Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3139312e3136382e302f32322d3234203d3e203238323031.roa
File: 34352e3139312e3136382e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: yknZWPnDbc7L1dXB9YltopQHEqGhhtzGPYcRRkLjEYA=
Subject key identifier: 88:F2:0E:14:22:5E:66:8E:65:E0:A8:CF:90:57:EB:6B:F2:0F:35:47
Certificate issuer: /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial: 5074DF9D5DC4DD2392A61E1C1DBD0E6457BF9C2A
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3139312e3136382e302f32322d3234203d3e203238323031.roa
Signing time: Wed 12 Mar 2025 13:33:20 +0000
ROA not before: Wed 12 Mar 2025 13:28:20 +0000
ROA not after: Wed 11 Mar 2026 13:33:20 +0000
asID: 28201
IP address blocks: 45.191.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Jul 2025 14:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:74:df:9d:5d:c4:dd:23:92:a6:1e:1c:1d:bd:0e:64:57:bf:9c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Validity
Not Before: Mar 12 13:28:20 2025 GMT
Not After : Mar 11 13:33:20 2026 GMT
Subject: CN=88F20E14225E668E65E0A8CF9057EB6BF20F3547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:34:d5:ea:7e:86:cf:2d:93:ef:19:1f:b0:
b9:18:ed:59:ad:cf:ff:36:86:b6:24:c9:b5:ee:69:
2c:82:6b:0f:83:0e:fb:7e:94:fe:d8:6f:c5:f9:e9:
5e:a8:5a:bb:eb:ff:bd:51:54:0d:5d:91:53:cf:6c:
52:a2:4d:61:f6:c0:a2:f7:04:5e:e3:c7:8e:40:62:
50:6c:69:40:99:c7:6f:6a:50:08:5a:a2:b8:86:eb:
07:0c:85:a1:ad:a8:98:1a:f7:35:e4:6b:03:64:ee:
99:96:9b:ed:15:e9:49:2f:19:8c:67:b6:40:0b:7d:
8c:0d:0c:47:75:e2:f1:d0:ca:e8:6d:ef:32:8a:73:
57:7d:03:97:ff:27:68:52:40:33:99:47:72:0a:19:
58:f2:9b:ff:fb:40:75:c4:59:b4:1b:b9:ac:b8:31:
66:b6:df:30:e9:12:9b:c3:44:a3:7a:78:a8:af:d8:
3a:96:ab:8c:a1:47:8f:42:01:9b:a7:85:82:a7:ab:
7a:be:16:e9:3f:d6:48:cb:98:bc:7d:06:c0:a6:4d:
1c:05:b1:b1:d0:33:9f:76:57:35:3e:ae:e8:8c:c2:
a1:04:ea:b6:ea:07:f6:e7:b1:e4:35:5e:25:d8:e8:
b7:7a:db:06:15:fd:fc:e2:87:9d:94:b0:c2:d2:d4:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F2:0E:14:22:5E:66:8E:65:E0:A8:CF:90:57:EB:6B:F2:0F:35:47
X509v3 Authority Key Identifier:
keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3139312e3136382e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.168.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:16:c9:4f:ac:bb:8a:de:53:ef:bd:eb:cd:52:79:48:5c:7b:
50:a7:13:ad:f4:47:3d:3c:a3:6a:d8:28:f2:dc:0e:cc:75:24:
a7:5e:0c:dc:e6:c9:89:b5:d6:a9:a2:c3:65:b6:05:5e:f9:4b:
cd:8f:e9:65:1f:56:bc:13:83:cb:db:a2:74:ec:e5:9a:1f:9d:
82:a9:2e:e1:bd:bc:09:1d:17:2e:ea:d1:c3:e7:70:e8:4b:b3:
f3:8a:bd:61:cf:1d:24:93:a7:96:34:d9:89:b6:d1:bd:70:5c:
3f:88:78:d8:2b:5a:4c:87:72:43:f4:91:2d:17:38:a5:70:88:
e8:0c:f2:2c:0f:b6:39:00:be:0f:d4:86:29:1d:c7:a7:a7:18:
a7:da:03:35:fa:ee:ee:76:2a:b7:c9:a2:ae:5c:9e:4d:a6:c3:
b9:99:8c:e2:1f:8a:17:0e:a9:74:37:1d:55:b9:0f:27:cb:a0:
4e:4c:cc:51:68:25:63:5a:5d:f2:bc:d8:a8:85:50:ef:10:c8:
37:29:43:30:a1:07:d3:59:57:f0:b4:c3:14:6c:a4:35:f7:3e:
6d:5b:8d:01:4a:e4:2e:e8:df:f8:ec:a9:bf:f4:38:d3:cc:a7:
c5:5c:3e:b4:9a:40:82:af:6f:87:b6:f9:3f:84:e8:29:14:40:
64:60:82:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:22:44 2025 by rpki-client