Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3139312e302f32342d3234203d3e20323639343334.roa
File: 34352e3138362e3139312e302f32342d3234203d3e20323639343334.roa (raw, json)
Hash identifier: BvdjXZIvoxcwrS/BGOfi+Px18cVZZzayMXt+filDLVg=
Subject key identifier: FD:01:00:A7:B2:9F:63:67:CE:49:B9:03:B3:01:12:53:0D:67:FF:7B
Certificate issuer: /CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Certificate serial: 60B779AB5A55A73548B743F0C0A2CC3653FA28AD
Authority key identifier: F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3139312e302f32342d3234203d3e20323639343334.roa
Signing time: Fri 20 Jun 2025 00:32:20 +0000
ROA not before: Fri 20 Jun 2025 00:27:20 +0000
ROA not after: Fri 19 Jun 2026 00:32:20 +0000
asID: 269434
IP address blocks: 45.186.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Jul 2025 21:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b7:79:ab:5a:55:a7:35:48:b7:43:f0:c0:a2:cc:36:53:fa:28:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Validity
Not Before: Jun 20 00:27:20 2025 GMT
Not After : Jun 19 00:32:20 2026 GMT
Subject: CN=FD0100A7B29F6367CE49B903B30112530D67FF7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:68:f1:b9:f9:9d:43:44:1d:93:2b:26:79:01:
4c:e6:0c:09:ed:76:ed:d5:25:b1:f8:e3:5e:a9:54:
bc:a2:e6:36:d6:50:47:33:47:b1:91:83:08:f0:f1:
79:40:b4:24:6f:83:de:38:2e:fe:ca:ce:b2:df:e6:
00:d4:27:bf:7d:4d:ec:a0:16:0e:c3:f2:4d:23:9c:
a4:0d:34:37:59:f8:c9:b7:9e:16:d2:6a:97:51:0b:
9b:bb:10:03:5a:7a:7d:20:86:3c:ab:90:93:00:09:
72:0e:56:9c:7c:72:61:6f:72:5f:cf:4a:48:11:c1:
dc:c4:24:76:f9:08:4f:73:dc:d4:35:73:66:38:09:
8d:c3:24:c2:b0:b9:23:fe:88:89:b0:a1:97:6c:dd:
b5:f3:56:16:70:8e:93:f8:a9:57:f3:fc:3f:b7:97:
3a:30:90:bb:30:e2:c1:6f:5f:53:21:25:a8:ca:7d:
3c:fa:42:6f:50:1b:a7:31:a7:ad:77:25:f6:14:aa:
ff:a7:1b:d2:85:c4:42:03:ac:49:30:99:c6:e3:c5:
e8:10:7a:c5:40:12:51:67:d4:41:14:c1:b6:75:ec:
21:7c:fa:23:7f:60:59:6f:a5:2b:99:8a:7b:de:8d:
5f:e7:6a:f7:d5:7e:3c:54:b6:0e:a3:6c:6e:fc:25:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:01:00:A7:B2:9F:63:67:CE:49:B9:03:B3:01:12:53:0D:67:FF:7B
X509v3 Authority Key Identifier:
keyid:F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3139312e302f32342d3234203d3e20323639343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.191.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b6:49:d2:58:e1:a1:56:51:47:01:42:fc:55:fc:4c:18:50:
3c:13:c3:5f:5e:eb:d9:b1:3d:67:41:a5:40:60:cb:aa:66:c0:
28:ae:d3:91:21:a3:74:e7:d2:00:46:8b:a3:f9:55:27:d2:7c:
58:90:a9:c4:af:b8:7b:c8:6f:65:34:d1:fa:a2:15:4a:a1:0d:
5f:e4:e4:df:f1:be:60:1f:2d:1b:23:86:a9:a0:60:52:7b:5b:
ed:37:8c:e0:b5:5f:fd:5a:85:27:a0:3e:d7:1b:ad:f8:86:1c:
b2:51:f1:3d:4f:f5:46:8e:d2:ba:b2:2b:62:01:f5:d3:13:d9:
51:1b:eb:5d:60:9a:69:1b:91:52:ca:1b:38:9e:01:c4:e3:24:
05:72:e5:c5:80:27:0a:fc:58:f6:bb:ba:af:a5:63:b6:42:ce:
93:08:b4:3c:80:70:1a:54:10:30:43:71:8c:04:86:e3:96:15:
e4:26:46:37:63:27:5d:0b:17:f0:db:09:e1:e2:22:b1:10:26:
67:23:14:0b:94:1e:ec:17:0d:db:65:a7:a0:85:ae:bb:95:d4:
5d:00:22:a7:ba:ee:61:43:47:6a:8a:18:c6:13:1b:34:b3:7d:
c3:30:5e:82:1f:37:bf:78:be:b1:d5:20:01:ee:d9:5f:93:d0:
ab:f0:50:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:45:26 2025 by rpki-client