Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135392e302f32342d3234203d3e20323638363332.roa
File: 34352e3136342e3135392e302f32342d3234203d3e20323638363332.roa (raw, json)
Hash identifier: crmqmbMXKVTmOixly7589pHaDN/54nE6oexnx0wvMZg=
Subject key identifier: C4:54:41:97:AD:C8:6C:5C:3B:48:87:4D:5C:1A:55:12:F6:CF:CE:9A
Certificate issuer: /CN=4F9A7B1115D45ADCE7E844980106788B7969390B
Certificate serial: 62D5D55820E7BA9E6E9486B5E8A9BCE8860FE47E
Authority key identifier: 4F:9A:7B:11:15:D4:5A:DC:E7:E8:44:98:01:06:78:8B:79:69:39:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9A7B1115D45ADCE7E844980106788B7969390B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135392e302f32342d3234203d3e20323638363332.roa
Signing time: Thu 26 Jun 2025 18:13:54 +0000
ROA not before: Thu 26 Jun 2025 18:08:54 +0000
ROA not after: Thu 25 Jun 2026 18:13:54 +0000
asID: 268632
IP address blocks: 45.164.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 14:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d5:d5:58:20:e7:ba:9e:6e:94:86:b5:e8:a9:bc:e8:86:0f:e4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F9A7B1115D45ADCE7E844980106788B7969390B
Validity
Not Before: Jun 26 18:08:54 2025 GMT
Not After : Jun 25 18:13:54 2026 GMT
Subject: CN=C4544197ADC86C5C3B48874D5C1A5512F6CFCE9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c3:36:fa:7c:7e:c7:55:31:ba:b4:2b:34:07:
27:2b:83:f2:24:2b:76:a0:21:e5:0e:80:cf:51:15:
99:44:dc:7d:86:a3:4d:de:0f:5e:34:a3:1e:56:85:
e7:42:d9:63:e7:4a:99:2f:b1:29:71:9c:cc:32:57:
3a:a1:f7:d3:88:a1:7f:fc:18:de:03:44:51:d5:e2:
41:b8:31:81:5a:19:0c:74:cb:8c:d1:9d:da:3f:64:
09:65:d1:c5:01:18:d4:2d:3c:ac:02:6a:bf:de:cd:
1b:f9:47:7d:15:b7:c6:28:c8:e6:fb:20:e0:12:b7:
d5:cc:b3:e5:4f:4d:e6:07:e8:79:44:fe:fe:32:15:
9a:68:74:07:1e:d2:74:d3:38:6d:ff:75:9b:61:d1:
95:37:ba:a9:a4:2e:ad:8f:99:1c:9d:96:c9:73:06:
0e:03:02:fb:3f:8c:8e:bf:86:1f:13:31:bb:49:7c:
b1:d5:1c:c4:d7:fb:bf:3b:be:64:bf:6f:4f:b1:25:
d7:64:a9:15:74:7b:d0:96:93:e7:db:91:73:e3:1e:
5e:9b:ce:af:3c:3a:c0:d1:5c:50:2c:87:d7:9d:4f:
5e:1c:5b:5d:d7:2a:2d:9f:1d:2f:0a:7f:9a:32:5c:
ce:94:17:85:e9:e7:e0:72:f4:4f:8d:15:67:7c:6f:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:54:41:97:AD:C8:6C:5C:3B:48:87:4D:5C:1A:55:12:F6:CF:CE:9A
X509v3 Authority Key Identifier:
keyid:4F:9A:7B:11:15:D4:5A:DC:E7:E8:44:98:01:06:78:8B:79:69:39:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/4F9A7B1115D45ADCE7E844980106788B7969390B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9A7B1115D45ADCE7E844980106788B7969390B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135392e302f32342d3234203d3e20323638363332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.159.0/24
Signature Algorithm: sha256WithRSAEncryption
be:71:a1:48:53:9f:3c:93:0d:89:29:76:58:46:52:31:e2:61:
93:43:0d:49:10:bc:a0:39:0c:3d:3c:45:47:cd:fe:da:d0:cb:
b8:35:60:b3:75:97:b7:2a:6a:f6:4b:60:1b:b9:08:4d:18:61:
4a:86:37:c0:32:2d:4d:5d:40:80:0b:af:af:6a:d3:fd:b7:c6:
7a:2e:04:0b:45:e6:98:7e:7b:39:93:b6:c3:27:85:c9:ff:d9:
dc:68:8d:6e:37:47:8a:f9:38:53:de:75:c1:48:b0:d9:d9:8e:
b8:03:5c:bf:55:ef:3c:89:d9:98:e0:95:72:fc:a5:9a:8c:51:
1b:43:36:8b:8d:ae:c5:15:04:09:a1:14:6a:5d:8c:8c:66:5f:
79:f8:3b:30:41:00:b8:2a:bc:44:d7:1b:59:ab:26:ce:39:bc:
16:2a:03:9a:ad:b0:67:f1:a1:66:33:ed:40:08:23:27:79:bf:
19:64:6c:83:c5:11:dd:d6:eb:62:49:59:3f:9d:85:66:38:1a:
41:33:9b:6c:d1:bf:15:1d:0b:65:ec:70:c4:0a:86:66:e1:62:
fe:13:83:98:63:2d:cf:01:7e:e9:26:24:73:e0:37:45:86:34:
75:dc:96:0f:9d:28:65:41:0e:29:93:5f:99:74:42:b5:a9:dd:
d8:f1:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:37:59 2025 by rpki-client