Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/34352e3137332e3131372e302f32342d3234203d3e20323638383130.roa
File: 34352e3137332e3131372e302f32342d3234203d3e20323638383130.roa (raw, json)
Hash identifier: pZEGS/Cpc9x6+xUZ6BrOTYylx8/cgTK5lubO5ZgpWUM=
Subject key identifier: 98:EA:48:26:56:A8:BF:E5:0F:E7:A6:32:48:B3:E7:D7:98:D5:E4:AC
Certificate issuer: /CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
Certificate serial: 0B6146EE2E04BC2458A4602A2CFAF0EE02578657
Authority key identifier: 98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/34352e3137332e3131372e302f32342d3234203d3e20323638383130.roa
Signing time: Mon 16 Dec 2024 17:18:04 +0000
ROA not before: Mon 16 Dec 2024 17:13:04 +0000
ROA not after: Mon 15 Dec 2025 17:18:04 +0000
asID: 268810
IP address blocks: 45.173.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 14:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:61:46:ee:2e:04:bc:24:58:a4:60:2a:2c:fa:f0:ee:02:57:86:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
Validity
Not Before: Dec 16 17:13:04 2024 GMT
Not After : Dec 15 17:18:04 2025 GMT
Subject: CN=98EA482656A8BFE50FE7A63248B3E7D798D5E4AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:cc:30:eb:c1:f5:d6:f7:d5:3f:98:e9:16:
87:be:f9:de:4a:ee:cb:07:34:b2:ab:d5:b9:20:27:
f7:3b:be:39:d2:c4:88:0f:3f:0e:b8:dd:22:35:b0:
fd:2b:45:a5:98:ca:96:ae:fe:ec:fe:5e:13:b7:7c:
06:34:0b:96:5c:b4:ea:e5:60:e5:2e:57:3b:9b:ca:
90:ac:49:31:ed:c1:2c:99:f1:9a:2d:72:d5:ff:77:
df:39:8e:1a:d4:44:75:f6:f9:aa:f2:74:56:32:d5:
72:35:28:cc:c2:21:9c:c4:c4:38:1d:85:61:e2:f3:
22:8c:0c:83:28:f7:40:9c:51:c2:ad:94:b1:6b:47:
df:3c:2d:2d:5f:a0:c1:0a:cc:01:0b:4d:08:32:67:
b5:ed:79:01:e8:bc:ee:2e:59:f4:14:9e:98:b8:8d:
28:d2:42:e5:fa:56:a0:73:39:b3:60:ab:9a:93:56:
12:aa:2b:c9:98:ac:4e:8e:28:6f:a3:ca:df:b4:71:
57:d6:c6:5a:8e:95:6d:a7:f5:3c:b8:6a:3f:a6:0c:
6c:38:bb:1a:43:d3:d5:4d:bf:55:22:1e:93:51:20:
94:05:09:62:66:2a:3e:d6:b4:33:da:d5:ca:35:94:
00:3f:af:7c:ef:01:72:f2:e3:8c:4d:f9:f4:d4:64:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EA:48:26:56:A8:BF:E5:0F:E7:A6:32:48:B3:E7:D7:98:D5:E4:AC
X509v3 Authority Key Identifier:
keyid:98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/34352e3137332e3131372e302f32342d3234203d3e20323638383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.117.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:ec:b9:81:22:a6:86:02:22:ee:ac:86:f6:2e:65:8f:d6:9f:
3d:1c:b4:ff:77:84:9e:e7:94:8c:19:3b:f0:bf:80:ff:5c:47:
3d:8e:fb:6e:c6:82:34:f3:45:db:f2:ff:77:ac:04:fe:bc:77:
6e:cb:db:9c:03:e1:67:4c:7f:25:94:73:86:c9:56:b9:ad:d6:
c3:57:ae:a0:d2:62:20:1d:4c:1e:35:c3:d2:79:a1:c8:5d:29:
7a:1c:2c:2f:4e:99:0d:88:86:1a:d0:83:06:5f:c2:cb:2f:9a:
ff:4d:d0:c4:7f:16:a8:9c:91:70:4b:4c:fe:31:15:65:b5:57:
4f:85:89:38:44:ad:ac:79:93:56:8f:85:99:47:ee:de:6a:34:
ec:40:9a:55:cf:5d:49:9b:5f:40:ed:bf:54:7b:db:bf:de:93:
7d:78:f5:f8:2c:72:99:a5:bf:46:39:97:07:88:31:c3:1d:35:
e0:b3:6b:c1:32:35:e3:82:eb:b7:b9:dc:05:f3:04:34:f8:00:
a3:d0:b9:ae:65:5a:ea:26:0d:1a:41:3f:58:23:52:5f:f6:c6:
f4:ba:5f:b6:7f:c1:eb:47:f7:af:09:5e:04:1b:7a:1f:6b:46:
3c:b1:65:20:b3:fa:f9:82:aa:f8:8f:03:e3:c9:ff:9e:57:dd:
c4:20:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:02:40 2025 by rpki-client