Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32342d3234203d3e20323638323937.roa
File: 34352e3233372e3234382e302f32342d3234203d3e20323638323937.roa (raw, json)
Hash identifier: XWCaSZjOzf2vhxkCdzr98G9BzmiTPDquPpb6D2kbASw=
Subject key identifier: 9E:F6:A9:3C:01:AF:16:40:18:0C:4C:45:31:C2:D2:9D:B4:DA:8A:FE
Certificate issuer: /CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Certificate serial: 51D9DC374BCAE53E319327E0B671B725ABB1F18A
Authority key identifier: 38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32342d3234203d3e20323638323937.roa
Signing time: Sun 09 Feb 2025 13:11:00 +0000
ROA not before: Sun 09 Feb 2025 13:06:00 +0000
ROA not after: Sun 08 Feb 2026 13:11:00 +0000
asID: 268297
IP address blocks: 45.237.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 11:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d9:dc:37:4b:ca:e5:3e:31:93:27:e0:b6:71:b7:25:ab:b1:f1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Validity
Not Before: Feb 9 13:06:00 2025 GMT
Not After : Feb 8 13:11:00 2026 GMT
Subject: CN=9EF6A93C01AF1640180C4C4531C2D29DB4DA8AFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:32:dd:c6:d7:f4:80:6f:52:53:65:92:ac:bc:
a1:82:3e:61:1b:f6:61:6d:49:46:5a:28:2e:57:b0:
79:d1:a8:7a:74:29:d2:c5:4b:af:ca:51:f1:82:fb:
80:59:f3:1e:6b:f0:44:3a:7d:23:f7:ff:65:38:40:
36:74:7e:47:37:87:b0:39:1d:19:03:f7:a9:2d:fd:
a6:2e:55:2e:19:b8:ff:47:29:a9:79:32:87:2d:e0:
40:61:5b:26:8c:a6:72:77:6c:50:29:07:60:41:dd:
b0:ea:d3:22:99:11:6b:2c:a8:c3:1b:80:1c:d8:1a:
57:57:97:9f:9f:18:9b:18:de:61:bc:70:93:36:49:
60:49:14:5a:38:0a:2d:6f:9f:1c:b4:8a:ce:b3:3f:
c1:84:01:b0:35:d5:fc:84:aa:80:c3:8a:a0:24:cf:
32:c9:7c:8d:b5:68:17:54:76:49:d2:37:e6:18:61:
86:1f:e7:a5:51:10:f8:78:4d:44:85:e7:92:5f:4e:
9e:24:9a:9f:a4:3a:65:98:e5:c8:58:50:56:0a:9f:
79:b0:ab:7b:bb:f6:d5:72:ce:f9:6d:49:72:7b:47:
21:65:5b:a0:9c:e8:54:ab:2a:24:62:e6:22:83:e3:
dc:5e:e8:c1:95:c4:af:b1:d5:cf:2f:e1:2a:e5:8c:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F6:A9:3C:01:AF:16:40:18:0C:4C:45:31:C2:D2:9D:B4:DA:8A:FE
X509v3 Authority Key Identifier:
keyid:38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32342d3234203d3e20323638323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.248.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:90:61:53:e5:86:e8:a6:4c:83:c9:15:f4:91:c5:5a:35:0d:
97:f6:d5:16:9f:17:52:3d:b5:38:b9:e5:d0:e1:88:cd:71:64:
d4:24:32:b3:28:22:52:4d:04:c9:2f:db:8e:db:33:ca:ed:0e:
48:fb:af:47:57:f6:47:de:9e:b1:8c:c8:50:ed:63:8f:11:61:
c7:39:0b:94:11:86:f5:00:06:f9:b4:ae:f8:d7:61:4c:af:15:
d2:85:33:ec:ea:1c:ff:1a:51:fe:62:8a:ce:c7:3b:ad:13:63:
1f:c7:c4:f7:e0:06:d1:98:99:cb:e1:4f:8c:df:58:43:e2:21:
8c:23:48:9f:20:e4:df:40:64:0a:6a:9d:59:e8:a4:7d:32:84:
ea:ed:01:a2:03:0f:f7:71:35:01:33:d9:9c:4b:29:b9:43:2a:
eb:2a:df:96:20:ee:5d:ea:28:37:37:64:79:44:e3:22:97:b5:
12:95:8e:df:ed:0e:4e:af:0c:73:c2:21:85:11:c1:90:9a:7f:
9d:ff:41:6a:e3:85:09:9f:f7:86:2c:d3:d4:1f:0f:e7:ff:39:
93:2c:05:03:4e:d4:95:62:ab:21:73:19:3c:e3:cd:f0:98:fa:
fb:18:44:0d:6c:e8:39:0e:ba:05:32:29:2b:74:0a:d4:d0:ac:
0f:7c:23:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:36:39 2025 by rpki-client