Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32322d3234203d3e20323637353536.roa
File: 34352e37302e302e302f32322d3234203d3e20323637353536.roa (raw, json)
Hash identifier: Bbx7PZHtofJ6ZW6uUaVWAEikleEcUpIrIGAx3Pfiggo=
Subject key identifier: F3:C2:7B:5D:8E:E6:66:05:DF:52:5F:7E:6B:B8:12:59:96:6B:66:CB
Certificate issuer: /CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E
Certificate serial: 7C826E7232B8DAC61C315D9AB551FA6A1CC257E8
Authority key identifier: 23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32322d3234203d3e20323637353536.roa
Signing time: Mon 31 Mar 2025 13:35:16 +0000
ROA not before: Mon 31 Mar 2025 13:30:16 +0000
ROA not after: Mon 30 Mar 2026 13:35:16 +0000
asID: 267556
IP address blocks: 45.70.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 12:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:82:6e:72:32:b8:da:c6:1c:31:5d:9a:b5:51:fa:6a:1c:c2:57:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E
Validity
Not Before: Mar 31 13:30:16 2025 GMT
Not After : Mar 30 13:35:16 2026 GMT
Subject: CN=F3C27B5D8EE66605DF525F7E6BB81259966B66CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:cf:0e:d7:4f:12:4d:ff:e5:dd:6c:dc:54:
68:5c:6c:9b:10:c4:f9:88:05:20:a7:17:84:15:b6:
4f:31:15:fc:80:ed:2a:0d:77:72:3a:c9:3c:0b:8e:
f3:81:d8:b5:82:4a:fc:e7:70:46:13:63:95:dd:c7:
ee:78:5c:50:d9:f8:4b:61:d2:07:dc:3e:5c:11:7e:
3b:25:15:c4:3a:51:ca:d6:3a:ed:22:d4:a7:fe:60:
1c:b5:aa:5e:23:a8:ab:49:85:d3:8b:20:32:5f:9e:
a6:de:ac:6a:8d:11:2c:48:d7:9d:87:f9:98:94:a8:
96:38:ba:58:c6:33:a2:73:d3:03:e9:c7:82:53:ef:
bf:76:4e:1c:14:3d:a9:24:db:13:81:95:b0:6a:c7:
3f:1c:03:62:7f:eb:93:00:23:e1:73:3b:08:f6:fa:
9e:bd:5b:1d:10:1f:2b:1c:e5:10:f3:43:f8:4a:10:
93:85:44:a7:a9:b1:88:ef:7f:11:97:2e:c7:da:0c:
bc:92:f6:a3:c1:40:e7:4d:8c:2e:d4:91:b9:a2:ce:
01:50:86:70:84:a1:d9:3e:55:8e:d4:6a:d1:d8:4b:
b0:41:fa:98:10:4b:d1:fe:f7:2f:de:85:37:96:b8:
1b:1e:4f:2c:18:75:ca:e0:96:54:77:ef:2f:e8:4d:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:7B:5D:8E:E6:66:05:DF:52:5F:7E:6B:B8:12:59:96:6B:66:CB
X509v3 Authority Key Identifier:
keyid:23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32322d3234203d3e20323637353536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.0.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:57:77:2e:d7:12:be:31:5a:80:60:e9:12:ec:ff:c2:13:0f:
20:83:72:21:87:17:5e:c0:0f:7e:b8:b4:13:15:e8:b3:a9:a1:
ae:4b:e0:5c:3e:85:cd:37:21:4e:de:bc:e1:f8:84:d8:cb:09:
f9:ef:72:f2:e9:ca:be:2a:af:6c:5e:47:ea:3e:99:c5:c4:c3:
e8:7c:17:c7:ae:15:23:52:59:bb:ae:4b:b6:db:57:16:84:73:
62:4e:2a:c2:6c:4c:31:c5:ff:81:d1:10:dc:f4:e3:a5:34:e8:
a1:dd:ec:80:69:fa:6b:67:60:ee:0e:f0:4d:b6:88:97:d5:4d:
b1:4e:33:ee:7a:4b:46:46:eb:e6:16:f2:23:da:53:9e:9e:5c:
3e:71:c1:ff:9f:cc:51:ca:57:00:5c:86:e2:54:50:3e:b3:30:
f6:47:3b:cd:72:c9:da:ee:49:41:ab:3e:a1:ba:ad:bd:e1:cd:
46:fb:1d:bf:b9:3a:b7:89:7f:16:fa:77:c4:ed:45:d0:d9:b2:
6b:2e:bb:42:40:65:a0:61:e8:9e:d7:e2:2e:05:e3:3b:c8:aa:
50:0d:34:74:19:71:b5:11:40:c8:bf:04:38:71:32:5f:49:bb:
b6:f2:e5:7e:9f:c3:c8:49:5f:50:c7:52:ba:f0:77:3b:b8:04:
a6:7e:c4:36
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUfIJucjK42sYcMV2atVH6ahzCV+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM4M0IzQUZBMzVBREIyQTM2MzhBOUYyQUUwRDlDMjdB
RkI1QzUwRTAeFw0yNTAzMzExMzMwMTZaFw0yNjAzMzAxMzM1MTZaMDMxMTAvBgNV
BAMTKEYzQzI3QjVEOEVFNjY2MDVERjUyNUY3RTZCQjgxMjU5OTY2QjY2Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4s8O108STf/l3WzcVGhcbJsQ
xPmIBSCnF4QVtk8xFfyA7SoNd3I6yTwLjvOB2LWCSvzncEYTY5Xdx+54XFDZ+Eth
0gfcPlwRfjslFcQ6UcrWOu0i1Kf+YBy1ql4jqKtJhdOLIDJfnqberGqNESxI152H
+ZiUqJY4uljGM6Jz0wPpx4JT7792ThwUPakk2xOBlbBqxz8cA2J/65MAI+FzOwj2
+p69Wx0QHysc5RDzQ/hKEJOFRKepsYjvfxGXLsfaDLyS9qPBQOdNjC7UkbmizgFQ
hnCEodk+VY7UatHYS7BB+pgQS9H+9y/ehTeWuBseTywYdcrgllR37y/oTXdnAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU88J7XY7mZgXfUl9+a7gSWZZrZsswHwYDVR0j
BBgwFoAUI4Ozr6Na2yo2OKnyrg2cJ6+1xQ4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FeVlkdWRFdGZzRlBIOGJ0V2RXYWNQelMzNTNnb1RrSDR2Rjdkc0dBVTN4
LzAvMjM4M0IzQUZBMzVBREIyQTM2MzhBOUYyQUUwRDlDMjdBRkI1QzUwRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMzgzQjNBRkEzNUFEQjJBMzYz
OEE5RjJBRTBEOUMyN0FGQjVDNTBFLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
eVlkdWRFdGZzRlBIOGJ0V2RXYWNQelMzNTNnb1RrSDR2Rjdkc0dBVTN4LzAvMzQz
NTJlMzczMDJlMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzczNTM1MzYu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAItRgAwDQYJKoZIhvcNAQELBQADggEBAEtXdy7XEr4xWoBg6RLs
/8ITDyCDciGHF17AD364tBMV6LOpoa5L4Fw+hc03IU7evOH4hNjLCfnvcvLpyr4q
r2xeR+o+mcXEw+h8F8euFSNSWbuuS7bbVxaEc2JOKsJsTDHF/4HRENz046U06KHd
7IBp+mtnYO4O8E22iJfVTbFOM+56S0ZG6+YW8iPaU56eXD5xwf+fzFHKVwBchuJU
UD6zMPZHO81yydruSUGrPqG6rb3hzUb7Hb+5OreJfxb6d8TtRdDZsmsuu0JAZaBh
6J7X4i4F4zvIqlANNHQZcbURQMi/BDhxMl9Ju7by5X6fw8hJX1DHUrrwdzu4BKZ+
xDY=
-----END CERTIFICATE-----
Generated at Fri Apr 18 04:44:29 2025 by rpki-client