Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/34352e342e3131382e302f32342d3234203d3e20323636303438.roa
File: 34352e342e3131382e302f32342d3234203d3e20323636303438.roa (raw, json)
Hash identifier: YNlGwMSc6uU2Na6vAvjKoelfQDt0gi9Sv1rIVNrjMao=
Subject key identifier: 83:50:86:AA:5A:E3:5D:03:42:84:36:68:2D:33:1D:B7:79:AE:E4:E7
Certificate issuer: /CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
Certificate serial: 5A21E077F7009944F40098F99A79467FE9872649
Authority key identifier: 31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/34352e342e3131382e302f32342d3234203d3e20323636303438.roa
Signing time: Wed 05 Mar 2025 19:52:43 +0000
ROA not before: Wed 05 Mar 2025 19:47:43 +0000
ROA not after: Wed 04 Mar 2026 19:52:43 +0000
asID: 266048
IP address blocks: 45.4.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 21:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:21:e0:77:f7:00:99:44:f4:00:98:f9:9a:79:46:7f:e9:87:26:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
Validity
Not Before: Mar 5 19:47:43 2025 GMT
Not After : Mar 4 19:52:43 2026 GMT
Subject: CN=835086AA5AE35D03428436682D331DB779AEE4E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:13:24:d0:a9:6f:e0:31:04:41:80:a1:10:
36:e2:ff:05:6f:29:2c:f9:55:d4:4b:39:de:c8:b4:
9f:3f:aa:af:bc:62:83:f8:f6:5c:96:cb:e6:9e:68:
a1:0f:40:0a:c7:0c:c9:cb:ed:57:01:f2:fc:80:94:
8f:50:81:29:95:ed:87:bc:25:12:95:d1:41:ff:22:
0e:b7:d2:2c:ae:e8:6a:9c:1d:8d:d0:87:99:5a:e2:
a4:b9:89:36:82:46:ac:6d:18:2d:e4:58:3e:04:7c:
f6:d5:f6:eb:5f:13:5b:b1:fd:dd:32:a4:51:4a:bd:
3b:ec:65:da:cb:75:b3:ff:89:9a:13:4f:72:bc:0f:
c7:86:53:84:5b:2e:9f:5f:2a:2a:17:12:ef:33:96:
70:58:dc:ae:29:a7:11:d9:3f:c0:b8:28:c4:a5:4b:
67:6f:0c:9c:df:94:e7:e7:42:be:ca:15:ad:d1:7e:
00:23:c6:fb:f7:5f:32:c3:4a:91:e2:df:00:88:22:
21:83:6d:54:5d:dd:d9:d8:e7:00:66:ec:8e:4a:d7:
2b:7a:b4:6d:7c:a5:40:fb:7e:8a:7c:5a:51:7f:90:
6a:df:97:25:9d:05:14:54:8b:31:46:8b:25:3c:1b:
38:2f:86:74:ba:77:02:ac:73:9d:be:31:ed:ba:10:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:50:86:AA:5A:E3:5D:03:42:84:36:68:2D:33:1D:B7:79:AE:E4:E7
X509v3 Authority Key Identifier:
keyid:31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/34352e342e3131382e302f32342d3234203d3e20323636303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.118.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2d:98:ad:7e:ea:30:79:46:06:b5:1e:10:33:46:26:f1:35:
52:0d:02:c9:b5:62:63:17:f0:d2:5f:ec:f7:18:80:8a:4c:09:
dd:c3:a8:b2:78:e7:65:fc:84:fd:80:2e:42:2c:b5:ee:5a:eb:
3a:2b:79:cd:dd:ba:2b:b6:3d:b8:d7:02:04:db:d6:3b:fd:b7:
81:69:63:66:db:62:7b:31:b9:a5:8c:54:19:8c:a3:1f:ad:ee:
0f:11:43:c0:4e:a0:6b:f7:5b:78:17:87:22:7b:65:cd:e2:b9:
27:33:98:1e:c6:8b:7d:ff:48:a6:e1:b3:23:2d:f4:0b:f9:cc:
aa:f3:2e:ac:61:a0:ce:c9:cc:0a:93:38:82:4e:58:50:69:af:
21:c4:ac:4f:5d:77:14:04:87:f9:a0:b7:f9:8f:6d:d3:97:2d:
5b:8e:5f:fd:54:74:39:1f:70:71:7b:ea:83:3b:d9:41:74:6a:
99:74:b1:57:55:2c:e1:78:a5:ed:e5:5c:92:6c:33:92:e4:89:
63:0b:e4:49:e6:8d:18:f3:82:45:b5:16:1b:bd:f7:d1:42:4d:
ca:75:5a:33:bb:88:a0:69:21:08:b5:71:6f:32:71:11:2f:8d:
ac:13:8e:45:97:75:8d:df:4f:7c:82:26:41:34:2c:6f:96:99:
e7:61:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:24:22 2025 by rpki-client