Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32342d3234203d3e20323639333539.roa
File: 34352e3233302e38342e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier: d3HcwOgqEX0nzi1Bk/410NyRcpVn5NmBV9eNdNN+PqQ=
Subject key identifier: 08:D9:74:F3:49:AB:B5:7E:F6:86:F5:E7:63:05:F6:F7:C2:E5:78:E9
Certificate issuer: /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial: 6E06E2BFC3FD5FA419C716D6270A82E1DB245BDA
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32342d3234203d3e20323639333539.roa
Signing time: Wed 03 Sep 2025 16:47:31 +0000
ROA not before: Wed 03 Sep 2025 16:42:31 +0000
ROA not after: Wed 02 Sep 2026 16:47:31 +0000
asID: 269359
IP address blocks: 45.230.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Sep 2025 20:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:06:e2:bf:c3:fd:5f:a4:19:c7:16:d6:27:0a:82:e1:db:24:5b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Validity
Not Before: Sep 3 16:42:31 2025 GMT
Not After : Sep 2 16:47:31 2026 GMT
Subject: CN=08D974F349ABB57EF686F5E76305F6F7C2E578E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:39:ab:f0:63:13:6a:b7:b2:3c:eb:bb:8d:b7:
3d:a4:74:41:3c:87:d1:0a:d0:89:3c:74:d4:91:0a:
79:30:53:d6:5e:10:4b:a7:9e:82:b2:84:08:ca:42:
78:c1:db:a4:7d:41:75:d8:4b:43:50:5b:13:23:b5:
55:b9:45:19:dc:22:b1:00:9b:da:23:96:7c:50:e9:
17:c4:dd:d1:c8:be:c2:02:f3:53:cf:08:c1:fc:22:
72:6f:e3:8d:ef:eb:57:66:41:16:7f:01:f7:89:92:
84:55:ba:03:6d:71:be:e6:14:55:25:20:a3:f9:6f:
47:37:ba:98:64:c9:47:10:cd:c6:2e:01:50:5a:f9:
7c:8c:ee:4f:de:5e:7e:b7:eb:b7:0c:36:b8:f3:08:
53:aa:eb:71:02:c8:21:80:ec:a5:a1:62:a1:fb:83:
78:6c:d8:c1:6e:be:72:a3:7a:3a:43:c4:74:37:5c:
7a:f6:29:cf:31:ed:96:8c:b1:cf:cd:ab:ab:ed:2d:
cd:e5:5b:85:a2:0e:60:79:9b:6f:da:f9:e2:b2:06:
c2:d2:05:19:46:fb:29:d6:ab:bf:8d:b8:34:55:df:
96:64:5c:6b:c6:5f:f3:5e:94:13:88:12:90:09:86:
7c:a4:a3:32:a4:02:61:e3:cd:38:dd:52:ae:fa:c9:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D9:74:F3:49:AB:B5:7E:F6:86:F5:E7:63:05:F6:F7:C2:E5:78:E9
X509v3 Authority Key Identifier:
keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32342d3234203d3e20323639333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.84.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:8b:26:99:9d:9b:8d:f5:3a:15:a0:75:b7:62:7b:7d:26:de:
ce:a8:9a:30:56:b1:ff:95:86:fd:2a:5a:12:7e:9d:bd:32:a4:
5c:66:c3:74:6a:9d:ed:93:ff:e7:89:8e:f8:84:d3:61:bf:75:
db:1c:d5:dc:be:16:ca:28:0b:30:32:9f:30:ec:19:57:74:68:
4c:de:e2:79:35:3b:73:aa:1e:63:0b:24:32:30:b9:78:0d:1c:
ac:e7:e7:83:89:0e:56:96:cf:7d:ea:28:04:f8:6f:dc:a9:a4:
fd:e9:eb:33:45:49:fb:e2:76:6a:87:5d:23:c4:86:ca:5b:66:
8c:6a:bc:a0:1b:36:f8:b3:d9:59:a2:64:a6:b6:03:9b:8d:0e:
82:c0:8a:7f:c0:52:6f:20:fa:a0:c1:39:6f:7b:a2:a1:ed:b7:
13:b4:7a:11:d9:8a:fa:d0:a5:36:32:70:20:19:15:63:3b:aa:
50:9f:19:7c:07:3b:b0:69:ad:68:1f:ad:8e:9f:0f:87:73:44:
0f:e5:3b:6a:7f:dd:90:93:ef:e7:ee:86:0c:76:5a:f7:5a:fa:
fa:c2:a7:87:d5:b0:f1:48:d7:42:19:d4:f3:14:de:19:c7:4e:
3a:5b:cd:76:61:f2:39:58:c0:2f:ca:5a:6b:1d:10:32:38:18:
38:c3:37:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:54:43 2025 by rpki-client