Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3235302e302f32342d3234203d3e20323638323937.roa
File: 34352e3233372e3235302e302f32342d3234203d3e20323638323937.roa (raw, json)
Hash identifier: ZQd20VzBzMhY4QYhblikrg8J3mVEvYDwea7u/GGEFi8=
Subject key identifier: 5E:7D:9F:56:17:8B:FE:92:EC:26:55:D5:CB:79:C8:75:67:4E:DE:C8
Certificate issuer: /CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Certificate serial: 41ADBD475307A3FDCD222B975A053D92ADAB0D34
Authority key identifier: 38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3235302e302f32342d3234203d3e20323638323937.roa
Signing time: Sun 09 Feb 2025 13:11:18 +0000
ROA not before: Sun 09 Feb 2025 13:06:18 +0000
ROA not after: Sun 08 Feb 2026 13:11:18 +0000
asID: 268297
IP address blocks: 45.237.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 11:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ad:bd:47:53:07:a3:fd:cd:22:2b:97:5a:05:3d:92:ad:ab:0d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Validity
Not Before: Feb 9 13:06:18 2025 GMT
Not After : Feb 8 13:11:18 2026 GMT
Subject: CN=5E7D9F56178BFE92EC2655D5CB79C875674EDEC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:51:98:a3:56:72:98:ea:b1:69:f7:95:51:
ce:0c:e8:c2:59:1e:5d:46:84:ec:f8:03:4a:1a:e0:
08:a9:44:4a:e7:61:f2:ff:6d:f9:d3:df:0b:4b:94:
5d:d2:95:ec:99:f3:22:1b:71:db:39:2f:38:e5:f3:
c5:30:5e:ab:84:e9:b8:ca:69:b4:f4:0e:be:1b:a1:
9f:f5:c8:ed:c3:72:59:78:8d:61:df:93:15:38:e1:
11:07:2a:cb:3c:ce:11:81:1a:a5:ff:49:37:a4:34:
57:9c:0f:83:8b:43:37:dc:a4:66:10:9d:f3:8c:26:
b9:d0:41:c3:f7:99:6a:d5:7c:84:10:21:79:30:63:
f5:91:67:9f:fe:e5:68:f5:07:df:61:22:74:1a:af:
43:51:a8:7b:56:84:cc:88:5a:fe:53:62:3d:a1:0c:
59:ed:9e:8c:7e:0d:84:30:5b:3e:c2:bb:05:16:43:
aa:b7:44:06:59:e3:72:d7:ef:51:d8:f7:67:95:32:
6c:a6:fd:29:b4:1c:10:36:23:26:19:3c:88:01:6f:
a0:4e:10:d7:b4:07:85:a6:c0:46:ba:4f:61:06:c1:
e3:6c:de:ff:fe:45:0e:e0:b3:b1:82:20:29:7e:32:
63:df:32:84:ca:ef:14:62:95:63:e9:03:1d:e7:7f:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7D:9F:56:17:8B:FE:92:EC:26:55:D5:CB:79:C8:75:67:4E:DE:C8
X509v3 Authority Key Identifier:
keyid:38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3235302e302f32342d3234203d3e20323638323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:02:63:b7:85:1c:0f:c7:66:c6:13:05:ab:26:0a:52:69:80:
b5:f4:75:75:9f:20:85:34:76:69:98:28:94:e6:52:7e:69:f6:
73:b6:13:f2:46:5a:51:c7:d0:4f:c8:ee:dd:51:fa:28:2e:8c:
07:02:e4:8c:f5:6b:89:a3:a5:7a:dd:28:c6:ec:34:cc:d5:52:
37:9f:ed:c7:56:2a:4c:8e:45:74:8d:ab:32:ec:ca:f6:ad:18:
eb:a5:c6:a4:1d:d8:50:f7:d3:1f:e1:29:86:7e:4b:87:5e:9e:
69:e2:d7:65:08:b8:a4:38:aa:25:2d:7a:05:29:83:97:eb:3e:
d4:5d:b9:2e:96:53:2b:dc:d3:6e:a6:08:c4:c5:c7:ca:74:1c:
2d:95:d9:86:c9:3d:19:ee:14:b3:1b:dd:ac:5d:41:96:50:7b:
47:92:07:90:c6:23:91:bb:ab:25:1e:18:cf:73:08:ef:59:7b:
ee:0e:a6:ca:65:78:ca:9b:16:31:a4:15:b7:80:0d:95:9a:e7:
79:62:75:27:fd:8d:92:92:0b:d0:57:9a:66:d8:2b:c2:4b:3b:
66:1e:1d:1f:8d:4d:47:4b:1a:82:c3:36:f3:40:13:7a:7d:c3:
26:d2:15:94:01:72:91:f9:a1:70:8b:61:cf:8b:c6:b0:31:50:
3d:82:87:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:32:51 2025 by rpki-client