Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35372e302f32342d3234203d3e20323637323439.roa
File: 34352e3233322e35372e302f32342d3234203d3e20323637323439.roa (raw, json)
Hash identifier: zpN13dDS3QHYb5oSKMoRIYS17dmFS7jQ9Nw7+cPjS9Y=
Subject key identifier: 33:69:5D:BA:D3:FC:C7:64:19:58:00:37:A2:23:AD:FB:DA:68:6C:27
Certificate issuer: /CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
Certificate serial: 58B3C88DB47C6FD9E9EFD2507F81CCD222EB17C4
Authority key identifier: E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35372e302f32342d3234203d3e20323637323439.roa
Signing time: Thu 15 Feb 2024 13:49:30 +0000
ROA not before: Thu 15 Feb 2024 13:44:30 +0000
ROA not after: Thu 13 Feb 2025 13:49:30 +0000
asID: 267249
IP address blocks: 45.232.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 13:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b3:c8:8d:b4:7c:6f:d9:e9:ef:d2:50:7f:81:cc:d2:22:eb:17:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
Validity
Not Before: Feb 15 13:44:30 2024 GMT
Not After : Feb 13 13:49:30 2025 GMT
Subject: CN=33695DBAD3FCC76419580037A223ADFBDA686C27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:3e:50:91:1b:73:2b:71:30:8f:a7:50:43:
c7:70:fb:bc:32:eb:10:ae:4f:43:5a:f6:fd:fc:d4:
84:76:56:d8:6f:ef:60:b1:67:bb:a3:e5:63:08:db:
5f:29:7a:35:44:a7:2e:08:eb:2f:45:5f:fa:e9:a9:
d1:9e:a5:88:5c:cb:7e:b7:e7:ca:52:0f:6a:e2:99:
97:c0:2a:e8:42:ef:24:7e:0f:ac:8e:f2:b8:fe:e7:
f1:d8:12:19:aa:8b:b7:f1:31:81:38:25:63:af:81:
7b:69:13:6a:e4:e8:3d:2d:a5:5a:2c:d0:1a:8f:df:
51:9f:eb:dd:46:c2:ec:b3:8d:93:ed:cc:46:45:f3:
a5:a1:78:15:7d:43:f3:a2:75:9e:65:e7:b1:c9:a6:
ef:91:44:8b:fb:0c:55:e9:00:56:cc:19:3f:f9:26:
be:7c:ce:c3:62:15:a7:31:b1:3b:df:c3:e1:bd:ea:
76:58:bc:89:44:4c:76:3d:08:15:14:ff:d5:6a:81:
89:19:6e:33:89:46:c4:9d:17:d0:e9:2a:26:58:87:
30:d0:40:37:e9:43:57:e3:0d:39:43:d1:8f:88:9f:
aa:a5:cc:ed:67:f3:cf:4e:17:be:c2:6e:98:ac:82:
25:77:f6:d0:3a:01:a2:2a:f7:38:b3:2f:3a:ef:98:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:69:5D:BA:D3:FC:C7:64:19:58:00:37:A2:23:AD:FB:DA:68:6C:27
X509v3 Authority Key Identifier:
keyid:E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35372e302f32342d3234203d3e20323637323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.57.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a9:c4:d5:59:28:34:22:af:d7:9e:79:f0:f5:6c:06:00:82:
0a:2b:8c:30:b5:f8:9b:4f:71:a9:3b:53:bd:19:ba:0a:85:0d:
32:fd:a6:f3:0e:92:56:73:66:01:29:27:34:a7:11:4c:bf:38:
11:bd:43:19:0b:4e:b9:57:22:85:8b:a5:42:37:ee:99:ca:4b:
83:a2:28:67:c7:75:f0:19:d5:28:e3:37:5b:7d:9d:e0:cd:22:
39:ec:80:b6:ff:15:c2:5f:5f:5e:32:6e:a7:ab:fc:45:9f:1d:
42:29:89:04:6a:6a:32:5b:63:a4:72:e1:db:2a:f0:87:fe:f2:
b3:87:9b:37:8b:f3:ba:dc:58:33:f3:e9:38:ab:e9:fa:7a:1f:
de:b5:9c:b1:09:f3:6e:83:05:54:65:a7:67:8e:fa:e0:fc:3f:
99:44:74:17:67:62:ab:84:bd:95:14:7d:b7:4d:28:f1:c7:98:
bf:f5:0a:1e:fe:62:d9:62:0a:10:55:bb:0c:93:c5:06:05:35:
29:72:d5:dc:38:7e:ad:06:c6:ce:1c:e1:be:35:ce:e0:b4:df:
7f:3b:93:5c:4a:c8:96:63:88:27:e7:d4:14:19:aa:15:f6:5a:
98:85:8e:dc:0f:d1:8b:09:63:b0:a5:e1:f5:cc:8e:cf:27:49:
13:71:26:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:40:11 2024 by rpki-client on console-ams.rpki-client.org