Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234392e302f32342d3234203d3e20323639333539.roa
File: 3136382e3139342e3234392e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier: QGFH4XTbq17LFoIDy/S64lXlRTFvMsjUfNlEInc3Jyg=
Subject key identifier: 8E:F1:2A:8F:67:B1:1E:53:D7:E2:13:41:40:F6:13:89:F7:C4:8C:B5
Certificate issuer: /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial: 0A8346752381DDB89DDE22CC6B84FC8CD950F61D
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234392e302f32342d3234203d3e20323639333539.roa
Signing time: Wed 03 Sep 2025 16:41:12 +0000
ROA not before: Wed 03 Sep 2025 16:36:12 +0000
ROA not after: Wed 02 Sep 2026 16:41:12 +0000
asID: 269359
IP address blocks: 168.194.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Sep 2025 20:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:83:46:75:23:81:dd:b8:9d:de:22:cc:6b:84:fc:8c:d9:50:f6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Validity
Not Before: Sep 3 16:36:12 2025 GMT
Not After : Sep 2 16:41:12 2026 GMT
Subject: CN=8EF12A8F67B11E53D7E2134140F61389F7C48CB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:5c:b5:97:8a:71:2a:f7:e0:9c:86:a5:cb:
8e:1c:3f:2a:41:28:0d:b6:a6:66:59:49:93:3f:71:
83:47:ec:eb:67:da:ce:46:00:98:9c:aa:a4:26:29:
f9:f2:4a:46:4b:82:88:a6:c4:9f:4c:50:bb:49:39:
9c:da:2c:53:b4:8b:86:e4:57:67:51:b5:5e:27:78:
3b:fd:da:64:c2:20:ca:6f:f0:dd:a2:ec:00:5d:a3:
0b:78:a6:9b:d3:0e:1e:d2:e2:ae:18:32:e1:d3:14:
bb:83:78:c0:ed:a6:ae:c1:8a:d2:0c:a8:47:89:77:
fc:11:71:ae:1a:53:f2:da:e3:50:81:20:f5:be:02:
71:48:81:a3:f8:12:bc:72:e6:8e:4e:ce:fd:d0:24:
77:8b:09:7e:48:40:a6:92:54:b4:f9:9a:6f:72:da:
3c:27:c1:7e:d2:b4:12:dd:68:14:76:b7:b1:b9:a7:
98:c8:28:cc:c3:20:71:df:76:06:b3:f1:51:5b:08:
ab:dd:18:50:e1:4d:0e:f7:70:c7:ab:23:41:37:27:
2b:09:34:d4:17:d8:37:e3:78:40:ce:7c:86:ef:f3:
06:35:e9:96:ab:33:b4:d3:63:d2:d7:3b:b7:91:10:
36:4f:8f:fe:b0:39:87:eb:58:23:3b:9c:e6:0b:29:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F1:2A:8F:67:B1:1E:53:D7:E2:13:41:40:F6:13:89:F7:C4:8C:B5
X509v3 Authority Key Identifier:
keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234392e302f32342d3234203d3e20323639333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.249.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f6:fe:0b:3f:f0:3e:38:15:1d:c0:5f:6b:0c:55:ec:f7:35:
24:66:4c:36:84:39:4f:17:3e:97:53:2a:f4:63:a2:df:bb:66:
09:f4:5c:2e:6c:58:bd:ab:02:7d:3a:2b:fe:db:28:40:aa:90:
81:f5:88:16:43:d9:da:10:5e:ac:09:26:a5:e9:6d:fb:ed:62:
0f:1c:9d:8f:39:3c:b3:ab:8c:4d:06:2d:57:56:fc:40:56:ee:
4f:20:f6:44:20:64:4c:85:e5:ff:30:08:12:38:82:44:36:fb:
3f:7f:01:62:a3:13:19:4b:01:67:92:46:39:d1:63:ad:02:d7:
a1:03:7f:91:b3:56:96:1a:8b:44:9e:29:3a:9e:0a:e9:e2:50:
db:0e:6b:e4:a6:da:9d:d7:54:a8:2e:03:88:4c:23:86:61:fe:
41:d1:b0:da:d4:23:42:77:3d:9c:6c:2b:82:3c:94:07:3c:1f:
84:f0:06:89:17:38:00:3b:e1:46:00:73:0d:cc:46:87:72:0c:
0e:1d:6e:9b:54:60:4f:6d:a4:83:ce:ff:fe:32:73:a2:11:fc:
8a:fc:36:04:cf:63:e4:4c:49:3a:a7:c3:d2:c5:60:84:c8:a6:
df:2a:8d:da:a5:61:f2:5e:b7:fb:e0:fd:a6:0d:29:92:fa:2e:
04:a1:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:52:58 2025 by rpki-client