Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135382e302f32342d3234203d3e20323638363332.roa
File: 34352e3136342e3135382e302f32342d3234203d3e20323638363332.roa (raw, json)
Hash identifier: TbCljTprR53XiQgQNEgG4fuMBledZoVh87VuugGbu/Q=
Subject key identifier: 3C:F9:EC:25:B5:42:1D:09:83:17:8A:EC:23:4D:C3:C1:70:CD:A5:68
Certificate issuer: /CN=4F9A7B1115D45ADCE7E844980106788B7969390B
Certificate serial: 4B9C69A568A4AE82BAD8D8D4913D259D5F179FD1
Authority key identifier: 4F:9A:7B:11:15:D4:5A:DC:E7:E8:44:98:01:06:78:8B:79:69:39:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9A7B1115D45ADCE7E844980106788B7969390B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135382e302f32342d3234203d3e20323638363332.roa
Signing time: Thu 26 Jun 2025 18:13:54 +0000
ROA not before: Thu 26 Jun 2025 18:08:54 +0000
ROA not after: Thu 25 Jun 2026 18:13:54 +0000
asID: 268632
IP address blocks: 45.164.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 14:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:9c:69:a5:68:a4:ae:82:ba:d8:d8:d4:91:3d:25:9d:5f:17:9f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F9A7B1115D45ADCE7E844980106788B7969390B
Validity
Not Before: Jun 26 18:08:54 2025 GMT
Not After : Jun 25 18:13:54 2026 GMT
Subject: CN=3CF9EC25B5421D0983178AEC234DC3C170CDA568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:78:6b:3c:57:da:bd:a8:6d:e0:ea:77:e1:
f0:9f:0d:b0:70:f5:8b:83:05:5b:e1:03:e4:cd:95:
2b:a9:f0:1c:e9:c9:e9:63:8e:16:b3:f4:27:93:86:
a6:42:45:0c:a1:7d:99:ad:5a:7f:3c:09:d6:6f:1f:
30:c1:d8:0d:6c:b9:e5:4d:ef:40:30:c0:e7:66:f3:
e4:ed:58:5a:85:ed:99:a8:8d:1b:55:b7:4c:db:30:
f1:12:49:00:10:49:c4:75:92:e7:1f:4d:cf:96:15:
b7:aa:c0:ed:cf:de:3e:43:e8:67:3b:30:94:49:c9:
49:a2:43:75:3e:c9:6b:af:8e:06:28:34:28:ad:03:
df:5e:78:1a:93:7f:b5:a2:42:b5:0b:5f:6a:87:93:
51:5f:99:c5:e2:d5:58:fd:b6:5a:5a:87:a3:1a:d1:
7e:6b:48:12:f5:e3:07:bf:80:3e:13:80:59:9f:22:
25:90:2b:2f:83:d8:43:b8:a3:a0:41:e2:8d:27:9d:
32:a8:59:0c:3f:da:64:96:45:47:12:c0:56:af:c8:
46:f7:63:3f:82:69:4a:28:e4:d1:e2:bd:15:d2:4d:
8a:70:2f:bd:1c:e3:75:52:24:b4:a3:fa:37:cc:4e:
2b:5a:6d:d4:95:f1:0f:6e:7a:7c:51:bb:e1:dd:a1:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:EC:25:B5:42:1D:09:83:17:8A:EC:23:4D:C3:C1:70:CD:A5:68
X509v3 Authority Key Identifier:
keyid:4F:9A:7B:11:15:D4:5A:DC:E7:E8:44:98:01:06:78:8B:79:69:39:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/4F9A7B1115D45ADCE7E844980106788B7969390B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9A7B1115D45ADCE7E844980106788B7969390B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135382e302f32342d3234203d3e20323638363332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.158.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b5:94:e6:1b:46:b7:57:ab:1f:42:40:fd:38:d0:dd:02:35:
ff:e4:95:5a:50:8b:e4:60:8e:0d:6f:69:9c:70:38:f3:78:4b:
b0:cd:5f:5a:c6:8a:d6:44:ae:71:90:43:8e:09:d0:26:c4:5b:
9a:f5:4b:6c:65:21:02:aa:59:f8:57:1f:df:5c:aa:3d:76:dd:
0a:de:0e:f9:a8:74:d3:a6:93:12:7d:0e:52:5d:17:98:1a:69:
20:07:a6:38:90:1b:c8:46:9e:fa:23:97:4a:25:f3:cc:19:72:
e3:b6:95:0f:63:45:96:1d:ec:ad:2b:36:f1:96:88:6e:d0:19:
1f:be:e2:85:ce:65:3e:92:6f:26:a1:6d:44:75:17:82:de:fb:
58:20:70:72:45:1c:0e:1a:b6:af:77:de:b6:d8:86:05:0a:34:
25:56:08:ca:0e:c9:14:91:25:cf:8a:75:94:9c:fb:5d:77:bd:
13:8d:dc:ca:53:6d:cb:d1:a9:17:f7:59:89:28:b5:90:62:5a:
54:1f:7d:26:7e:11:13:3a:af:69:ac:69:08:59:46:51:22:55:
45:23:02:9d:8b:47:d6:a9:c1:d8:49:ca:b2:fe:64:fa:62:84:
e7:fb:55:6e:3e:b4:5f:20:a6:e8:af:85:b1:10:3d:a3:d2:46:
7b:1d:e9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:37:34 2025 by rpki-client