Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231342e302f32332d3233203d3e20323635383939.roa
File: 34352e3136332e3231342e302f32332d3233203d3e20323635383939.roa (raw, json)
Hash identifier: wuWdGsm0ExJewwNgGqeRtNb7K25fwezg5Aij0T7hZdA=
Subject key identifier: 93:FE:93:85:86:A4:41:F6:4C:FF:25:6F:42:FD:24:B0:AF:E8:EB:15
Certificate issuer: /CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
Certificate serial: 05745CA177E0766FAE39C5E84A2015D10F57D649
Authority key identifier: 50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231342e302f32332d3233203d3e20323635383939.roa
Signing time: Tue 31 Dec 2024 18:17:43 +0000
ROA not before: Tue 31 Dec 2024 18:12:43 +0000
ROA not after: Tue 30 Dec 2025 18:17:43 +0000
asID: 265899
IP address blocks: 45.163.214.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:74:5c:a1:77:e0:76:6f:ae:39:c5:e8:4a:20:15:d1:0f:57:d6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
Validity
Not Before: Dec 31 18:12:43 2024 GMT
Not After : Dec 30 18:17:43 2025 GMT
Subject: CN=93FE938586A441F64CFF256F42FD24B0AFE8EB15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:cb:5a:4d:a4:cd:3f:ba:70:c9:dd:cb:d3:
ad:74:a9:1b:b4:39:dc:2e:6a:3d:f2:2d:43:37:cc:
4e:97:02:d9:1d:63:9b:8c:2f:09:f6:a5:69:7d:dd:
d3:3f:41:f9:e7:45:8c:88:c6:61:4b:2a:85:c9:2c:
bd:7b:a2:45:e3:eb:be:c3:d6:60:a8:20:4b:22:06:
9e:dc:71:36:62:e3:4c:6a:88:90:89:91:a2:90:0e:
60:53:02:e8:5a:30:eb:45:7b:09:ed:69:4d:35:94:
54:ae:ef:74:2b:6f:c2:7d:6f:1b:c7:89:03:5a:6f:
27:49:51:57:3e:92:17:40:98:64:df:9d:52:3a:3a:
bc:0e:6d:91:2f:33:10:17:87:fb:9e:29:fe:95:e3:
1f:74:4c:cf:52:69:39:1e:cd:1d:85:84:51:23:49:
a4:3a:ac:8f:c6:76:89:cf:6b:b7:89:bc:e8:32:b9:
bb:f9:75:19:30:22:10:2d:40:a2:5e:38:fa:e7:46:
82:2b:b3:e6:f8:06:da:c3:f4:2e:ec:c4:5d:80:39:
35:f6:cd:43:a6:12:ed:ce:dc:64:b7:c1:14:19:11:
b1:2c:22:52:97:9a:63:f0:5c:37:db:cd:40:42:e0:
ad:91:d1:a9:b0:6a:77:c5:22:f8:2c:79:f8:06:1c:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FE:93:85:86:A4:41:F6:4C:FF:25:6F:42:FD:24:B0:AF:E8:EB:15
X509v3 Authority Key Identifier:
keyid:50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231342e302f32332d3233203d3e20323635383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.214.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:68:44:5e:fb:8d:e1:c6:d4:a5:42:f5:d7:ea:f7:cb:be:06:
6a:04:91:13:a3:9a:47:b5:c5:47:4d:cf:86:87:5d:0d:a6:28:
6e:9c:e8:d3:80:50:97:e8:9e:87:2e:88:fd:fb:33:95:c5:90:
18:95:73:c7:f3:95:18:7e:aa:18:91:c5:ef:8b:35:66:19:ec:
81:43:94:ef:dc:17:ad:8c:c5:ce:1a:a7:cb:2e:a0:61:9f:f9:
fa:88:25:65:66:de:c4:52:08:5a:a1:9f:d3:d8:01:91:1a:a1:
70:05:32:26:f0:52:08:e8:0a:34:ce:77:7d:e8:c7:28:c1:c0:
11:81:9a:89:41:2b:11:a4:d1:c0:8d:8b:25:a0:80:ad:65:25:
a5:50:71:f1:95:e7:02:8f:8b:73:ae:58:d7:da:27:60:54:a0:
52:9d:d5:1e:bc:70:68:c6:cb:b8:2e:3a:4d:a9:6b:7d:03:a7:
f3:e4:c0:30:9d:de:ea:12:b3:6a:45:68:0f:92:05:e6:e5:ba:
56:54:93:3e:25:5c:db:cb:e7:d0:ab:9e:61:c1:d1:99:c3:46:
37:30:42:26:b9:41:27:86:d8:fd:1d:c4:4e:e1:7a:cf:41:b0:
76:e6:9a:eb:c3:d2:d2:1a:d7:2d:37:8b:ce:68:72:32:2e:4a:
92:a5:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:12 2025 by rpki-client