Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa
File: 34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier: BWJc4u45dwhA3vXWGDJAo98zsz+/Z7a+HLbswHRjOQE=
Subject key identifier: C5:09:4B:29:19:95:32:D2:F7:87:2B:15:34:76:88:02:1C:F4:06:2A
Certificate issuer: /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial: 678BDF4C7382A1546674E5870B2CB9211CE981E7
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa
Signing time: Mon 11 Aug 2025 13:19:40 +0000
ROA not before: Mon 11 Aug 2025 13:14:40 +0000
ROA not after: Mon 10 Aug 2026 13:19:40 +0000
asID: 267027
IP address blocks: 45.227.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Aug 2025 14:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:8b:df:4c:73:82:a1:54:66:74:e5:87:0b:2c:b9:21:1c:e9:81:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Validity
Not Before: Aug 11 13:14:40 2025 GMT
Not After : Aug 10 13:19:40 2026 GMT
Subject: CN=C5094B29199532D2F7872B15347688021CF4062A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:1f:62:c1:e6:f8:b2:ca:21:b5:83:94:d4:
07:47:e5:ae:3d:fc:f8:d7:b1:ec:54:47:f4:06:13:
b9:07:7a:d5:ae:2f:96:a8:bb:ee:2e:00:d7:c8:f2:
b6:6c:53:c1:a7:17:73:1a:c9:15:7a:ac:3e:7d:ce:
24:0a:da:06:73:79:c4:35:eb:84:cd:d5:d5:81:37:
f5:5a:e5:60:0b:f1:e8:e1:97:5c:e0:f5:20:26:f8:
c5:02:5c:b1:b5:c4:f5:06:61:4a:df:3f:e8:f0:cf:
b4:f3:c6:90:49:85:19:85:89:86:ff:2b:af:cc:90:
55:54:91:55:f6:55:b1:c2:db:b3:05:30:0c:6b:28:
78:b6:19:48:52:5d:39:ee:1c:65:81:71:d3:49:e2:
75:bb:00:db:97:92:05:c6:f7:cf:b9:20:89:79:91:
a6:b4:81:ab:ae:b7:bd:50:e4:3a:34:3c:c5:fc:ff:
27:60:7e:d4:38:6a:f3:69:4e:79:45:ed:91:f9:4e:
10:88:30:ea:54:47:4c:ae:f2:70:26:95:8c:4e:94:
da:57:a9:22:28:34:d6:42:b0:86:47:c1:87:7e:92:
83:72:e5:b7:ea:6e:40:81:8d:11:54:d5:70:3c:fd:
df:30:9d:dd:91:15:e2:28:15:6a:b4:35:e9:d3:07:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:09:4B:29:19:95:32:D2:F7:87:2B:15:34:76:88:02:1C:F4:06:2A
X509v3 Authority Key Identifier:
keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.170.0/24
Signature Algorithm: sha256WithRSAEncryption
79:cf:4d:f9:16:c7:a6:ac:33:2e:4b:29:01:cb:1b:34:e5:37:
e0:6f:fa:e7:41:07:75:4a:e2:1a:cf:90:00:c6:c5:da:1e:65:
41:c3:a2:e4:6b:26:51:92:0b:db:32:93:26:cc:aa:f3:68:67:
8e:74:8c:20:bc:ce:94:c8:38:57:fd:95:67:5e:aa:27:e8:1b:
5d:0b:37:92:0b:3d:27:5f:5c:13:b0:36:cd:ab:25:db:34:18:
79:4f:35:f1:3f:cc:5c:61:cb:8c:d8:1e:e8:3e:6e:31:48:66:
d1:44:70:66:da:3e:7b:a2:1b:ff:ef:01:2b:34:d4:d4:c9:d4:
95:a3:7c:ad:56:d4:52:24:28:62:cb:bc:e3:42:de:b0:20:cd:
ce:42:2c:a2:98:6b:7c:70:a7:61:97:32:3e:2c:1b:e7:76:35:
96:47:c1:6b:ed:60:76:ca:c4:b9:2b:21:39:65:0b:77:12:25:
14:e8:6e:e6:fc:f4:32:ff:40:ee:b6:39:fc:cf:e3:c3:24:ce:
2e:fa:20:6a:a8:b9:67:c2:c3:15:94:c1:01:c2:e7:df:4c:e0:
67:ec:13:ba:fb:2f:56:c3:ed:b7:04:fc:7d:96:a2:d2:98:27:
02:eb:7d:30:f7:5a:00:89:5c:d2:68:82:e8:56:f7:f4:39:c7:
21:82:e9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:21:25 2025 by rpki-client