Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37312e302f32342d3234203d3e20323639333539.roa
File: 34352e3138342e37312e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier: BtHTzX8IMbA8fNe2618HOyoRDKHYykOH0oyUQpjkC2w=
Subject key identifier: 96:F0:1C:6E:D0:88:E1:7A:8A:16:94:F1:E3:BE:AB:EA:8F:BE:04:66
Certificate issuer: /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial: 04BA658DA2A6596F8962801F16D0F07B8490D5F1
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37312e302f32342d3234203d3e20323639333539.roa
Signing time: Wed 03 Sep 2025 16:41:13 +0000
ROA not before: Wed 03 Sep 2025 16:36:13 +0000
ROA not after: Wed 02 Sep 2026 16:41:13 +0000
asID: 269359
IP address blocks: 45.184.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Sep 2025 20:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ba:65:8d:a2:a6:59:6f:89:62:80:1f:16:d0:f0:7b:84:90:d5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Validity
Not Before: Sep 3 16:36:13 2025 GMT
Not After : Sep 2 16:41:13 2026 GMT
Subject: CN=96F01C6ED088E17A8A1694F1E3BEABEA8FBE0466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:0c:52:32:b6:68:54:dd:c8:2c:96:2d:f6:
e8:41:cc:64:ef:45:30:de:83:44:c4:d5:46:c7:44:
82:16:be:a2:30:be:bf:2b:f2:83:12:1b:18:65:76:
9e:5a:18:c3:5b:b4:c4:dd:38:4a:4a:86:6d:57:ea:
a7:e7:ba:ed:f9:9b:49:eb:b5:48:d0:3e:98:dc:a9:
0f:da:f5:87:7d:d3:b7:0e:ab:b1:e3:e5:1d:8a:15:
ef:f1:8c:fe:5d:fe:ea:55:c2:3e:16:2c:7e:21:91:
d6:00:0c:1e:4c:ac:27:69:cc:7d:20:68:bf:6f:14:
1b:74:3c:ab:45:02:66:dc:a6:f2:79:fa:4d:35:e2:
01:b7:f2:5e:ce:d6:8c:97:e0:99:af:ab:19:2f:fb:
29:6d:e9:69:6e:ec:9c:6e:33:db:a0:2f:a0:a3:7d:
b3:e5:16:fa:a1:a3:88:c3:83:07:94:31:a4:52:e6:
54:c0:9d:e7:88:5b:19:3d:f7:84:85:b0:cb:45:d7:
73:02:ab:8d:8e:c6:22:12:94:f5:ac:c9:73:3e:49:
7b:e3:9f:00:26:ab:31:be:49:32:0d:34:59:83:73:
b9:a6:f0:76:d7:41:f3:8c:d0:7f:4e:7a:0f:12:f8:
6a:9c:71:4a:38:ce:62:df:3b:82:cd:b5:fc:05:b5:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:1C:6E:D0:88:E1:7A:8A:16:94:F1:E3:BE:AB:EA:8F:BE:04:66
X509v3 Authority Key Identifier:
keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37312e302f32342d3234203d3e20323639333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.184.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e2:dc:bb:5c:7e:42:6e:dc:4a:8b:81:35:14:c0:05:1e:b2:
34:fe:b3:e2:23:6a:36:88:bb:a0:e2:e1:91:0b:30:79:84:9d:
36:db:37:b6:4c:08:6e:da:a8:9a:d8:44:af:a9:64:66:19:82:
ef:5d:63:c4:19:57:cd:6c:c9:72:c5:04:13:d3:35:c6:29:08:
4a:57:3d:a3:2d:5d:9a:a7:de:85:51:32:9d:e7:16:99:31:b7:
bf:59:39:a5:b7:0b:f6:0d:b9:cb:8a:2a:79:b6:4c:30:a6:20:
2f:ec:73:63:b5:60:be:65:09:51:a3:ae:25:29:dd:a7:73:7b:
44:e6:07:4e:fc:2b:85:ab:f8:cd:66:1d:a3:86:75:6e:a0:55:
ba:63:c4:14:73:3a:98:14:9a:9c:b7:b2:cf:c7:32:cf:77:b6:
7c:74:e1:b5:65:66:43:09:05:b5:c2:25:80:17:d4:fe:a6:ce:
44:b7:5f:79:e9:8c:60:87:b1:fe:c9:53:d2:40:8c:f4:7a:49:
cc:78:97:f4:51:88:e0:e2:04:7e:f0:f5:a2:43:fe:04:36:72:
bb:55:b6:db:38:7e:14:ca:de:92:ee:39:86:33:e6:01:f1:64:
97:01:3e:11:40:2d:ce:4e:60:59:50:64:fe:7c:fd:21:b2:96:
52:d1:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:53:13 2025 by rpki-client