Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230312e302f32342d3234203d3e20323638303333.roa
File: 34352e3136362e3230312e302f32342d3234203d3e20323638303333.roa (raw, json)
Hash identifier: Yy9sons55JCcRjqSV5PDauhw2ttqx3w9uctDAPuKvhA=
Subject key identifier: 50:83:25:24:26:34:CE:A7:FF:B8:C4:0F:38:85:F0:0B:CF:B4:C6:26
Certificate issuer: /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial: 2085C8406F3965EABC0AFF1CB20EABE642CEC797
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230312e302f32342d3234203d3e20323638303333.roa
Signing time: Thu 10 Apr 2025 12:16:51 +0000
ROA not before: Thu 10 Apr 2025 12:11:51 +0000
ROA not after: Thu 09 Apr 2026 12:16:51 +0000
asID: 268033
IP address blocks: 45.166.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 12:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:85:c8:40:6f:39:65:ea:bc:0a:ff:1c:b2:0e:ab:e6:42:ce:c7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Validity
Not Before: Apr 10 12:11:51 2025 GMT
Not After : Apr 9 12:16:51 2026 GMT
Subject: CN=508325242634CEA7FFB8C40F3885F00BCFB4C626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:53:af:9e:f6:84:38:3a:58:d3:3f:5c:1b:
d6:03:83:59:38:23:c2:0d:19:76:ab:36:0d:27:d1:
8d:8a:8b:aa:18:75:dc:42:18:f8:08:87:7a:96:01:
60:2f:a8:d2:41:e6:91:33:d1:26:a6:05:ed:c0:f9:
50:32:f5:e0:9c:2f:e6:12:84:cf:82:26:50:4c:c3:
03:5d:51:e6:6d:70:d1:56:4f:50:a1:10:26:22:c6:
e7:09:44:d5:5f:f7:cd:58:be:66:fa:8a:b4:31:a1:
e4:ab:6e:9f:13:d7:2e:55:40:54:58:18:7a:b6:a6:
1e:23:2c:06:bf:d0:d6:ec:82:df:b3:9b:ea:1e:75:
b5:25:48:ca:75:7c:9d:cf:f5:80:66:06:7c:c2:44:
59:93:31:2e:37:b6:b1:c9:44:07:fe:57:80:ed:3c:
24:ec:8f:ea:e8:51:42:e4:71:48:d8:82:45:5d:5e:
39:52:48:26:3b:22:57:37:d5:6c:c7:6b:9c:24:1d:
35:fa:f3:b6:ec:47:8c:2b:65:ab:ab:ce:62:a1:a3:
42:7c:bd:fe:18:62:a5:5a:34:9c:e1:2f:95:7d:46:
a4:62:e1:75:93:cb:1a:07:71:fc:a0:9b:d3:f9:7a:
30:80:d8:f5:3a:d7:03:2c:19:4d:9c:6a:e8:48:7b:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:83:25:24:26:34:CE:A7:FF:B8:C4:0F:38:85:F0:0B:CF:B4:C6:26
X509v3 Authority Key Identifier:
keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230312e302f32342d3234203d3e20323638303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.201.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a8:b8:c4:89:8c:ae:0c:44:8e:26:34:23:df:94:74:67:e3:
c7:b9:cc:ce:2f:10:f8:98:71:95:00:96:6c:47:f7:aa:4d:f8:
7e:e6:b1:9c:7a:75:31:5e:0c:34:c7:4b:5f:6e:d0:51:18:11:
5c:59:e1:6d:11:71:32:51:bb:c9:d2:9e:87:27:92:cb:74:45:
7b:09:cb:ef:2c:09:2f:8f:a4:bf:de:92:f2:37:fb:96:4d:38:
f1:da:2c:78:ed:48:5e:08:0f:51:60:b9:9c:2a:3f:73:23:97:
42:32:90:07:36:bd:c8:85:d5:30:70:8b:55:c8:ac:3c:d7:a9:
c1:8c:92:da:02:2b:28:ac:5a:b5:45:f2:49:ae:fd:c4:ce:79:
a4:ee:e2:52:ac:b6:69:40:3e:5d:f8:a8:bb:30:24:ec:a0:0c:
93:98:96:d9:45:9d:0d:3d:eb:90:79:d7:01:32:10:30:f5:39:
93:22:fc:4f:d9:c9:0a:8e:c1:7f:c2:2b:9f:db:c9:b9:8e:7f:
f0:47:7f:14:e6:3f:60:30:b1:1f:af:5d:23:11:8a:d8:4f:b1:
e3:ba:6b:c3:45:23:7b:b9:fa:c6:18:75:be:89:c8:89:e9:3d:
76:d0:79:3f:a6:6f:a6:e2:fd:9c:51:6b:71:21:32:74:94:ee:
dd:bc:ef:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:34:03 2025 by rpki-client