Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/34352e3233362e32302e302f32322d3232203d3e20323638323232.roa
File: 34352e3233362e32302e302f32322d3232203d3e20323638323232.roa (raw, json)
Hash identifier: Sqzn65sTnlvByuVhG7qX0SrjdZpXKPFryL/nkEB7eXM=
Subject key identifier: 37:89:E0:CA:AA:9F:1A:62:08:58:4C:44:DD:D0:ED:A9:2A:3C:15:15
Certificate issuer: /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Certificate serial: 7F68A7D1F3B8CA88C727ED3A04539A74D2A8548E
Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/34352e3233362e32302e302f32322d3232203d3e20323638323232.roa
Signing time: Mon 20 May 2024 19:04:29 +0000
ROA not before: Mon 20 May 2024 18:59:29 +0000
ROA not after: Mon 19 May 2025 19:04:29 +0000
asID: 268222
IP address blocks: 45.236.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 21 May 2024 12:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:68:a7:d1:f3:b8:ca:88:c7:27:ed:3a:04:53:9a:74:d2:a8:54:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Validity
Not Before: May 20 18:59:29 2024 GMT
Not After : May 19 19:04:29 2025 GMT
Subject: CN=3789E0CAAA9F1A6208584C44DDD0EDA92A3C1515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:69:ae:2d:16:54:05:0f:cd:40:ca:5b:94:
44:5a:42:5e:f1:89:f3:0c:03:8b:84:41:8f:7a:c8:
17:c5:0d:10:73:fc:80:7b:d5:0f:1f:e9:c2:7b:ff:
70:df:19:11:18:a7:8b:cb:28:ef:33:7c:ed:fa:03:
2b:4d:19:6a:0b:93:b6:57:12:81:37:44:b8:c8:79:
3c:d2:1d:db:5b:74:a4:26:17:1f:c6:73:92:a0:96:
46:ab:8c:38:56:43:37:8b:d4:bd:a6:fd:af:4b:a4:
43:b8:17:bc:83:89:61:1d:21:03:f1:cc:2e:e5:6d:
68:48:e3:df:14:65:64:b6:ea:ca:d3:4f:ca:64:96:
21:3f:5f:d2:5a:64:92:25:f0:ed:70:3d:95:0e:84:
ad:f9:a4:cb:05:0f:61:03:53:b2:50:5d:fe:5e:4d:
1d:0e:42:b5:0c:f7:8d:ba:c9:91:19:12:54:1e:72:
74:b5:fe:6c:25:4b:2c:11:41:03:72:a2:34:77:40:
5a:b0:29:bc:c8:95:b0:e1:5f:3b:38:cc:f2:85:d9:
01:70:d9:ca:be:16:a3:f3:42:47:bc:ce:fe:5b:c4:
df:61:61:93:0d:f4:01:74:37:16:1f:fe:41:67:1a:
8b:60:e9:56:29:d9:3d:b4:3a:21:be:1a:90:a3:71:
01:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:89:E0:CA:AA:9F:1A:62:08:58:4C:44:DD:D0:ED:A9:2A:3C:15:15
X509v3 Authority Key Identifier:
keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/34352e3233362e32302e302f32322d3232203d3e20323638323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:15:6b:b8:3c:1d:36:c3:a6:0f:ba:83:6a:15:24:b4:50:e9:
66:0c:3c:0d:78:5d:eb:f2:c4:bc:ab:bf:d8:ab:e1:22:bb:1a:
3f:4d:85:bf:0a:46:5c:85:14:e7:17:f0:91:65:2d:b1:69:29:
4f:aa:13:23:8a:b2:c9:c5:a4:50:c5:01:26:ae:c8:cd:15:98:
39:48:f7:9c:a3:9b:bf:ea:4e:d1:02:8d:28:82:15:52:ac:77:
8a:79:d0:31:e5:59:b4:46:94:e2:b7:4b:da:d5:2f:45:df:bd:
6d:ce:78:87:4c:ab:89:b3:e6:69:de:de:74:30:11:53:32:f0:
45:95:fe:18:cb:1b:b7:4d:67:66:90:4c:40:ed:49:41:99:38:
99:1a:73:6d:96:5b:5d:46:c3:5e:b1:63:e7:5f:3a:5d:bd:91:
ba:8f:c8:e2:44:fe:13:73:8d:48:df:75:21:5d:f7:6d:1d:60:
33:58:34:0a:b3:43:c1:96:f9:55:ee:31:c1:20:3a:45:2e:88:
db:c5:e6:99:a5:1f:2a:16:1c:19:f8:6b:6b:ae:a0:43:55:2f:
28:32:8b:fc:0a:10:86:b4:2e:52:c0:50:75:3c:c6:7f:bb:58:
f9:53:2f:48:c0:ec:a3:c5:0b:74:68:ee:de:32:fe:97:9f:a7:
94:1d:c4:eb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUf2in0fO4yojHJ+06BFOadNKoVI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERBMUVDNEEwRTQ4QjVDMDlGQjc0NjMyN0YwNUY1MUVC
NUY4RTU3MDAeFw0yNDA1MjAxODU5MjlaFw0yNTA1MTkxOTA0MjlaMDMxMTAvBgNV
BAMTKDM3ODlFMENBQUE5RjFBNjIwODU4NEM0NERERDBFREE5MkEzQzE1MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCom2muLRZUBQ/NQMpblERaQl7x
ifMMA4uEQY96yBfFDRBz/IB71Q8f6cJ7/3DfGREYp4vLKO8zfO36AytNGWoLk7ZX
EoE3RLjIeTzSHdtbdKQmFx/Gc5KglkarjDhWQzeL1L2m/a9LpEO4F7yDiWEdIQPx
zC7lbWhI498UZWS26srTT8pkliE/X9JaZJIl8O1wPZUOhK35pMsFD2EDU7JQXf5e
TR0OQrUM9426yZEZElQecnS1/mwlSywRQQNyojR3QFqwKbzIlbDhXzs4zPKF2QFw
2cq+FqPzQke8zv5bxN9hYZMN9AF0NxYf/kFnGotg6VYp2T20OiG+GpCjcQFfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUN4ngyqqfGmIIWExE3dDtqSo8FRUwHwYDVR0j
BBgwFoAU3aHsSg5ItcCft0YyfwX1HrX45XAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERq
UksvMC9EREExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQTFFQzRBMEU0OEI1QzA5
RkI3NDYzMjdGMDVGNTFFQjVGOEU1NzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN4RXpIaG5BWmVhZHpSOGtZZlZzR21WWnRmWEtWcEdRUmROWWRUN1hEalJLLzAv
MzQzNTJlMzIzMzM2MmUzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLewUMA0GCSqGSIb3DQEBCwUAA4IBAQB7FWu4PB02
w6YPuoNqFSS0UOlmDDwNeF3r8sS8q7/Yq+Eiuxo/TYW/CkZchRTnF/CRZS2xaSlP
qhMjirLJxaRQxQEmrsjNFZg5SPeco5u/6k7RAo0oghVSrHeKedAx5Vm0RpTit0va
1S9F371tzniHTKuJs+Zp3t50MBFTMvBFlf4Yyxu3TWdmkExA7UlBmTiZGnNtlltd
RsNesWPnXzpdvZG6j8jiRP4Tc41I33UhXfdtHWAzWDQKs0PBlvlV7jHBIDpFLojb
xeaZpR8qFhwZ+GtrrqBDVS8oMov8ChCGtC5SwFB1PMZ/u1j5Uy9IwOyjxQt0aO7e
Mv6Xn6eUHcTr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org