Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/1/34352e362e36382e302f32322d3234203d3e20323730393835.roa
File: 34352e362e36382e302f32322d3234203d3e20323730393835.roa (raw, json)
Hash identifier: NDVQIq6NHToodZq3Xwp9WvDgCYYRJDnxyakxKm8RcFM=
Subject key identifier: B4:4F:B6:C6:8E:B2:18:71:A0:32:67:38:68:05:CD:CD:F8:33:69:6A
Certificate issuer: /CN=CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D
Certificate serial: 5327AB5EA4F0E52801A2248CFEF435C9B4D846C8
Authority key identifier: CA:FB:73:F2:34:6E:1C:1F:F2:9A:EA:24:5E:19:FE:53:27:B2:C2:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/1/34352e362e36382e302f32322d3234203d3e20323730393835.roa
Signing time: Wed 03 Apr 2024 22:38:38 +0000
ROA not before: Wed 03 Apr 2024 22:33:38 +0000
ROA not after: Wed 02 Apr 2025 22:38:38 +0000
asID: 270985
IP address blocks: 45.6.68.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:27:ab:5e:a4:f0:e5:28:01:a2:24:8c:fe:f4:35:c9:b4:d8:46:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D
Validity
Not Before: Apr 3 22:33:38 2024 GMT
Not After : Apr 2 22:38:38 2025 GMT
Subject: CN=B44FB6C68EB21871A03267386805CDCDF833696A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:04:63:a4:0c:43:94:37:ca:bd:df:79:8c:
e1:8a:51:c6:84:65:ad:4e:2e:9f:f7:f2:61:35:3b:
f8:36:69:ad:d7:7f:ff:12:91:45:76:0b:50:00:4b:
a1:d6:58:f5:e3:b9:e3:81:ff:06:d1:59:df:e8:26:
bd:c4:24:2b:14:c1:b8:28:c2:2f:34:20:c2:38:37:
64:b1:86:3f:6f:86:45:a1:9d:c7:96:27:7d:a5:1f:
25:c7:c5:21:f5:80:20:61:cb:da:7b:f9:db:52:4a:
4c:b1:b0:bb:2f:f0:c1:54:8e:1e:02:a3:f8:3d:d2:
72:92:6d:68:2a:8a:0f:83:e9:c1:46:05:41:ba:4c:
2d:2c:45:f8:20:70:bf:7c:55:bf:ba:18:fc:23:a8:
f0:14:6a:bb:d6:dd:b7:12:bc:c5:6e:a1:2c:3f:72:
ea:e3:40:4c:d9:2a:0b:70:41:d0:84:7f:cd:e7:20:
94:4a:a6:b5:5a:69:0c:ac:cc:44:2e:90:3d:83:4e:
f6:38:8f:25:68:6f:36:5a:be:65:dd:a4:f7:76:92:
d1:07:d3:35:ef:b3:4d:2d:f6:6b:7e:5e:c0:3a:2d:
53:b1:87:3b:74:ed:81:b0:7c:67:a5:98:f6:04:57:
33:5f:75:31:cd:ed:22:3f:4d:c3:f9:cf:0e:eb:70:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4F:B6:C6:8E:B2:18:71:A0:32:67:38:68:05:CD:CD:F8:33:69:6A
X509v3 Authority Key Identifier:
keyid:CA:FB:73:F2:34:6E:1C:1F:F2:9A:EA:24:5E:19:FE:53:27:B2:C2:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/1/CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/1/34352e362e36382e302f32322d3234203d3e20323730393835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.68.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:9c:b7:b4:ef:90:1b:b0:63:82:8d:0f:fa:f7:61:2e:04:cd:
0f:a9:ec:23:09:c6:6e:ca:15:a7:56:0c:25:46:a2:b4:99:13:
fd:26:e0:ce:2b:d9:c4:b1:22:41:8c:f3:4f:43:5e:9f:be:69:
ae:5d:bf:20:68:db:58:cc:4e:50:38:4e:ca:5d:24:67:8d:ac:
fd:01:80:f4:24:56:32:38:cc:94:a6:ac:9a:5d:59:59:6a:52:
40:37:94:e7:8d:46:d9:47:90:f8:d3:28:92:2d:7f:3b:f8:11:
2f:5c:17:90:f5:08:df:b6:53:5d:9e:5f:b5:2c:59:30:9f:88:
a6:93:0d:94:a1:e2:0d:88:6d:1a:71:53:99:c4:64:3c:d2:f1:
bf:f6:d2:39:85:9c:b8:6d:f4:7b:bd:49:bc:60:84:b7:ea:57:
f7:34:03:18:2e:3b:7f:95:40:7a:ba:27:5b:63:89:6b:9e:56:
94:2a:57:be:e9:53:21:93:c0:5c:f4:0d:42:97:ef:bb:8e:f6:
1e:25:de:80:60:6e:6d:83:a3:56:e6:0a:e8:c6:eb:cf:05:7f:
29:04:1a:ee:cd:9d:1e:a9:73:48:08:54:19:9b:72:1e:38:39:
0e:fa:3b:86:b9:e1:82:9a:7f:54:aa:5b:53:d0:d1:78:2b:15:
8d:6d:55:1d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUUyerXqTw5SgBoiSM/vQ1ybTYRsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FGQjczRjIzNDZFMUMxRkYyOUFFQTI0NUUxOUZFNTMy
N0IyQzIzRDAeFw0yNDA0MDMyMjMzMzhaFw0yNTA0MDIyMjM4MzhaMDMxMTAvBgNV
BAMTKEI0NEZCNkM2OEVCMjE4NzFBMDMyNjczODY4MDVDRENERjgzMzY5NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xwRjpAxDlDfKvd95jOGKUcaE
Za1OLp/38mE1O/g2aa3Xf/8SkUV2C1AAS6HWWPXjueOB/wbRWd/oJr3EJCsUwbgo
wi80IMI4N2Sxhj9vhkWhnceWJ32lHyXHxSH1gCBhy9p7+dtSSkyxsLsv8MFUjh4C
o/g90nKSbWgqig+D6cFGBUG6TC0sRfggcL98Vb+6GPwjqPAUarvW3bcSvMVuoSw/
curjQEzZKgtwQdCEf83nIJRKprVaaQyszEQukD2DTvY4jyVobzZavmXdpPd2ktEH
0zXvs00t9mt+XsA6LVOxhzt07YGwfGelmPYEVzNfdTHN7SI/TcP5zw7rcE0lAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUtE+2xo6yGHGgMmc4aAXNzfgzaWowHwYDVR0j
BBgwFoAUyvtz8jRuHB/ymuokXhn+Uyeywj0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRhSHZrU3U1dGJSWXdQcHdlc1V5TXFuY3Nta1JZTko1WFZaMld1WUdZ
VGsvMS9DQUZCNzNGMjM0NkUxQzFGRjI5QUVBMjQ1RTE5RkU1MzI3QjJDMjNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRkI3M0YyMzQ2RTFDMUZG
MjlBRUEyNDVFMTlGRTUzMjdCMkMyM0QuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0YUh2a1N1NXRiUll3UHB3ZXNVeU1xbmNzbWtSWU5KNVhWWjJXdVlHWVRrLzEv
MzQzNTJlMzYyZTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzAzOTM4
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBkQwDQYJKoZIhvcNAQELBQADggEBADyct7TvkBuwY4KN
D/r3YS4EzQ+p7CMJxm7KFadWDCVGorSZE/0m4M4r2cSxIkGM809DXp++aa5dvyBo
21jMTlA4TspdJGeNrP0BgPQkVjI4zJSmrJpdWVlqUkA3lOeNRtlHkPjTKJItfzv4
ES9cF5D1CN+2U12eX7UsWTCfiKaTDZSh4g2IbRpxU5nEZDzS8b/20jmFnLht9Hu9
SbxghLfqV/c0AxguO3+VQHq6J1tjiWueVpQqV77pUyGTwFz0DUKX77uO9h4l3oBg
bm2Do1bmCujG688FfykEGu7NnR6pc0gIVBmbch44OQ76O4a54YKaf1SqW1PQ0Xgr
FY1tVR0=
-----END CERTIFICATE-----
Generated at Fri Nov 8 06:31:06 2024 by rpki-client on console-fra.rpki-client.org