Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268333.roa
File: AS268333.roa (raw, json)
Hash identifier: ORj6lh66Bqk27tzxXJ3N7iJ+SE06vU1lj0Is1em/dUo=
Subject key identifier: 93:BC:83:E3:37:99:53:CC:D0:CA:34:67:D3:51:D1:66:48:A2:70:1E
Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial: 363C870E2B6A6DB49E9528A72AD774F2F486D75E
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268333.roa
Signing time: Thu 26 Jun 2025 13:34:17 +0000
ROA not before: Thu 26 Jun 2025 13:29:17 +0000
ROA not after: Thu 25 Jun 2026 13:34:17 +0000
asID: 268333
IP address blocks: 45.237.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jun 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:3c:87:0e:2b:6a:6d:b4:9e:95:28:a7:2a:d7:74:f2:f4:86:d7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Validity
Not Before: Jun 26 13:29:17 2025 GMT
Not After : Jun 25 13:34:17 2026 GMT
Subject: CN=93BC83E3379953CCD0CA3467D351D16648A2701E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:f0:9d:a1:f6:cd:a3:35:73:39:d1:51:8f:
1b:f1:4d:37:13:6a:c9:e5:c1:d0:59:21:d9:b5:f6:
3a:93:a6:77:c4:49:ff:1c:ee:f3:d9:9d:6b:35:cf:
ef:ce:ad:f2:d2:d8:43:59:10:b0:c6:d8:cd:00:d4:
e5:b1:ed:b8:a4:c9:bb:06:31:61:22:0b:37:17:1a:
75:40:a9:e3:ae:9c:04:83:ca:11:38:6b:ce:ee:78:
a3:15:72:af:b2:d4:62:ca:d3:e1:f4:11:23:f0:9a:
96:19:f4:c8:99:92:59:fb:a4:24:ec:21:80:25:3d:
45:b7:4f:2a:a8:23:90:6c:01:8c:a8:b0:d5:42:9e:
cc:81:5a:76:5b:26:bc:47:a5:19:6b:3c:81:e5:14:
da:9c:9b:73:e2:ab:e7:55:bf:35:25:25:bd:1a:09:
2e:2e:6d:e2:0f:ea:db:ee:94:07:74:77:d6:e1:43:
07:97:c9:21:bf:e0:cc:87:9b:6b:d9:f5:ef:a7:43:
f8:03:ae:50:3f:a1:59:ed:d3:eb:b3:d9:53:aa:3e:
cf:57:bf:e9:ad:11:02:cf:d1:f4:bf:bb:6c:e0:d2:
b6:9a:18:5d:fd:a3:5d:93:2d:37:ca:f7:9f:05:93:
40:f5:7b:e5:fd:53:71:29:76:0a:8f:0c:95:c3:9c:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BC:83:E3:37:99:53:CC:D0:CA:34:67:D3:51:D1:66:48:A2:70:1E
X509v3 Authority Key Identifier:
keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.252.0/22
Signature Algorithm: sha256WithRSAEncryption
04:a6:7b:ac:5c:45:84:6d:6b:b8:18:68:ba:af:6c:6c:61:9e:
f1:5d:96:c2:b2:d1:66:26:fe:06:77:46:45:0b:45:9a:04:08:
f6:b5:91:c3:51:f1:61:d5:8f:f5:d5:ec:c0:5d:a9:55:04:0b:
bc:bd:f2:73:11:92:5a:51:41:4c:ed:a5:9f:80:50:4a:be:78:
2c:ab:1f:1d:40:c9:80:0f:fc:4c:a7:ac:73:f0:20:ce:5a:88:
ac:ae:ad:5c:19:93:53:06:0f:7a:05:a3:87:fb:d4:b9:e9:03:
e2:52:c8:68:e9:9e:ac:0d:03:b1:4c:ac:d2:c0:c4:fa:e0:9f:
b0:5d:ba:f4:5f:01:bb:aa:1a:a4:ae:e3:8a:06:06:3b:b5:be:
07:9c:e8:54:22:07:39:b2:f7:b5:4a:ad:b3:35:5d:1c:fa:00:
76:9c:9c:d3:49:47:2e:46:e7:2e:6c:9b:9a:8e:27:4a:1c:55:
08:39:76:24:a2:31:2d:ae:82:c0:7e:c4:a5:76:bc:e9:c2:47:
78:71:1c:04:6c:03:96:b3:40:03:4f:4d:8a:1f:72:64:28:14:
d5:8c:40:d1:b5:9f:dc:79:ae:e5:cb:12:21:ff:5e:dd:14:d1:
5d:f7:c2:d6:12:da:9e:87:92:db:0f:2a:ec:49:2b:7f:1e:07:
e7:e2:d0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 21:38:35 2025 by rpki-client