Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32332d3233203d3e20323637303132.roa
File: 34352e3232372e3132302e302f32332d3233203d3e20323637303132.roa (raw, json)
Hash identifier: dTkIpZR9yIN//WO/vGrwzXvtpX0lFfZm78AEpoFATPY=
Subject key identifier: AA:AD:E3:7B:FC:6E:10:C1:93:B9:E5:45:89:08:0D:2B:25:CB:F5:83
Certificate issuer: /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial: 2ED5ED7C5D5133D185FCDC369CF445B81E0017F8
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32332d3233203d3e20323637303132.roa
Signing time: Thu 11 Sep 2025 17:13:34 +0000
ROA not before: Thu 11 Sep 2025 17:08:34 +0000
ROA not after: Thu 10 Sep 2026 17:13:34 +0000
asID: 267012
IP address blocks: 45.227.120.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 11 Sep 2025 17:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d5:ed:7c:5d:51:33:d1:85:fc:dc:36:9c:f4:45:b8:1e:00:17:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Validity
Not Before: Sep 11 17:08:34 2025 GMT
Not After : Sep 10 17:13:34 2026 GMT
Subject: CN=AAADE37BFC6E10C193B9E54589080D2B25CBF583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:aa:ff:91:f7:46:b2:0e:a0:d3:2a:90:41:
dd:ad:80:f0:3c:fc:8d:5d:91:14:c9:c8:2c:34:7f:
c5:bd:39:f3:58:0b:88:2b:4e:31:39:08:8d:2e:41:
ae:83:58:58:25:50:74:a7:52:d3:2a:fd:9d:d5:46:
62:d5:57:4b:e2:e4:d4:f3:92:22:1d:b6:a9:64:d4:
db:15:20:ae:2b:98:10:1f:a5:40:6c:df:fc:03:1c:
53:ea:28:b8:29:c5:63:93:1f:76:be:3f:00:b8:f8:
2d:2a:75:ca:b5:db:46:97:03:19:a7:f5:b5:fa:ac:
bd:d0:05:de:24:a5:b7:03:71:8e:d3:f9:8d:e4:8a:
8b:5c:cb:85:41:09:e8:a0:68:f5:24:94:47:45:65:
e3:9f:d9:74:3a:64:28:22:a6:f1:20:2d:70:3a:6a:
04:fe:87:a0:b3:7f:ee:3d:72:e4:9a:61:c1:45:4f:
fa:ba:e6:0c:14:c8:cf:d2:54:94:91:31:f9:ba:bc:
24:1c:98:2c:72:82:96:27:34:93:04:1b:79:1e:b1:
77:9d:47:d4:68:0d:f8:ec:77:f2:73:5e:a5:d2:fd:
82:69:d7:64:15:31:d9:ea:5d:fa:17:80:85:b5:1f:
3f:2b:8d:ca:7a:8d:77:c8:d5:b0:53:d2:0f:57:25:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AD:E3:7B:FC:6E:10:C1:93:B9:E5:45:89:08:0D:2B:25:CB:F5:83
X509v3 Authority Key Identifier:
keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32332d3233203d3e20323637303132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.120.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:04:3a:fa:10:19:09:4d:31:cb:a3:41:4c:7a:f1:ba:69:3a:
df:90:dc:a5:c2:3f:c6:56:ec:90:5c:2e:44:a1:ba:3f:a2:79:
fa:64:88:b1:68:58:a8:ae:a1:2d:33:b0:34:50:1b:a0:f7:41:
74:4f:3a:62:b5:9e:7f:8b:d1:4b:6e:92:13:43:2a:29:a3:2e:
8b:2e:9d:95:95:f6:e0:20:2f:50:b7:fe:79:df:6d:29:72:e9:
cc:4a:55:1a:ed:b5:35:ce:3b:91:fc:b0:5f:48:91:a3:49:3d:
e6:34:99:20:89:69:bb:b3:1f:c5:dd:ca:52:6d:53:76:7b:47:
bc:69:d5:17:ab:de:70:72:d1:d8:f5:6d:2a:60:bb:c0:ee:2e:
23:20:44:14:23:b5:84:83:fa:8f:bf:77:26:c1:7a:4a:06:3d:
86:de:a0:3d:14:86:fb:b6:9d:ce:ae:97:6b:57:c6:43:ee:0f:
a3:a2:fd:91:6e:93:00:48:90:53:5a:0b:06:5c:85:ca:a0:2f:
88:25:b7:b4:01:05:48:cd:63:fe:d5:89:d2:9e:c6:25:b3:47:
19:d4:13:a9:fd:41:e9:62:aa:10:22:f7:40:73:47:2c:08:5f:
bf:4a:cb:74:4a:a0:fa:b1:a3:95:dc:35:a2:a2:ea:3f:37:24:
c8:f4:8b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 06:03:49 2025 by rpki-client