Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3132382e302f32342d3234203d3e20323636353238.roa
File: 34352e36352e3132382e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier: szHYHRmHTTFdHABi5YUS+g6MvIXYpf0otbbRqfncwpY=
Subject key identifier: D4:55:BC:E6:C8:43:11:68:5B:4B:91:87:24:A6:93:1C:53:7F:22:FF
Certificate issuer: /CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Certificate serial: 549241AAAF6E8CD4C04E00A31D34873415D1EE73
Authority key identifier: CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3132382e302f32342d3234203d3e20323636353238.roa
Signing time: Thu 04 Apr 2024 09:29:34 +0000
ROA not before: Thu 04 Apr 2024 09:24:34 +0000
ROA not after: Thu 03 Apr 2025 09:29:34 +0000
asID: 266528
IP address blocks: 45.65.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 01:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:92:41:aa:af:6e:8c:d4:c0:4e:00:a3:1d:34:87:34:15:d1:ee:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Validity
Not Before: Apr 4 09:24:34 2024 GMT
Not After : Apr 3 09:29:34 2025 GMT
Subject: CN=D455BCE6C84311685B4B918724A6931C537F22FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:09:81:32:3d:3e:1f:70:77:67:bc:20:8a:
9b:98:03:b6:0f:df:aa:6c:f5:27:b0:a0:12:2b:08:
ec:5c:bf:c8:e3:7a:0d:0b:79:47:e9:43:ef:4f:5f:
be:26:cb:1e:7d:5c:2d:5c:6c:cb:77:c4:6c:0a:14:
36:fc:db:dd:fa:f5:7d:10:72:c1:2c:1c:00:6b:fa:
38:a0:ef:37:be:a1:60:e3:05:a3:48:64:58:ad:7a:
01:fc:ba:eb:f6:7f:08:1d:c5:c8:36:9f:91:7f:09:
1a:c8:ef:0f:86:9f:95:81:df:20:63:3d:1f:dc:00:
10:63:2f:c6:45:d9:9b:2c:c0:ad:e8:db:41:6b:61:
1b:72:5d:b7:13:cd:ee:8a:d8:60:fa:e7:73:ac:93:
ab:73:00:99:39:14:22:1f:11:2d:7b:a9:76:47:b4:
97:74:49:a6:d9:66:97:d9:9b:3a:34:fe:5a:1e:6f:
db:0d:f7:d5:fa:d4:1a:c9:91:e5:5f:1f:66:6f:0b:
9c:5e:72:38:a4:6b:54:2e:16:67:df:e3:98:63:a8:
af:df:04:91:3e:92:63:fc:01:79:3d:5d:85:18:b4:
91:9a:d8:d6:2a:85:38:02:34:6a:fd:2c:71:52:f6:
88:72:34:ae:c0:a2:52:fd:55:ad:f2:08:6b:a9:0a:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:55:BC:E6:C8:43:11:68:5B:4B:91:87:24:A6:93:1C:53:7F:22:FF
X509v3 Authority Key Identifier:
keyid:CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3132382e302f32342d3234203d3e20323636353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.128.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0c:6b:bd:ff:bd:90:10:f9:9c:87:52:f2:23:41:76:76:7f:
27:3a:7c:83:91:25:ba:74:52:a2:30:4e:6c:8c:17:5e:7c:05:
7f:3b:f1:ff:c0:f2:bb:73:75:2d:80:3a:49:40:0a:a4:96:57:
82:3a:3d:9d:cf:bc:16:38:cc:f5:0a:15:c5:ec:d9:05:98:93:
d3:16:43:6f:cb:8b:da:60:6b:cb:40:32:6f:12:df:09:e0:50:
e5:19:1b:50:7d:2d:32:36:3f:41:f1:af:e7:75:fd:b7:36:52:
be:2f:e0:3c:e0:3f:fe:23:1a:d6:ba:f1:d8:4c:a8:ef:5e:4b:
72:63:7f:9b:e4:49:60:1f:f4:58:b1:5e:12:47:f9:8f:03:2b:
20:dd:19:f4:14:1d:ee:4e:18:70:ea:fe:e7:0e:72:76:6f:eb:
9d:fa:ea:ec:f4:5e:10:a2:3b:9f:0c:90:55:65:a5:34:88:4f:
73:d4:6a:04:d1:f9:36:92:0b:6f:48:69:6c:df:40:83:1a:b6:
a4:7f:ba:4a:6c:61:47:b4:d2:8b:19:cd:34:5c:d3:cf:51:89:
09:3a:f5:e3:1f:2c:b8:7c:99:a0:09:fb:ba:b3:6b:73:28:a1:
59:89:7c:5e:00:de:a8:a6:4b:7d:c2:ee:25:63:f9:ae:fc:84:
f3:ca:32:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org