3f:ed:e8:6e:52:68:7d:ca:56:f7:5f:1e:8c:85:9e:
2b:57:8d:3b:61:a2:75:6d:2d:76:14:9b:65:b5:62:09:bc:92:
6d:11:c4:a6:46:4e:a3:e8:5e:96:90:79:dc:4f:88:5e:be:51:
35:cc:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net