Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/34352e3233372e3134342e302f32322d3232203d3e20323732353838.roa
File: 34352e3233372e3134342e302f32322d3232203d3e20323732353838.roa (raw, json)
Hash identifier: PwzlREsYyIHs9LN5Se6yWK12tjZfJOb6nGpPQDNTPQI=
Subject key identifier: 8F:48:8F:3A:CF:3C:96:35:C8:21:56:25:20:67:9D:6E:B4:84:41:6A
Certificate issuer: /CN=404EF1E548374354D9B828749323416749EF23B4
Certificate serial: 60AC38D25DA27A3FD9CBEE03FE961F81DCB15A18
Authority key identifier: 40:4E:F1:E5:48:37:43:54:D9:B8:28:74:93:23:41:67:49:EF:23:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/404EF1E548374354D9B828749323416749EF23B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/34352e3233372e3134342e302f32322d3232203d3e20323732353838.roa
Signing time: Wed 30 Apr 2025 15:58:08 +0000
ROA not before: Wed 30 Apr 2025 15:53:08 +0000
ROA not after: Wed 29 Apr 2026 15:58:08 +0000
asID: 272588
IP address blocks: 45.237.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 05 May 2025 11:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ac:38:d2:5d:a2:7a:3f:d9:cb:ee:03:fe:96:1f:81:dc:b1:5a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404EF1E548374354D9B828749323416749EF23B4
Validity
Not Before: Apr 30 15:53:08 2025 GMT
Not After : Apr 29 15:58:08 2026 GMT
Subject: CN=8F488F3ACF3C9635C821562520679D6EB484416A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:24:53:c3:70:0b:ec:b2:45:74:aa:fe:05:
38:ba:48:af:cd:1c:cd:fe:af:e2:cb:05:38:4d:9a:
e7:3a:c5:db:02:42:79:88:0b:58:98:8b:57:11:c3:
83:22:5a:46:e8:fb:d1:e6:68:2f:13:ba:81:a0:cc:
51:00:2d:93:9f:b4:3f:31:51:17:dd:e8:7c:0b:7f:
f9:7a:27:5a:6f:a8:50:8d:8e:8b:84:c0:89:d8:f8:
cc:31:48:7c:82:12:c7:e2:72:60:85:56:91:a5:8e:
5b:91:5f:9b:48:b5:01:6f:20:f2:07:42:1f:ab:ca:
81:da:86:f9:ea:f4:7f:3f:43:c9:85:5a:90:9d:88:
87:86:6a:4f:e8:29:71:53:8d:2f:91:c5:e2:d8:52:
2e:0c:bc:91:66:e1:c3:4a:81:0b:e0:58:9e:64:f3:
0d:eb:00:fe:e5:66:c2:98:3d:e3:e1:73:b4:9e:67:
b0:2f:0c:c9:36:f6:b2:f9:92:f4:49:bc:61:a4:68:
36:aa:75:41:1f:22:cc:e2:d4:31:12:16:15:7d:31:
42:a9:96:ab:c6:c5:f4:d5:a5:37:ac:8c:1a:45:5e:
3e:33:b8:91:1d:d4:24:57:f0:3f:3b:f6:a4:5e:a9:
ad:2d:fb:e5:a9:d9:d3:fd:27:32:64:ae:02:8d:ee:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:48:8F:3A:CF:3C:96:35:C8:21:56:25:20:67:9D:6E:B4:84:41:6A
X509v3 Authority Key Identifier:
keyid:40:4E:F1:E5:48:37:43:54:D9:B8:28:74:93:23:41:67:49:EF:23:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/404EF1E548374354D9B828749323416749EF23B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/34352e3233372e3134342e302f32322d3232203d3e20323732353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.144.0/22
Signature Algorithm: sha256WithRSAEncryption
58:fe:ec:54:55:7e:d9:dd:22:90:0a:12:8a:d0:d5:b4:22:15:
ac:5c:24:4f:2c:ed:89:ea:f3:c9:af:12:c1:18:27:94:75:b2:
a7:09:4d:65:8f:de:14:90:56:31:56:b9:c1:ab:92:cd:f1:40:
ac:00:9f:7d:0c:3f:39:8c:69:c0:c3:1a:ae:2a:67:9f:d5:08:
22:df:c0:08:ed:c6:dd:39:f1:0a:d8:e5:45:45:33:32:62:9d:
65:8c:f8:9e:6c:fd:bb:ee:0e:2b:44:05:45:49:47:82:69:97:
81:1f:57:75:8d:ba:69:e6:39:2c:f9:0e:f9:a0:82:47:fa:40:
9b:4c:42:0a:b9:e6:82:90:31:8a:9c:ba:f5:fc:ee:f1:a3:17:
7b:07:6f:91:b8:dc:ee:b8:a2:b1:c5:74:3f:85:84:b7:3d:53:
0b:f9:47:c4:f8:0b:2d:5f:28:f3:d1:fb:cb:e2:50:ab:cd:bf:
eb:22:4a:bb:c5:d6:60:06:e1:e5:df:7b:38:52:b5:7c:88:4f:
3b:f4:7e:80:a8:58:e9:fa:e3:66:46:a1:1c:d6:69:d8:48:fe:
fc:bb:7e:26:b3:bc:bf:be:ac:9f:56:0f:4b:26:d1:2c:41:af:
51:38:37:43:10:56:40:f2:99:eb:99:7e:3c:61:4b:8d:11:b3:
93:55:7c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 07:53:04 2025 by rpki-client