Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32322d3232203d3e20323638333230.roa
File: 34352e3233382e39322e302f32322d3232203d3e20323638333230.roa (raw, json)
Hash identifier: 5wbGqcZMEh1xDK7XbQOdHR/tJwoAPmnlbCXni5/wA/o=
Subject key identifier: A1:88:2A:E2:CF:B3:E2:24:55:55:5D:2D:FB:D3:BE:88:26:EE:E0:A6
Certificate issuer: /CN=D0436FEA91781D055687421CAEF481A6EC223F53
Certificate serial: 5F49AE89355FE2BEBF9027974ABEB7F2ABA0827B
Authority key identifier: D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32322d3232203d3e20323638333230.roa
Signing time: Thu 03 Aug 2023 17:00:56 +0000
ROA not before: Thu 03 Aug 2023 16:55:56 +0000
ROA not after: Thu 01 Aug 2024 17:00:56 +0000
asID: 268320
IP address blocks: 45.238.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 04 Mar 2024 15:12:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:49:ae:89:35:5f:e2:be:bf:90:27:97:4a:be:b7:f2:ab:a0:82:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0436FEA91781D055687421CAEF481A6EC223F53
Validity
Not Before: Aug 3 16:55:56 2023 GMT
Not After : Aug 1 17:00:56 2024 GMT
Subject: CN=A1882AE2CFB3E22455555D2DFBD3BE8826EEE0A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:19:fc:16:bf:8a:83:94:54:09:df:1b:39:
fc:e4:b7:fd:b8:9e:34:db:f7:8d:f2:9c:54:f8:d6:
26:1a:89:92:87:b1:ed:92:01:cd:1e:f7:c8:fd:29:
5e:1b:2b:ff:e4:6c:3f:54:eb:b4:d5:6d:1a:d2:2b:
2a:17:df:98:18:43:cc:e4:7e:0b:92:3a:07:81:f0:
a9:f2:3c:67:b9:29:4d:5c:9b:0b:fd:f3:f9:ad:c1:
d0:4c:55:45:66:72:3b:c0:59:99:d0:04:08:12:46:
09:b4:0e:a5:aa:21:6d:73:05:88:82:bd:9e:1b:cb:
6f:ec:58:62:fa:4b:5c:2d:92:1e:f4:49:4b:aa:01:
d8:7c:b4:f1:a5:80:b9:2a:8e:2c:a4:f1:86:84:3e:
b1:f9:10:ac:5a:d5:56:bd:3e:25:19:4b:0b:db:99:
35:6f:c9:fc:b0:1a:2b:ee:e0:fc:35:86:78:9c:54:
94:46:cf:15:41:fe:f5:b4:24:16:b7:ef:d9:5c:75:
af:46:93:80:bc:a2:1b:46:50:55:b6:db:28:58:93:
28:02:db:0a:bd:af:bf:b5:a8:31:22:d3:57:e7:5f:
68:8b:0f:cb:b8:60:c8:bf:d8:82:8d:77:36:c5:bf:
6f:4a:2f:a9:1c:65:5f:21:b3:bb:e9:81:ac:91:8e:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:88:2A:E2:CF:B3:E2:24:55:55:5D:2D:FB:D3:BE:88:26:EE:E0:A6
X509v3 Authority Key Identifier:
keyid:D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/D0436FEA91781D055687421CAEF481A6EC223F53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32322d3232203d3e20323638333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:ef:8f:57:0b:ee:cf:83:7e:65:20:2c:06:6e:d9:dd:00:0a:
13:cd:56:24:0b:d4:89:a4:fb:53:62:59:30:62:10:58:e1:21:
14:46:b2:43:49:a3:70:c2:3b:c9:17:e6:db:d6:d6:83:b3:df:
d8:71:0d:96:09:f6:69:ec:86:99:b7:e1:9b:49:80:94:a7:17:
6b:95:9f:5e:9b:f5:b6:67:54:16:22:92:de:60:26:b8:59:f3:
c3:1e:41:61:99:81:0a:2b:99:51:fc:7e:5d:40:b1:2a:24:c3:
cb:77:9b:61:7f:62:54:6f:0f:4d:2c:d2:8f:e4:de:75:91:4f:
59:da:e0:4b:4a:66:08:cb:e2:e6:77:18:ee:97:30:74:7d:d3:
a8:b4:33:05:ed:a1:5c:33:c1:1b:63:c6:2f:03:86:fb:f7:56:
2f:31:c7:9b:13:2a:8b:16:2a:ab:24:fa:d3:96:71:3c:b2:95:
d6:a1:ac:25:55:16:cd:41:17:b5:33:c1:80:af:a9:d2:3b:d2:
83:43:c4:b5:fc:56:9d:d4:3e:38:dc:c7:76:dd:8a:e5:4b:f3:
df:54:d1:31:de:0e:20:62:45:1d:a2:c7:d3:4f:ba:55:56:66:
72:f6:3b:75:1b:a2:09:d5:ec:8e:fb:96:01:94:7a:4a:46:e9:
54:8a:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 19:50:24 2024 by rpki-client on console-ams.rpki-client.org