Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3133312e302f32342d3234203d3e20323636353238.roa
File: 34352e36352e3133312e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier: 9AT1WAvt7FCO4K41Q8rTRePlip3twTNkwmYhxMxCPBY=
Subject key identifier: FB:22:89:3D:26:36:59:5A:AC:C1:E8:22:60:29:D0:64:7D:7A:AF:C8
Certificate issuer: /CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Certificate serial: CA512A98865D22DEEB8633757C396F051CCC62
Authority key identifier: CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3133312e302f32342d3234203d3e20323636353238.roa
Signing time: Thu 04 Apr 2024 09:29:34 +0000
ROA not before: Thu 04 Apr 2024 09:24:34 +0000
ROA not after: Thu 03 Apr 2025 09:29:34 +0000
asID: 266528
IP address blocks: 45.65.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 01:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ca:51:2a:98:86:5d:22:de:eb:86:33:75:7c:39:6f:05:1c:cc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Validity
Not Before: Apr 4 09:24:34 2024 GMT
Not After : Apr 3 09:29:34 2025 GMT
Subject: CN=FB22893D2636595AACC1E8226029D0647D7AAFC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:3d:b8:00:f0:68:f4:aa:88:18:5e:54:0b:
49:c6:e2:7f:b3:b1:4c:37:a7:0a:c6:33:6c:49:45:
d3:45:de:fa:07:df:df:d8:2f:4e:00:0d:ea:c4:e7:
79:0d:18:bd:a6:ee:2d:c4:c4:9e:1b:d3:00:68:74:
2b:fd:d2:3e:fe:b7:31:07:d3:e7:86:d8:4c:ec:dc:
9d:87:bd:fe:44:5e:fb:1c:19:fe:47:bb:a7:d7:88:
0b:75:0c:15:38:1f:8e:d3:41:80:27:e6:45:6a:4c:
45:0c:60:5d:bf:fc:80:ba:82:a1:9f:a9:08:88:cb:
da:0d:34:28:99:9a:68:73:14:76:c7:53:fe:2f:9f:
70:8f:2a:43:9d:28:12:31:a3:a1:bf:48:5b:1f:54:
42:fb:7d:8f:19:8d:42:f9:aa:08:08:bf:dc:c3:5d:
cc:3f:28:1a:be:54:1e:87:3e:a5:34:ec:84:39:46:
f2:df:4e:d1:cd:93:97:40:b0:84:38:87:61:4d:0f:
0a:9c:5b:a0:67:56:7a:f0:19:8a:3b:9d:79:5c:6c:
d6:45:53:bc:aa:4b:92:f8:5d:60:1a:40:1e:94:1b:
cd:af:7c:da:7a:f9:b8:55:5e:2c:e4:15:c8:0c:b3:
06:84:c8:79:7f:60:e6:f1:b8:72:7d:52:8e:40:f0:
d2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:22:89:3D:26:36:59:5A:AC:C1:E8:22:60:29:D0:64:7D:7A:AF:C8
X509v3 Authority Key Identifier:
keyid:CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3133312e302f32342d3234203d3e20323636353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.131.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e7:c6:b8:84:f2:80:51:eb:9a:c1:bb:27:e2:4d:f3:4c:07:
db:1f:9a:3d:4b:ed:e7:66:8d:fa:62:5b:23:60:6f:71:ca:43:
b5:67:29:81:9c:af:36:aa:e2:2b:6e:ea:0f:2d:ca:68:4e:2e:
1f:85:3e:ea:ec:b9:b4:5a:0a:ca:e8:33:24:8a:14:e6:ff:15:
36:91:01:d6:01:c7:35:cb:eb:a1:54:8a:f6:43:0f:74:75:66:
fe:a4:bb:07:4c:cc:1b:de:dc:2c:2e:01:dc:2a:eb:89:e1:e2:
62:21:22:ad:0e:be:58:d0:3c:cf:67:4a:11:76:27:3d:af:2e:
c3:c3:f6:cc:80:c5:87:fd:18:b5:f3:8f:b4:35:98:7c:a7:f8:
04:0e:3b:5a:03:a7:9a:b9:da:a1:db:d0:53:28:b1:eb:18:b1:
fc:43:de:77:17:4c:49:d2:a9:f7:8c:8a:6f:52:8a:29:af:2c:
d5:f8:66:22:38:46:f2:46:c0:d7:ef:db:82:90:19:10:3d:cd:
74:ec:fa:64:c9:5e:9f:fe:8f:b7:f2:d4:db:61:b9:ca:39:9e:
ad:8b:b2:3f:0c:b5:f8:03:08:0d:fc:cc:00:72:69:1d:2f:29:
a6:7e:1b:10:b9:cd:16:8e:24:e3:3f:5e:05:9e:99:00:6f:fb:
60:b8:63:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org