Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3132382e302f32332d3233203d3e20323636353238.roa
File: 34352e36352e3132382e302f32332d3233203d3e20323636353238.roa (raw, json)
Hash identifier: 5YAb3seTx838o06x/eyyFs5Q5pgg+MKTe/PVnZ5oRXs=
Subject key identifier: C7:EA:B2:0D:93:A1:0C:E8:5F:02:2D:E4:8E:60:AD:D6:65:F7:6F:84
Certificate issuer: /CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Certificate serial: 3B059A41626FFBAD798B4122B2B369E941869499
Authority key identifier: CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3132382e302f32332d3233203d3e20323636353238.roa
Signing time: Thu 04 Apr 2024 09:29:34 +0000
ROA not before: Thu 04 Apr 2024 09:24:34 +0000
ROA not after: Thu 03 Apr 2025 09:29:34 +0000
asID: 266528
IP address blocks: 45.65.128.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 21 May 2024 01:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:05:9a:41:62:6f:fb:ad:79:8b:41:22:b2:b3:69:e9:41:86:94:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Validity
Not Before: Apr 4 09:24:34 2024 GMT
Not After : Apr 3 09:29:34 2025 GMT
Subject: CN=C7EAB20D93A10CE85F022DE48E60ADD665F76F84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:7b:67:67:10:11:43:02:16:11:ae:13:57:
44:f2:24:29:86:be:53:c2:ef:b1:79:8f:4d:91:49:
aa:ee:7d:0a:5f:62:8d:4b:93:86:a5:90:cc:a6:85:
3e:70:48:83:7d:ec:11:f7:0f:91:31:ad:30:c3:29:
dd:aa:ab:5e:ae:f5:f8:a7:ad:c5:58:32:62:42:61:
51:54:fe:ea:23:1c:ce:46:88:d9:3d:4b:40:d2:d6:
17:ec:ea:85:09:f8:69:b7:b5:be:af:64:59:cd:70:
81:73:c5:ea:6f:ef:15:bf:5b:3c:b4:3b:91:e9:b0:
a6:9f:6b:30:25:32:17:3f:4a:5d:0f:e7:95:78:50:
95:57:80:2a:99:9d:76:cd:a0:9b:98:10:7c:e7:03:
b6:2f:97:eb:8a:77:6f:9b:ad:ff:c1:da:b7:f3:ae:
33:de:a7:fc:2c:82:0f:9b:23:c8:11:77:87:13:83:
63:f1:99:d1:44:e2:e3:c9:1c:ff:23:68:80:89:24:
32:94:65:d9:e6:d3:b3:1e:89:c8:94:d9:d0:63:98:
7e:0b:cc:4b:e9:f1:15:aa:d3:42:4b:7f:86:da:4d:
31:e9:1d:e3:73:ee:58:d2:06:e4:36:1c:7d:7a:d1:
41:ff:65:cc:b7:1f:55:14:a4:61:8d:8c:c7:47:7b:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EA:B2:0D:93:A1:0C:E8:5F:02:2D:E4:8E:60:AD:D6:65:F7:6F:84
X509v3 Authority Key Identifier:
keyid:CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3132382e302f32332d3233203d3e20323636353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.128.0/23
Signature Algorithm: sha256WithRSAEncryption
50:d9:c4:ca:da:cc:35:4a:ba:2d:01:eb:a8:6a:fc:3c:c9:6e:
08:e3:d0:31:d8:6e:fd:95:cc:c3:50:2d:64:3c:85:9f:9f:22:
83:f6:2b:6d:2d:97:42:46:02:29:66:2b:7f:c6:5f:f5:e1:54:
aa:ba:53:a4:41:18:39:5d:53:67:f9:99:dd:e6:3c:4c:85:7b:
af:39:33:b9:f0:99:4d:8b:d5:e0:b2:cc:7d:8a:ca:fd:61:5a:
9d:ac:6b:7d:9f:6c:6f:35:04:cd:b3:87:3f:58:08:ba:7f:6e:
63:9a:96:7a:e0:f9:f9:0a:f0:8c:1f:96:61:ac:0a:e2:47:15:
13:47:77:3a:c3:c7:bc:00:5f:5e:53:f6:c2:f4:47:33:b4:ae:
4d:c5:f0:c8:0c:75:91:58:60:9e:8a:f6:1c:e0:ca:32:d6:45:
a1:8b:be:03:f2:4f:66:70:2f:37:9b:1f:78:2a:8c:83:78:23:
ea:fc:97:60:45:3b:e8:9e:d2:16:e0:94:b5:8f:7a:68:37:e4:
32:f9:54:f2:93:fe:06:b0:8f:45:0b:e2:0c:bd:2b:4c:85:ba:
99:25:f8:41:d9:53:25:05:05:bf:1d:33:98:07:2a:f7:c8:2d:
d0:29:95:89:f1:40:f6:cb:40:bf:31:7d:52:05:45:c1:43:94:
3d:fb:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org