Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32322d3232203d3e20323638323937.roa
File: 34352e3233372e3234382e302f32322d3232203d3e20323638323937.roa (raw, json)
Hash identifier: EwwxWedt3VgLLrGQ83UB1aQQXA4HQAxjwgoVAvRe6GQ=
Subject key identifier: 1E:36:A6:2A:63:AF:DC:09:F6:FD:BC:3B:9B:69:8F:6D:66:B5:07:47
Certificate issuer: /CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Certificate serial: 3C329E40A3625637F582C078FC272716D3C0A3E1
Authority key identifier: 38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32322d3232203d3e20323638323937.roa
Signing time: Sun 09 Feb 2025 13:10:29 +0000
ROA not before: Sun 09 Feb 2025 13:05:29 +0000
ROA not after: Sun 08 Feb 2026 13:10:29 +0000
asID: 268297
IP address blocks: 45.237.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 11:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:32:9e:40:a3:62:56:37:f5:82:c0:78:fc:27:27:16:d3:c0:a3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Validity
Not Before: Feb 9 13:05:29 2025 GMT
Not After : Feb 8 13:10:29 2026 GMT
Subject: CN=1E36A62A63AFDC09F6FDBC3B9B698F6D66B50747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:20:f0:56:34:41:2f:40:ea:a8:61:95:ad:
8b:97:ce:d3:47:88:5e:bd:69:66:29:83:7c:89:52:
ff:57:d0:d9:fc:a4:a9:c9:b5:76:88:45:27:e5:02:
46:6f:96:e0:3e:48:44:53:eb:9b:d7:60:d1:4f:86:
62:08:bc:2e:a9:f7:35:f4:c0:bb:2e:57:4a:fe:06:
51:12:8e:00:4e:cd:29:8a:dd:b5:84:4e:ae:12:e2:
d6:2d:23:93:25:57:71:81:2a:26:4a:af:f1:cf:cd:
26:0a:83:0d:03:94:1b:76:b5:86:52:b1:f0:18:f7:
cb:06:86:fe:eb:29:b2:b8:90:a0:8d:f6:7b:ba:ba:
5d:be:ab:8e:c6:a2:a5:0b:e2:1c:70:55:d6:db:6e:
73:fb:05:fe:9b:a0:46:84:04:1b:1b:e5:1b:41:ef:
bc:65:af:85:ae:b7:f2:50:d6:b1:fd:ad:f0:32:6a:
86:42:a5:33:25:93:74:a7:46:a2:e1:cc:f8:e2:e1:
62:85:80:2f:29:46:c4:17:91:1f:71:99:59:a2:6f:
0f:64:99:3d:cc:94:ff:cd:b9:76:f5:fa:87:cb:2c:
8e:d4:b7:a9:db:29:5a:2d:4a:91:fc:a6:bf:75:11:
98:da:b2:de:70:f4:6e:1b:32:77:fc:fe:c9:66:b8:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:36:A6:2A:63:AF:DC:09:F6:FD:BC:3B:9B:69:8F:6D:66:B5:07:47
X509v3 Authority Key Identifier:
keyid:38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32322d3232203d3e20323638323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.248.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:0b:fd:05:2b:20:e8:81:cf:69:c9:0b:96:4a:ff:81:d6:d9:
13:4f:2d:22:30:74:c1:21:e6:ca:db:44:06:d2:89:bc:7e:9f:
f8:06:7a:19:46:fb:85:18:92:96:85:9b:b5:c5:d9:d7:c0:b6:
6e:dc:6a:16:2c:eb:69:a0:02:95:3f:ff:3e:ab:6e:39:0d:03:
0c:f5:0e:ad:55:3a:78:5a:f4:dd:18:37:97:42:77:b0:dd:b1:
4c:2d:08:2a:87:77:49:78:88:5a:f0:7a:fa:66:c0:73:c0:c6:
96:8b:bf:01:b7:d6:cf:78:58:bf:bb:59:fb:03:fd:22:9f:19:
63:0d:ff:78:96:6c:23:38:ce:d8:f3:65:56:61:be:7a:96:e0:
51:d1:a7:63:f0:62:ea:b9:d6:64:0b:2b:4e:93:c4:0b:a2:e0:
14:57:cc:c8:74:12:b9:00:56:d4:56:5d:e3:ef:35:07:39:4e:
18:2e:2a:27:7d:db:2d:be:8f:c7:d5:85:17:f6:4d:2e:70:34:
67:08:0a:b2:a9:e8:d9:b5:fd:8c:16:15:2c:9e:2f:de:be:d9:
3e:7f:1f:bb:1a:64:f9:c6:8e:4d:62:a2:76:e8:48:a2:cd:80:
82:06:a6:f1:1c:35:01:da:e0:4d:dc:c6:0d:d4:0d:08:f1:d0:
06:9f:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:15:37 2025 by rpki-client