Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/34352e3233392e38302e302f32322d3332203d3e20323638333834.roa
File: 34352e3233392e38302e302f32322d3332203d3e20323638333834.roa (raw, json)
Hash identifier: 00+qms6alA3ZiJN6JAWwMEhKBnUy8NqDR1bTly+Vg9w=
Subject key identifier: 98:73:E9:65:F9:59:63:38:1D:11:A7:79:BD:6A:6A:2E:80:42:C7:BB
Certificate issuer: /CN=AB86F4E4258678DFA2BFCB281FF578C029DF9563
Certificate serial: 50299C51C727AD649EC69670AC4F77A6B22A70CB
Authority key identifier: AB:86:F4:E4:25:86:78:DF:A2:BF:CB:28:1F:F5:78:C0:29:DF:95:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB86F4E4258678DFA2BFCB281FF578C029DF9563.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/34352e3233392e38302e302f32322d3332203d3e20323638333834.roa
Signing time: Tue 27 May 2025 11:27:10 +0000
ROA not before: Tue 27 May 2025 11:22:10 +0000
ROA not after: Tue 26 May 2026 11:27:10 +0000
asID: 268384
IP address blocks: 45.239.80.0/22 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 May 2025 11:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:29:9c:51:c7:27:ad:64:9e:c6:96:70:ac:4f:77:a6:b2:2a:70:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB86F4E4258678DFA2BFCB281FF578C029DF9563
Validity
Not Before: May 27 11:22:10 2025 GMT
Not After : May 26 11:27:10 2026 GMT
Subject: CN=9873E965F95963381D11A779BD6A6A2E8042C7BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:80:3a:0c:84:d9:9f:bb:a7:fb:2c:f4:15:
b6:e3:bf:8b:c9:43:1e:f6:c2:56:3d:33:32:82:2c:
c9:c8:12:35:67:ed:26:65:8b:69:1e:66:bb:aa:73:
c9:da:ba:fd:72:23:d4:57:eb:be:be:a5:41:7f:ce:
2e:bb:54:cf:01:e3:2a:58:0f:77:67:c1:9f:d6:7f:
4d:41:53:6b:7c:95:d7:db:f4:a8:62:a8:15:98:c1:
38:59:69:39:be:c2:ea:bb:41:5f:54:b4:ce:37:bb:
15:bd:08:a7:55:38:ab:a6:b3:47:db:95:56:23:cf:
9d:57:b9:1b:20:ce:97:c8:51:d8:01:bf:ca:1b:a4:
dd:4b:d1:27:f5:f6:e8:8b:5c:e6:24:dc:d0:46:fe:
26:59:73:53:be:e0:c2:1b:4a:20:3d:c6:aa:48:96:
0b:00:cc:ee:24:53:c7:25:11:1d:00:45:19:fe:58:
12:22:3a:2e:28:ab:20:77:90:f7:07:35:80:a0:76:
23:b5:2a:99:de:cc:f9:89:37:5f:a7:dd:c7:37:dd:
9e:bb:8a:c8:9d:59:26:77:4c:3e:ca:77:d4:0e:e2:
a0:7a:8d:1b:2a:71:54:50:79:c4:de:3d:06:87:5f:
09:b9:c6:1b:4d:bf:04:86:45:4f:da:c0:e5:5d:c6:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:73:E9:65:F9:59:63:38:1D:11:A7:79:BD:6A:6A:2E:80:42:C7:BB
X509v3 Authority Key Identifier:
keyid:AB:86:F4:E4:25:86:78:DF:A2:BF:CB:28:1F:F5:78:C0:29:DF:95:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB86F4E4258678DFA2BFCB281FF578C029DF9563.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/34352e3233392e38302e302f32322d3332203d3e20323638333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.80.0/22
Signature Algorithm: sha256WithRSAEncryption
35:7b:87:78:ae:f2:de:df:20:28:9e:42:ab:7d:80:64:b4:6b:
21:d8:12:7f:e1:91:01:64:84:61:72:63:05:5a:ed:03:1d:10:
a4:32:64:27:b0:6b:38:a1:a6:85:04:b6:26:83:f5:d7:62:38:
af:c3:9c:fa:c5:98:5c:b0:c4:3e:21:f7:4f:52:ae:86:7c:9f:
e7:ad:8f:0f:05:20:13:52:03:67:ab:c4:75:d7:ca:a3:56:95:
ee:76:96:43:bd:3a:92:bf:f5:d4:6d:c1:e3:5e:59:a2:2e:29:
59:43:53:24:15:9b:48:93:2b:fd:76:5e:17:2a:1d:64:25:42:
c1:84:8b:eb:c0:f8:4a:05:93:b1:f2:23:65:50:81:ae:0a:cf:
90:9e:6d:f1:e5:0c:0c:a0:b9:39:87:56:e9:95:fb:58:97:c1:
a8:24:49:f6:50:e6:60:da:a5:7f:ad:19:1e:ec:98:d5:0d:d5:
00:17:2b:d0:7a:33:9f:ec:09:b8:4d:e6:4e:a7:76:a4:07:0f:
6f:8a:15:65:0a:01:cc:fc:2f:3e:eb:47:de:69:4d:d3:5a:18:
86:a9:3e:28:29:9f:68:47:17:20:ec:2d:4e:7a:29:40:67:49:
78:5a:8c:42:bf:34:e3:0e:ee:b8:75:05:3d:b3:cd:34:c6:9a:
20:59:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:08:41 2025 by rpki-client