Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37302e302f32342d3234203d3e20323639333539.roa
File: 34352e3138342e37302e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier: itBdtt7MTnu3jCJ2lapkALXOU528E8M8WAC1hqzmz2c=
Subject key identifier: 24:7C:BB:DD:2E:FF:D2:B3:9E:EE:D4:C3:0C:54:9E:A8:B5:CC:58:1D
Certificate issuer: /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial: 6D86DCDC6EC138508AFAE876FB2926D3499F0CC4
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37302e302f32342d3234203d3e20323639333539.roa
Signing time: Wed 03 Sep 2025 16:41:12 +0000
ROA not before: Wed 03 Sep 2025 16:36:12 +0000
ROA not after: Wed 02 Sep 2026 16:41:12 +0000
asID: 269359
IP address blocks: 45.184.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Sep 2025 20:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:86:dc:dc:6e:c1:38:50:8a:fa:e8:76:fb:29:26:d3:49:9f:0c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Validity
Not Before: Sep 3 16:36:12 2025 GMT
Not After : Sep 2 16:41:12 2026 GMT
Subject: CN=247CBBDD2EFFD2B39EEED4C30C549EA8B5CC581D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:8c:61:e4:1e:55:d5:b3:5c:d9:93:ac:82:
10:47:dc:4a:4a:94:a7:9b:ee:fc:cb:cd:e9:89:04:
cf:be:64:51:b5:96:38:5b:43:10:81:ef:b1:45:e9:
48:65:0a:26:00:38:cb:21:bc:9d:41:ab:e2:e7:44:
72:4c:2d:16:da:cd:64:69:be:b0:ae:e7:fe:f7:cd:
62:f6:7c:a1:79:8d:6b:f4:4d:14:f2:5c:60:32:2c:
bf:19:6c:32:a4:df:eb:d9:fc:71:76:af:14:10:c0:
8a:91:c3:77:f7:63:82:8c:c1:8e:86:13:3b:61:5e:
13:54:0f:02:22:fb:91:ab:7f:88:bd:c0:16:22:23:
28:4c:18:0d:8b:ab:12:38:f8:bc:36:f8:45:b0:49:
b7:52:cc:c0:95:94:e6:29:04:47:bc:6f:51:1a:9d:
5d:5f:68:e4:40:36:bf:9d:b7:d8:19:4c:6c:c3:ed:
4e:47:70:36:78:f3:8d:a1:01:d9:52:80:e8:56:5b:
93:70:2f:83:9a:96:72:9c:0f:f9:ff:78:3a:11:8f:
51:74:c1:20:0c:62:14:11:72:19:e0:e1:3e:c2:7a:
74:b0:8a:7b:c4:5a:99:ed:dd:cc:3d:1a:15:af:34:
bc:91:c9:5a:b8:7b:1f:f6:d1:8c:4b:a0:c7:04:6c:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7C:BB:DD:2E:FF:D2:B3:9E:EE:D4:C3:0C:54:9E:A8:B5:CC:58:1D
X509v3 Authority Key Identifier:
keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37302e302f32342d3234203d3e20323639333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.184.70.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:48:9a:45:6b:e1:e3:fa:78:04:f9:a8:75:e1:16:79:cd:90:
81:f0:49:d7:3a:55:c2:e5:0e:e5:1d:ad:c0:b9:82:1a:f9:48:
2a:5e:f4:ad:95:d9:4f:82:41:1d:80:f9:c5:fc:3a:48:0b:3f:
be:13:06:f2:7b:52:ae:e3:94:24:87:4c:26:8d:00:7c:65:c7:
48:74:04:6c:3c:24:ff:15:d0:e0:59:b2:51:47:4b:08:06:a3:
af:ab:44:a4:bd:89:c4:95:f1:91:ed:e7:83:ba:2f:c6:8c:52:
fe:50:aa:c5:d8:3a:88:fc:e1:85:e2:43:32:8e:d1:36:a1:f5:
66:8b:d0:88:8b:d0:3d:08:de:24:d3:de:56:58:5a:1e:11:17:
85:41:66:c0:46:c9:5f:a9:5d:64:91:35:df:0e:23:bc:2e:b1:
17:1a:69:47:84:fa:6c:b1:e0:65:6b:af:58:e2:99:10:fb:b3:
d5:dd:4e:3b:fc:01:c5:06:d3:40:06:1f:f2:3e:d7:b8:d5:04:
19:42:a7:bd:c7:e7:0b:8b:b5:79:c3:9f:83:5c:c9:e7:fe:f9:
64:fa:3c:30:01:32:40:15:e1:e9:17:7f:ff:b1:99:ca:b8:76:
b8:57:45:a8:6c:70:7f:b6:f4:eb:74:aa:94:2b:27:ac:74:d9:
a2:7f:ab:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:53:18 2025 by rpki-client