Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa
File: 34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa (raw, json)
Hash identifier: nqCj2CeELrOjVnwQ0HlIyyYZCc4UzbpTj+qwpwji2N0=
Subject key identifier: 3F:12:E0:B5:45:A6:96:56:AB:35:67:0C:C2:D5:D9:21:4F:4C:4A:D7
Certificate issuer: /CN=36DA718022D54A30E93B3878E7B41A3BBAD1BAEB
Certificate serial: 52D9970CEFF1AF5C935FE5D2977ED6F72619767A
Authority key identifier: 36:DA:71:80:22:D5:4A:30:E9:3B:38:78:E7:B4:1A:3B:BA:D1:BA:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa
Signing time: Tue 28 Jan 2025 17:42:21 +0000
ROA not before: Tue 28 Jan 2025 17:37:21 +0000
ROA not after: Tue 27 Jan 2026 17:42:21 +0000
asID: 268809
IP address blocks: 45.173.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Feb 2025 02:09:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:d9:97:0c:ef:f1:af:5c:93:5f:e5:d2:97:7e:d6:f7:26:19:76:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DA718022D54A30E93B3878E7B41A3BBAD1BAEB
Validity
Not Before: Jan 28 17:37:21 2025 GMT
Not After : Jan 27 17:42:21 2026 GMT
Subject: CN=3F12E0B545A69656AB35670CC2D5D9214F4C4AD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:2d:c8:02:5a:d8:ab:53:73:11:11:fb:ba:
95:76:ad:7a:7e:be:4d:ae:b2:e7:91:a7:b9:fd:58:
3a:e3:8b:3c:de:6c:b6:da:07:0e:62:a5:db:01:2f:
07:79:4f:5e:e9:c7:f0:f2:92:17:d9:33:0f:00:34:
2e:4b:0d:e8:a0:14:4b:48:e7:44:05:3a:97:05:75:
86:72:08:28:c6:1d:9a:44:14:49:9c:27:e8:df:de:
8f:f7:07:2f:3a:c0:fc:1b:a2:39:f7:4c:b2:49:2b:
ce:8f:fe:59:bf:7a:99:21:8f:4b:a5:ae:42:ec:f3:
54:3d:95:53:ed:46:77:3f:47:c2:26:4f:83:e0:9e:
f0:d9:12:b4:ed:09:c1:45:86:0a:63:3e:5d:64:1d:
ac:73:a0:70:c5:df:54:94:df:3b:0c:21:58:b6:19:
a6:f7:13:38:9a:e1:6a:7c:eb:16:6d:f8:9d:a2:fa:
fe:26:9b:61:cc:cb:81:e8:6c:3a:de:61:8e:28:38:
d8:a1:6c:e1:3d:d5:3c:3c:ac:78:b4:5e:cb:2f:ca:
ef:d5:ca:67:64:71:d9:36:f8:80:6e:3e:8c:2e:73:
30:3a:93:de:94:14:33:23:4a:5f:43:fc:c5:de:26:
4a:bb:fe:ff:54:51:b1:7c:b0:15:bd:c8:5c:38:56:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:12:E0:B5:45:A6:96:56:AB:35:67:0C:C2:D5:D9:21:4F:4C:4A:D7
X509v3 Authority Key Identifier:
keyid:36:DA:71:80:22:D5:4A:30:E9:3B:38:78:E7:B4:1A:3B:BA:D1:BA:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.100.0/22
Signature Algorithm: sha256WithRSAEncryption
40:63:ac:93:e2:bb:74:93:34:55:e3:f4:05:a3:ef:c0:7c:e8:
06:16:7d:57:37:c9:fd:bc:e9:c1:59:90:c7:13:af:d5:57:9e:
4c:7d:ff:34:02:75:5d:78:03:3c:12:ff:b0:70:2d:fa:82:65:
f6:90:cd:20:66:08:35:93:ab:c5:b7:e0:89:b8:8d:b8:86:84:
ac:6a:b5:4c:a3:0b:5a:51:2c:d8:8c:17:65:fe:78:d3:38:5c:
71:55:e9:ce:df:7f:4e:af:07:35:3a:0c:39:6a:c1:7d:a2:9c:
59:ea:6e:4a:74:50:6d:ce:53:5a:57:62:c1:12:4c:3a:6e:34:
3a:d6:b8:f4:b7:35:8e:f4:46:49:ad:37:96:54:1b:70:51:49:
07:5c:c5:39:14:b1:d4:4f:c8:3d:18:5c:ae:18:97:e8:64:b5:
e4:ef:75:d7:4f:18:5d:02:01:85:c1:aa:1a:c0:b1:30:22:a6:
1c:94:11:e9:34:48:34:d3:a0:4f:7c:3b:40:9d:9b:96:c0:bd:
5b:7c:38:1d:56:61:c6:a7:89:c2:47:84:55:74:69:66:5d:9f:
bf:e6:c5:97:7a:f1:c1:c0:a9:31:bf:4c:43:cd:c1:40:fd:21:
e7:eb:9b:aa:90:c0:2d:39:43:f8:60:00:da:5e:ef:ee:77:90:
76:80:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:38:01 2025 by rpki-client