Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/34352e3233362e32322e302f32342d3234203d3e20323638323232.roa
File: 34352e3233362e32322e302f32342d3234203d3e20323638323232.roa (raw, json)
Hash identifier: xDv9wK8X3VHbRUutWFO9yYNMNF1VYpcNy1qN+WehqIo=
Subject key identifier: 5D:68:A1:8E:3F:34:34:65:CE:A6:29:24:43:6D:A4:CD:A0:DE:21:C6
Certificate issuer: /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Certificate serial: 1AEFE03312D70C42C511D64BDACACF15F7FCAAD6
Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/34352e3233362e32322e302f32342d3234203d3e20323638323232.roa
Signing time: Mon 20 May 2024 19:04:38 +0000
ROA not before: Mon 20 May 2024 18:59:38 +0000
ROA not after: Mon 19 May 2025 19:04:38 +0000
asID: 268222
IP address blocks: 45.236.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 12:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ef:e0:33:12:d7:0c:42:c5:11:d6:4b:da:ca:cf:15:f7:fc:aa:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Validity
Not Before: May 20 18:59:38 2024 GMT
Not After : May 19 19:04:38 2025 GMT
Subject: CN=5D68A18E3F343465CEA62924436DA4CDA0DE21C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:52:21:9f:77:43:24:ae:d7:9b:6a:39:23:
82:2b:1a:f1:c4:63:e5:c6:09:4e:ef:68:69:a8:9c:
25:82:5f:74:94:9b:29:18:1c:e8:15:a7:07:78:09:
20:2f:af:47:08:7f:8a:81:77:8d:c7:2a:14:d6:85:
bb:8e:5c:81:d7:17:7b:95:a5:e8:56:7c:e1:2b:30:
b1:d4:4c:a2:59:c1:2b:f6:df:42:c6:ba:14:d5:ff:
2d:83:7c:e7:3d:f8:6a:57:ae:9f:84:8c:28:9d:ed:
4d:d6:89:cd:69:bf:b4:80:5f:24:17:fc:fb:e7:1f:
09:eb:44:0c:c5:00:ec:ef:c5:6d:5f:79:aa:e9:b2:
63:79:91:82:e8:fb:f1:66:ae:0f:b6:1f:42:79:e9:
e2:52:c7:8e:d3:5e:42:f1:cb:a3:5c:55:09:34:7e:
50:64:46:56:f9:75:ec:45:e2:f7:d4:fb:f3:27:d2:
09:99:d1:02:76:58:cb:75:ec:05:12:65:76:de:c2:
90:8c:1f:fd:de:ce:02:a6:05:e3:f8:f9:1d:a1:62:
de:9d:8a:87:30:68:4f:7e:12:f7:82:d0:b2:71:27:
f1:62:42:07:38:f2:f1:ed:5f:9e:fd:f6:6b:49:4a:
b0:e0:65:28:11:43:43:76:08:3a:d3:9f:e3:0e:0d:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:68:A1:8E:3F:34:34:65:CE:A6:29:24:43:6D:A4:CD:A0:DE:21:C6
X509v3 Authority Key Identifier:
keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/34352e3233362e32322e302f32342d3234203d3e20323638323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.22.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:45:55:35:f4:3b:85:c7:08:21:6d:f4:eb:da:da:3f:e4:77:
16:ff:00:11:48:52:de:84:f6:2c:0c:b2:98:b5:b6:ba:b8:4d:
a8:0a:c4:a1:ad:d7:9f:47:95:ce:dd:24:18:99:f4:98:5e:2f:
7d:a9:6d:e7:c5:24:3c:55:e2:06:53:4e:44:98:cf:f1:c6:a3:
30:db:1e:0f:e8:bc:7e:44:1a:28:ba:3e:1f:66:57:0c:d8:dd:
e5:64:ae:b8:44:ac:c2:0b:e0:57:71:b2:9c:68:95:d9:4e:9a:
e8:55:bd:fb:2a:d2:20:61:37:b3:b2:6e:83:f4:58:b1:16:9e:
20:66:41:aa:c9:7e:42:15:05:6d:46:df:a4:71:ed:0e:23:2a:
db:b5:0f:56:49:e4:0e:e6:1f:c6:03:44:52:40:06:22:34:65:
54:40:fd:9a:e2:3f:6a:fc:d5:24:5b:5a:26:a9:7c:29:62:77:
e8:60:a9:ee:2b:81:e7:72:05:35:70:16:60:af:cd:73:11:e9:
8d:b0:c2:ec:78:5f:be:d1:cb:0f:bc:48:ec:48:7f:ef:18:92:
d1:70:47:60:aa:e2:58:a6:c1:e4:76:10:e3:04:47:ba:0f:25:
b6:45:f6:a3:88:b2:8f:b1:cd:40:77:16:0f:a3:53:e7:17:fa:
7b:6b:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org