Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32342d3234203d3e20323637333636.roa
File: 34352e3233342e3133322e302f32342d3234203d3e20323637333636.roa (raw, json)
Hash identifier: qMBkiyP3CrsLSy4fqi2KSkQ2H1Wjt/n/Gm8pY0oSqMk=
Subject key identifier: 4D:EA:2E:B4:24:92:7D:FC:51:A7:56:15:AC:22:09:8B:A6:11:E4:C8
Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial: 4E84D2A7CD2063A314D8265945B3FE715880D406
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32342d3234203d3e20323637333636.roa
Signing time: Tue 23 Apr 2024 13:51:11 +0000
ROA not before: Tue 23 Apr 2024 13:46:11 +0000
ROA not after: Tue 22 Apr 2025 13:51:11 +0000
asID: 267366
IP address blocks: 45.234.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:84:d2:a7:cd:20:63:a3:14:d8:26:59:45:b3:fe:71:58:80:d4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Validity
Not Before: Apr 23 13:46:11 2024 GMT
Not After : Apr 22 13:51:11 2025 GMT
Subject: CN=4DEA2EB424927DFC51A75615AC22098BA611E4C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:53:3a:e8:8f:ef:6e:b7:ff:25:1d:76:91:
9c:5a:cc:44:28:8d:ce:d6:5e:b5:63:6f:d5:6e:01:
0f:d4:01:1c:93:6f:bf:38:1b:6a:b2:46:2d:f5:53:
d7:18:49:1d:05:9c:78:60:b3:ef:e5:fb:6a:a8:a6:
c9:e4:91:10:fa:52:7c:85:47:14:ae:05:0e:f2:69:
fc:d5:65:4d:cd:6f:e4:c5:e1:52:95:46:9f:22:ad:
1b:33:c7:eb:a0:36:63:dd:0b:37:2e:28:11:f1:e2:
34:14:9f:43:f8:4a:5c:c5:b4:e7:bb:17:d0:0e:41:
c2:6e:b8:f3:c1:04:61:8c:c4:96:cd:5e:7c:49:15:
a8:47:46:1c:32:cf:09:d3:2e:c5:71:49:f8:ee:54:
d2:be:7e:1a:5c:b9:f2:22:31:12:fa:17:4e:75:c0:
e6:49:b1:ff:95:f5:2f:0b:55:66:10:68:ea:b9:42:
d7:ec:87:9a:c0:17:a3:b4:c8:f8:7c:63:56:55:7f:
74:d8:5d:ce:f4:86:08:e8:e3:3a:e8:bd:cc:9b:dd:
f3:bc:45:26:bc:73:fc:2f:76:cd:f2:d5:c0:54:63:
73:c7:cd:a1:8a:a1:0c:2e:78:63:bd:06:2d:ee:2e:
45:13:5e:02:35:1d:4e:e6:09:88:7f:f4:7c:85:98:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EA:2E:B4:24:92:7D:FC:51:A7:56:15:AC:22:09:8B:A6:11:E4:C8
X509v3 Authority Key Identifier:
keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32342d3234203d3e20323637333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.132.0/24
Signature Algorithm: sha256WithRSAEncryption
19:51:9d:4e:78:58:09:13:99:a9:a5:5a:ca:60:f6:4f:f2:42:
42:de:07:e6:c0:60:2a:17:f7:7c:3f:f1:70:d4:a5:eb:7a:cd:
c1:43:7c:ce:2b:1c:a5:ac:2d:42:f8:4d:71:44:88:ba:31:d9:
c9:2e:ae:8e:73:69:0c:cf:11:03:28:86:15:ba:7e:30:96:bd:
92:26:e3:b9:5c:16:f7:f7:3f:87:d2:e6:11:a9:b7:59:8c:af:
e9:e2:23:c8:a7:28:3e:df:9a:85:22:43:8e:33:c2:81:96:2f:
36:d9:2a:da:a2:d2:e5:44:63:71:cf:ce:f3:d0:bb:1f:4c:6b:
d9:8f:f0:d8:3f:83:fa:79:10:24:2c:b2:93:8a:40:27:ae:85:
90:7b:63:e8:9f:3c:82:63:ad:9b:aa:8f:56:f2:f1:4e:1e:e2:
b7:0d:70:ef:84:ea:e6:a8:65:d7:77:6e:f3:13:d7:1c:62:99:
8a:8a:ab:48:74:8e:6a:a5:2a:c9:d2:a5:d2:d2:9a:a4:f1:0d:
6f:e5:a9:94:95:45:4f:2c:78:b1:2b:e9:9b:46:65:88:4c:e6:
b2:7a:ec:70:8d:cc:2e:02:cf:8c:47:94:72:21:d9:79:6d:ad:
bf:b7:b6:82:ef:0f:1f:86:d4:6a:6d:2d:47:3f:f8:fc:fb:2d:
a8:e8:71:a7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUToTSp80gY6MU2CZZRbP+cViA1AYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQyMEFFNjNFRDk5MTI0RjdEM0YxNEI4RkE5QzFGRjM3
ODAwNjdDMjAeFw0yNDA0MjMxMzQ2MTFaFw0yNTA0MjIxMzUxMTFaMDMxMTAvBgNV
BAMTKDRERUEyRUI0MjQ5MjdERkM1MUE3NTYxNUFDMjIwOThCQTYxMUU0QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWFM66I/vbrf/JR12kZxazEQo
jc7WXrVjb9VuAQ/UARyTb784G2qyRi31U9cYSR0FnHhgs+/l+2qopsnkkRD6UnyF
RxSuBQ7yafzVZU3Nb+TF4VKVRp8irRszx+ugNmPdCzcuKBHx4jQUn0P4SlzFtOe7
F9AOQcJuuPPBBGGMxJbNXnxJFahHRhwyzwnTLsVxSfjuVNK+fhpcufIiMRL6F051
wOZJsf+V9S8LVWYQaOq5Qtfsh5rAF6O0yPh8Y1ZVf3TYXc70hgjo4zrovcyb3fO8
RSa8c/wvds3y1cBUY3PHzaGKoQwueGO9Bi3uLkUTXgI1HU7mCYh/9HyFmO9jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTeoutCSSffxRp1YVrCIJi6YR5MgwHwYDVR0j
BBgwFoAU9CCuY+2ZEk99PxS4+pwf83gAZ8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhH
MWYvMC9GNDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MjBBRTYzRUQ5OTEyNEY3
RDNGMTRCOEZBOUMxRkYzNzgwMDY3QzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJyaVQ1c2QyVnFXRnliRGZyNnIyZ0JIZGtnSFNBRjFEbUZQTVdTa2hIRzFmLzAv
MzQzNTJlMzIzMzM0MmUzMTMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt6oQwDQYJKoZIhvcNAQELBQADggEBABlRnU54
WAkTmamlWspg9k/yQkLeB+bAYCoX93w/8XDUpet6zcFDfM4rHKWsLUL4TXFEiLox
2ckuro5zaQzPEQMohhW6fjCWvZIm47lcFvf3P4fS5hGpt1mMr+niI8inKD7fmoUi
Q44zwoGWLzbZKtqi0uVEY3HPzvPQux9Ma9mP8Ng/g/p5ECQsspOKQCeuhZB7Y+if
PIJjrZuqj1by8U4e4rcNcO+E6uaoZdd3bvMT1xximYqKq0h0jmqlKsnSpdLSmqTx
DW/lqZSVRU8seLEr6ZtGZYhM5rJ67HCNzC4Cz4xHlHIh2Xltrb+3toLvDx+G1Gpt
LUc/+Pz7Lajocac=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:24 2025 by rpki-client