![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32322d3332203d3e20323637323134.roa
File: 34352e3233302e3136302e302f32322d3332203d3e20323637323134.roa (raw, json)
Hash identifier: i5gmNQwjF1/4xyj+0rHvAC4qoZi5euxmGuiR8872RGs=
Subject key identifier: DF:36:9F:24:55:71:2E:3C:32:D5:A8:B5:4C:EE:8D:8B:27:5B:8E:70
Certificate issuer: /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial: 0217A1FD1D5F9796230EC6450D250DE257EE5CCF
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32322d3332203d3e20323637323134.roa
Signing time: Mon 26 Aug 2024 22:55:28 +0000
ROA not before: Mon 26 Aug 2024 22:50:28 +0000
ROA not after: Mon 25 Aug 2025 22:55:28 +0000
asID: 267214
IP address blocks: 45.230.160.0/22 maxlen: 32
Validation: Failed, certificate revoked on Wed 30 Oct 2024 15:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:17:a1:fd:1d:5f:97:96:23:0e:c6:45:0d:25:0d:e2:57:ee:5c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Validity
Not Before: Aug 26 22:50:28 2024 GMT
Not After : Aug 25 22:55:28 2025 GMT
Subject: CN=DF369F2455712E3C32D5A8B54CEE8D8B275B8E70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:14:ae:0c:31:05:c9:74:3e:db:d0:63:1d:
94:71:bd:bd:b3:b1:74:63:6d:a2:a0:5e:3b:15:2c:
7b:ef:20:d8:8f:1d:4a:ad:4e:97:88:eb:11:6d:b8:
33:d1:0c:be:5f:06:97:18:9d:52:0f:9f:2a:62:6e:
9f:ac:40:c9:f6:e0:f2:47:84:bd:65:ff:93:7f:6e:
4d:57:ab:ec:4e:95:4c:1d:a0:54:5f:ae:b7:0f:c0:
d5:cf:4f:b8:cf:63:f0:b0:f0:52:c0:b1:02:57:71:
45:1e:b4:73:3e:15:cd:e0:f5:bb:ec:ca:5b:09:d6:
95:cb:f1:0d:d0:8e:da:21:98:e1:f6:f5:2b:f2:d0:
be:b5:95:ad:ba:13:5a:33:47:01:22:2f:c3:b8:3d:
71:3c:33:8c:60:bb:d2:c7:61:a4:61:0d:e0:93:59:
39:50:df:33:13:f6:8c:cc:fa:9e:b5:28:a6:7b:20:
c2:3e:7e:48:b7:aa:f0:dc:c8:5f:30:05:fe:be:bf:
b5:c9:d2:6d:af:e0:33:6e:f9:77:68:2f:b6:63:e8:
70:3d:2a:98:28:51:77:68:23:81:b1:a4:c1:28:bb:
7e:3c:93:4b:56:15:a3:08:26:2b:78:e8:be:10:78:
0f:9a:57:bb:4c:0e:90:0d:94:b3:ca:f0:dc:06:b5:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:9F:24:55:71:2E:3C:32:D5:A8:B5:4C:EE:8D:8B:27:5B:8E:70
X509v3 Authority Key Identifier:
keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32322d3332203d3e20323637323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:86:5a:56:b5:49:3a:60:32:9f:84:c9:e5:55:38:41:d8:56:
5a:56:98:97:42:00:c5:9a:2f:f8:92:91:c4:54:37:a8:66:fe:
af:0d:55:72:cd:43:97:d8:16:2f:c1:3a:b8:ab:a9:1f:77:37:
e0:db:cd:99:ec:58:a6:2b:ae:93:2c:4d:a0:63:5b:aa:ab:ae:
c3:87:b4:1d:1d:67:4b:9f:a9:12:89:7b:2f:b4:42:dc:9b:ab:
7e:31:59:31:1c:fb:b9:07:c3:47:a1:ee:54:c8:10:42:af:04:
ec:e3:6c:2f:20:70:d4:52:17:c2:b7:50:20:fc:00:4c:e3:77:
c1:66:47:5d:0e:fd:5f:78:22:a8:c4:16:16:e8:3c:3b:f5:ee:
60:bc:ef:b7:8b:84:fd:d8:84:bc:d3:06:cb:06:8b:56:e4:73:
29:49:75:24:7d:28:35:b8:7c:89:c8:65:a3:7e:73:09:d0:3b:
b3:7b:7a:f6:2f:d8:43:28:fa:2a:6e:b1:91:bb:71:c2:54:20:
09:ad:d3:7b:6d:c8:be:42:9f:8b:db:39:bd:6d:10:d8:a2:1d:
22:61:09:5a:66:f4:ff:5f:c8:03:ed:4a:89:3a:cb:47:e4:6b:
a1:57:a1:40:8a:92:4f:b1:22:72:86:b1:5f:2f:a8:75:1f:3b:
2a:51:69:4e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAheh/R1fl5YjDsZFDSUN4lfuXM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgwQTI4RURERDY2QUUzRjA3MTc0QjQwNEZGNjg2NUFB
QjkwQTdEQjAeFw0yNDA4MjYyMjUwMjhaFw0yNTA4MjUyMjU1MjhaMDMxMTAvBgNV
BAMTKERGMzY5RjI0NTU3MTJFM0MzMkQ1QThCNTRDRUU4RDhCMjc1QjhFNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+RhSuDDEFyXQ+29BjHZRxvb2z
sXRjbaKgXjsVLHvvINiPHUqtTpeI6xFtuDPRDL5fBpcYnVIPnypibp+sQMn24PJH
hL1l/5N/bk1Xq+xOlUwdoFRfrrcPwNXPT7jPY/Cw8FLAsQJXcUUetHM+Fc3g9bvs
ylsJ1pXL8Q3QjtohmOH29Svy0L61la26E1ozRwEiL8O4PXE8M4xgu9LHYaRhDeCT
WTlQ3zMT9ozM+p61KKZ7IMI+fki3qvDcyF8wBf6+v7XJ0m2v4DNu+XdoL7Zj6HA9
KpgoUXdoI4GxpMEou348k0tWFaMIJit46L4QeA+aV7tMDpANlLPK8NwGtcttAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3zafJFVxLjwy1ai1TO6NiydbjnAwHwYDVR0j
BBgwFoAUuAoo7d1mrj8HF0tAT/aGWquQp9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVU5ZEVpTUZ6NkhZOUxrYVZ0NFQ2RjFnOUpCSzJISHZObUo2WlA4d3Rl
MTUvMC9CODBBMjhFRERENjZBRTNGMDcxNzRCNDA0RkY2ODY1QUFCOTBBN0RCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4MEEyOEVEREQ2NkFFM0Yw
NzE3NEI0MDRGRjY4NjVBQUI5MEE3REIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVVOWRFaU1GejZIWTlMa2FWdDRUNkYxZzlKQksySEh2Tm1KNlpQOHd0ZTE1LzAv
MzQzNTJlMzIzMzMwMmUzMTM2MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzczMjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5qAwDQYJKoZIhvcNAQELBQADggEBAC6GWla1
STpgMp+EyeVVOEHYVlpWmJdCAMWaL/iSkcRUN6hm/q8NVXLNQ5fYFi/BOrirqR93
N+DbzZnsWKYrrpMsTaBjW6qrrsOHtB0dZ0ufqRKJey+0Qtybq34xWTEc+7kHw0eh
7lTIEEKvBOzjbC8gcNRSF8K3UCD8AEzjd8FmR10O/V94IqjEFhboPDv17mC877eL
hP3YhLzTBssGi1bkcylJdSR9KDW4fInIZaN+cwnQO7N7evYv2EMo+ipusZG7ccJU
IAmt03ttyL5Cn4vbOb1tENiiHSJhCVpm9P9fyAPtSok6y0fka6FXoUCKkk+xInKG
sV8vqHUfOypRaU4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:34 2025 by rpki-client