Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135372e302f32342d3234203d3e20323638363332.roa
File: 34352e3136342e3135372e302f32342d3234203d3e20323638363332.roa (raw, json)
Hash identifier: YgKU6uSbtAf8pmD0PNHlQ188utZ7ZZ+0UU2JJT632+w=
Subject key identifier: FB:AD:D2:DB:EE:BC:B8:7E:EA:25:76:BD:13:05:67:AD:A5:01:AD:66
Certificate issuer: /CN=4F9A7B1115D45ADCE7E844980106788B7969390B
Certificate serial: 3BFAD129615AF0D5BDE0B62D1EAFA7B6C8A972A8
Authority key identifier: 4F:9A:7B:11:15:D4:5A:DC:E7:E8:44:98:01:06:78:8B:79:69:39:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9A7B1115D45ADCE7E844980106788B7969390B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135372e302f32342d3234203d3e20323638363332.roa
Signing time: Thu 26 Jun 2025 18:13:54 +0000
ROA not before: Thu 26 Jun 2025 18:08:54 +0000
ROA not after: Thu 25 Jun 2026 18:13:54 +0000
asID: 268632
IP address blocks: 45.164.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 14:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:fa:d1:29:61:5a:f0:d5:bd:e0:b6:2d:1e:af:a7:b6:c8:a9:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F9A7B1115D45ADCE7E844980106788B7969390B
Validity
Not Before: Jun 26 18:08:54 2025 GMT
Not After : Jun 25 18:13:54 2026 GMT
Subject: CN=FBADD2DBEEBCB87EEA2576BD130567ADA501AD66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:3c:a5:e0:9d:e9:41:35:0c:20:e5:3f:24:
f6:ad:84:db:af:54:4c:15:14:fa:1a:be:af:e1:40:
be:07:c4:8c:66:0e:65:76:ac:d1:bf:04:32:b3:8f:
d0:47:2e:7e:45:8c:2e:87:4d:01:2c:94:7a:ff:78:
0f:ed:3b:aa:59:cd:c9:65:96:00:51:fa:d9:cd:11:
2d:ce:67:9a:b7:97:e8:5d:73:fa:a0:f5:25:f2:14:
91:2c:a9:eb:2b:6c:22:2f:1c:b5:2f:10:b5:57:a4:
df:77:cb:5c:e6:42:0d:f0:3e:7b:f2:fa:d0:f6:39:
eb:d5:f0:d6:a7:80:e0:d4:73:cc:82:73:dc:38:6f:
41:70:34:d4:18:21:3b:8f:3b:a0:5e:42:b8:da:db:
09:ce:f7:67:b7:9c:f6:ae:82:a0:32:18:83:ac:45:
ba:2a:e2:b3:a6:46:3e:66:5c:9a:0f:7e:d1:8f:5c:
ad:54:38:ad:c2:cf:30:d3:f7:64:dd:cd:5a:7a:3e:
88:bf:3d:a7:12:a1:38:7b:41:53:56:dd:12:70:82:
99:a9:57:c3:8a:78:26:80:59:de:6f:4c:a3:34:ab:
2c:4f:a1:24:05:5a:4c:04:60:be:d4:33:48:b5:89:
c2:0c:ad:cd:9c:c4:0c:31:fc:45:d3:63:47:71:51:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AD:D2:DB:EE:BC:B8:7E:EA:25:76:BD:13:05:67:AD:A5:01:AD:66
X509v3 Authority Key Identifier:
keyid:4F:9A:7B:11:15:D4:5A:DC:E7:E8:44:98:01:06:78:8B:79:69:39:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/4F9A7B1115D45ADCE7E844980106788B7969390B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9A7B1115D45ADCE7E844980106788B7969390B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135372e302f32342d3234203d3e20323638363332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.157.0/24
Signature Algorithm: sha256WithRSAEncryption
88:17:1e:45:e8:be:5b:3a:56:59:be:c8:74:69:ee:4c:48:59:
c1:68:b9:d7:fd:d0:b0:0c:85:0a:bd:16:77:1b:7a:d0:22:66:
0c:4a:a5:b3:ec:1e:08:75:99:77:05:6c:2a:b0:9d:33:d4:e3:
db:31:2e:a8:04:ea:79:b0:95:52:ce:a7:8f:46:24:73:7c:a7:
79:7f:51:63:4c:45:3c:b4:04:b1:16:79:26:45:f1:bb:ad:49:
29:56:a5:8d:81:2f:e9:d0:61:40:36:2e:39:ca:bb:42:47:ed:
08:23:57:e4:db:c8:16:2b:bb:5f:13:bf:e2:80:e7:45:2c:c8:
e2:b0:8b:ea:16:d1:54:e1:9c:f1:ed:a7:19:45:93:a3:8d:b2:
cb:9b:b9:2a:9c:4e:71:eb:fb:76:b1:ef:c1:cb:ad:ca:36:53:
80:90:93:a3:b2:ab:09:62:5f:ab:12:ab:67:11:1c:ab:f8:90:
ed:3a:89:ea:6a:37:d1:c7:7c:e6:ca:a4:a5:ea:2a:80:45:54:
cd:6a:b8:f9:96:57:38:3c:69:11:73:1f:13:8c:42:02:b3:d9:
f0:d7:42:20:c1:eb:e2:9e:54:9e:f0:13:dc:85:d9:24:41:5a:
a2:23:b0:42:30:27:55:be:85:24:b1:2b:4a:f0:f3:ad:45:50:
f6:e7:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:28:03 2025 by rpki-client