Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3235312e302f32342d3234203d3e20323638323937.roa
File: 34352e3233372e3235312e302f32342d3234203d3e20323638323937.roa (raw, json)
Hash identifier: fUWQNpYZG30le6aRH9eyjTKE2LdyhOCBOUq4nFpE2ns=
Subject key identifier: 4C:50:82:0C:75:0E:9A:9F:B4:CA:EC:F7:45:24:3A:63:8B:AB:BF:52
Certificate issuer: /CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Certificate serial: 357C65C960228E3893D02A8956FA942E787419E7
Authority key identifier: 38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3235312e302f32342d3234203d3e20323638323937.roa
Signing time: Sun 09 Feb 2025 13:11:22 +0000
ROA not before: Sun 09 Feb 2025 13:06:22 +0000
ROA not after: Sun 08 Feb 2026 13:11:22 +0000
asID: 268297
IP address blocks: 45.237.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 11:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:7c:65:c9:60:22:8e:38:93:d0:2a:89:56:fa:94:2e:78:74:19:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Validity
Not Before: Feb 9 13:06:22 2025 GMT
Not After : Feb 8 13:11:22 2026 GMT
Subject: CN=4C50820C750E9A9FB4CAECF745243A638BABBF52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:49:e9:10:7c:c4:a1:d8:49:3d:ae:69:85:
25:d5:b4:7f:77:80:bd:34:88:dd:c7:cc:93:59:c8:
a3:f9:0a:36:e8:3f:3b:c2:01:f0:54:c6:74:31:17:
31:95:56:de:e3:03:c0:00:e8:94:9e:a8:18:15:9f:
6f:ca:78:da:d2:34:4a:ef:68:0c:22:cc:e7:4a:26:
25:3a:bf:2e:fe:01:7b:8f:9d:a9:69:69:37:42:c7:
ae:a0:e7:29:0f:9f:59:64:dc:3d:b0:ce:66:0b:d5:
d4:df:d6:e0:d5:ea:6f:9b:3e:f5:e4:d7:36:25:4c:
23:4a:37:34:44:8c:34:33:04:45:0b:ef:41:7f:8d:
ee:d1:df:9e:09:59:af:b0:9a:14:7e:bb:43:35:94:
19:7d:07:f0:bc:df:b3:0b:f1:98:76:64:c1:be:91:
d3:56:14:e6:b7:74:c9:19:62:a1:2c:2a:e0:b0:6f:
eb:1f:e3:8f:f6:67:15:de:f0:80:e4:6a:ba:1e:79:
71:6e:f2:fc:84:87:41:86:68:30:86:ce:59:88:07:
e6:be:61:e2:db:c6:e6:66:5a:fa:aa:cf:63:cc:c1:
60:af:3e:40:be:59:d1:1b:1a:0e:15:75:48:1e:85:
85:9c:82:8c:88:e5:c7:ca:58:bb:ee:16:c7:81:02:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:50:82:0C:75:0E:9A:9F:B4:CA:EC:F7:45:24:3A:63:8B:AB:BF:52
X509v3 Authority Key Identifier:
keyid:38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3235312e302f32342d3234203d3e20323638323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.251.0/24
Signature Algorithm: sha256WithRSAEncryption
33:81:65:e7:e1:39:6e:75:1b:24:ef:84:ab:8b:a8:bb:dc:b4:
6f:58:3d:3c:3a:c6:6f:b8:6c:ee:da:47:aa:bd:5a:e3:96:1d:
2b:e5:83:44:94:e6:a7:5a:3b:2c:30:6c:fb:ae:4b:d1:8d:2a:
db:35:f9:a0:d0:b3:21:d6:8d:b9:2f:1b:59:d5:e4:14:84:f9:
7b:08:1d:02:87:e6:7c:7a:a4:41:b4:8d:41:31:67:18:c1:a3:
5e:18:0c:aa:66:08:68:1f:3f:c5:24:db:be:3f:bb:c2:aa:7d:
7d:04:30:ee:08:44:16:7a:27:3d:f4:38:53:7b:75:aa:39:e0:
1c:80:4a:4d:0c:8e:e7:37:cc:f6:a8:3f:e7:f7:50:e3:f1:33:
db:58:28:a6:0d:07:df:f7:ae:a9:92:21:e8:1f:7e:5e:26:8f:
60:91:48:e5:c2:2c:ac:8d:2e:9c:2b:78:7b:18:2b:44:f5:c6:
5b:12:b4:43:1e:3a:31:54:78:f9:04:c3:98:20:0e:1b:17:d6:
e5:10:c5:a8:a3:f8:e5:ef:87:b7:95:07:b4:d1:54:c4:c0:37:
d9:d6:1a:e2:1c:4c:b8:a9:db:4e:11:9c:e5:53:83:9f:62:15:
29:f9:0f:cf:02:1b:39:f1:86:70:f5:ec:fe:f1:71:70:c0:b6:
bb:c7:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:33:31 2025 by rpki-client