Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/34352e3233362e32302e302f32332d3233203d3e20323638323232.roa
File: 34352e3233362e32302e302f32332d3233203d3e20323638323232.roa (raw, json)
Hash identifier: 6ycmxkUpOFLL6VisMPiS5moRkLamuh2U36CUg+b5NjY=
Subject key identifier: B7:87:CA:C6:DB:9C:A3:6E:00:A1:FF:4D:47:3E:68:2B:3D:7B:17:64
Certificate issuer: /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Certificate serial: 628FC1C1747F4BE40AC700E97C829B21DEDBE2D4
Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/34352e3233362e32302e302f32332d3233203d3e20323638323232.roa
Signing time: Mon 20 May 2024 19:04:32 +0000
ROA not before: Mon 20 May 2024 18:59:32 +0000
ROA not after: Mon 19 May 2025 19:04:32 +0000
asID: 268222
IP address blocks: 45.236.20.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 21 May 2024 12:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:8f:c1:c1:74:7f:4b:e4:0a:c7:00:e9:7c:82:9b:21:de:db:e2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Validity
Not Before: May 20 18:59:32 2024 GMT
Not After : May 19 19:04:32 2025 GMT
Subject: CN=B787CAC6DB9CA36E00A1FF4D473E682B3D7B1764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:91:74:bd:3f:a1:ca:da:9d:c5:2d:ab:2d:
68:08:1c:d8:71:38:79:1c:19:e2:6f:d7:32:e9:c7:
b1:4f:61:74:88:07:a8:39:75:66:0e:9c:eb:7b:ce:
c0:eb:a8:20:9f:bd:10:84:93:44:b3:97:fc:ad:ef:
6d:12:44:ca:24:b9:b8:be:5b:87:ec:d7:0b:4e:ff:
6b:fd:a4:c4:ad:2a:f9:36:93:81:2d:a0:f1:d4:88:
37:c8:31:33:a6:52:c4:29:1f:ab:53:07:6d:b9:f1:
1d:ef:f1:1d:de:07:af:c6:a5:3c:6d:ef:32:63:bf:
c8:25:ba:fb:1c:41:84:a0:9e:57:47:3e:af:16:63:
ab:c8:de:67:9e:7c:ad:1b:07:2e:66:d2:09:23:e5:
de:54:ce:bc:52:75:f3:ef:33:81:f7:59:f5:49:98:
9f:90:d9:c9:91:64:81:97:8b:48:29:af:b6:d8:81:
33:e3:18:dc:8d:d9:bd:69:53:a8:55:81:b6:85:16:
c6:fc:bf:e0:ee:53:19:2b:61:49:06:17:95:6d:6e:
7e:1a:c4:71:f6:27:80:f8:76:dd:c0:86:42:24:89:
53:53:41:4f:a4:9c:d7:96:cf:c0:74:eb:1f:18:d3:
d0:f8:1f:d2:e1:95:44:d8:8c:65:64:62:71:8f:33:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:87:CA:C6:DB:9C:A3:6E:00:A1:FF:4D:47:3E:68:2B:3D:7B:17:64
X509v3 Authority Key Identifier:
keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/34352e3233362e32302e302f32332d3233203d3e20323638323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.20.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:59:44:2b:4f:ed:b4:c3:2a:fb:6c:a6:e8:86:e0:c3:f2:1b:
60:4f:2e:e9:7c:80:e0:67:bb:3c:a8:9d:2d:d6:b8:bc:7c:25:
48:16:77:2e:ee:f9:16:3e:68:e6:44:7c:d6:e3:3b:c5:15:0f:
47:59:79:da:f2:90:73:8e:35:eb:00:f9:e8:b5:6d:30:2c:a5:
46:38:90:6c:c5:3e:af:5d:8f:7c:2b:cb:6d:f4:8d:a9:5f:1e:
d1:98:ae:34:02:06:93:fb:be:f6:bb:cc:34:fe:2e:5f:77:93:
77:08:1a:2c:8a:c7:7f:c0:79:f1:60:0c:ad:2c:ce:3f:af:de:
fd:04:e0:ae:59:d1:12:69:30:86:54:85:90:7b:3d:b5:5c:b2:
34:e7:2a:a3:60:79:c7:57:1c:e9:9d:53:82:c8:6e:fe:5b:ac:
8c:ee:0e:e8:83:33:6b:f6:7d:90:7b:68:68:35:5c:3c:55:93:
0b:36:d5:23:6e:dd:a3:7a:40:df:ee:89:d9:58:f4:44:ae:cb:
20:05:f2:7e:91:13:c7:46:29:90:53:d3:fc:98:43:a2:a6:cd:
52:04:59:fe:eb:c0:2b:d3:13:6f:4c:6d:9e:c4:43:be:68:0e:
bc:73:7d:f7:dc:13:bc:66:d8:b0:1c:13:4f:69:a9:d7:0d:ca:
1f:3c:47:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org