Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34372e302f32342d3234203d3e203532353430.roa
File: 3133382e3138352e34372e302f32342d3234203d3e203532353430.roa (raw, json)
Hash identifier: 4v3CEHndNy4sKIfu1a1xgbrySuEIGyHsdxgNJM01+q4=
Subject key identifier: 65:88:CA:0C:A9:71:8C:16:A6:75:29:FA:5E:A3:79:3D:DD:FD:11:DF
Certificate issuer: /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial: 276800D7332CE0A3BE2B0CDA03C930C139675A19
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34372e302f32342d3234203d3e203532353430.roa
Signing time: Fri 07 Feb 2025 20:51:23 +0000
ROA not before: Fri 07 Feb 2025 20:46:23 +0000
ROA not after: Fri 06 Feb 2026 20:51:23 +0000
asID: 52540
IP address blocks: 138.185.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 11:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:68:00:d7:33:2c:e0:a3:be:2b:0c:da:03:c9:30:c1:39:67:5a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
Validity
Not Before: Feb 7 20:46:23 2025 GMT
Not After : Feb 6 20:51:23 2026 GMT
Subject: CN=6588CA0CA9718C16A67529FA5EA3793DDDFD11DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:84:0f:68:b2:6d:95:80:ca:ff:ff:ed:57:
a5:8f:c2:06:e2:14:12:89:a6:fb:a4:7c:43:25:5e:
a6:aa:a0:cb:b7:34:65:21:fa:ca:80:53:4a:9c:1d:
88:d9:ab:54:3f:d9:4c:89:71:11:f9:36:ba:8a:2f:
ef:c5:70:98:be:ee:f0:5a:0e:7f:07:df:55:23:d6:
d5:04:e4:46:0f:5c:10:99:f2:31:77:46:05:cf:0f:
1b:71:df:28:ad:50:9e:4a:b6:d2:19:5f:82:43:e6:
5c:ef:cd:60:f2:64:15:ff:e5:81:bb:22:d3:b7:81:
c3:26:a4:da:84:96:71:66:cd:67:5f:89:62:32:d9:
b5:fc:e9:7d:ed:4c:15:64:12:1a:c5:e1:9d:8b:78:
0d:61:88:bf:c3:73:47:b9:c0:ca:23:bd:5d:f1:fb:
29:e7:3b:e9:0e:98:59:95:4b:34:69:a0:99:e4:66:
df:de:06:a2:93:93:4d:79:d9:fc:3c:f6:14:57:4e:
6e:05:ba:5b:e9:ac:ca:c2:61:99:6a:ec:b1:92:0a:
13:84:c4:36:7d:be:72:71:81:93:cd:87:c3:08:9b:
e8:2d:50:c6:96:54:98:06:43:8b:30:27:a9:1e:49:
64:df:98:ad:71:cd:7b:62:51:52:07:e9:8a:fb:49:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:88:CA:0C:A9:71:8C:16:A6:75:29:FA:5E:A3:79:3D:DD:FD:11:DF
X509v3 Authority Key Identifier:
keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34372e302f32342d3234203d3e203532353430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.47.0/24
Signature Algorithm: sha256WithRSAEncryption
69:69:d4:4f:4f:22:30:2c:85:c3:2f:e2:b7:09:df:b5:12:6c:
6b:ad:fd:25:3e:b8:2a:c5:2a:10:eb:7d:db:1b:82:0e:e9:95:
28:b7:55:f6:be:4f:68:f3:aa:19:32:82:29:89:d9:ee:69:8f:
63:fe:55:2f:5b:f3:94:37:87:82:af:96:e6:d5:44:13:e7:a6:
41:88:f1:bf:39:8e:02:81:f4:8d:90:e6:86:f5:ba:53:1a:a1:
6e:ec:91:94:fb:91:d4:7a:12:d3:34:81:5f:14:5b:42:dd:20:
f5:cf:fb:08:4c:52:1a:eb:4e:2e:4c:15:39:06:5f:61:0f:38:
74:11:c6:54:fb:98:96:80:84:1c:46:30:41:7e:46:05:f1:bc:
2a:4a:f2:f1:83:49:72:be:8c:af:2a:f5:0c:a6:76:d6:57:9c:
ea:54:5e:c4:d2:fe:3f:f1:61:e1:c3:54:fd:42:be:46:b5:a5:
ae:8d:fd:17:ee:ad:42:b2:63:55:1d:77:cc:93:94:92:cb:df:
c0:36:3b:e5:d4:68:f2:ab:02:cf:63:2d:fd:0a:ce:dd:51:28:
53:87:8a:eb:8b:16:42:24:cb:c4:2f:d2:cb:7b:b3:f7:97:a5:
b3:89:c1:70:52:01:36:53:ea:c1:5b:97:50:f1:f6:57:f9:1d:
25:09:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 03:49:23 2025 by rpki-client on console.sobornost.net