Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233322e302f32322d3234203d3e20323731363536.roa
File: 34352e3138362e3233322e302f32322d3234203d3e20323731363536.roa (raw, json)
Hash identifier: 2+gZQ/6ii+Id+wVAnxRBU5Op4V9CxDzPWpvQUHxRUIQ=
Subject key identifier: 03:F5:40:F8:D1:C1:24:B6:B5:61:74:57:6E:CF:A7:0B:24:A7:7E:12
Certificate issuer: /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial: 17905C590F4EFE873C9BDE48E7EF6C7296010DC7
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233322e302f32322d3234203d3e20323731363536.roa
Signing time: Wed 05 Jun 2024 19:22:10 +0000
ROA not before: Wed 05 Jun 2024 19:17:10 +0000
ROA not after: Wed 04 Jun 2025 19:22:10 +0000
asID: 271656
IP address blocks: 45.186.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 13:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:90:5c:59:0f:4e:fe:87:3c:9b:de:48:e7:ef:6c:72:96:01:0d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Validity
Not Before: Jun 5 19:17:10 2024 GMT
Not After : Jun 4 19:22:10 2025 GMT
Subject: CN=03F540F8D1C124B6B56174576ECFA70B24A77E12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:d8:6d:24:5c:fd:72:a3:cb:27:04:c7:9e:
f1:98:b3:7e:58:aa:e2:a8:96:f6:08:94:1d:af:f1:
e5:81:25:f9:2e:2f:f8:66:c5:a3:9d:80:af:a3:f8:
14:17:47:4f:37:69:8c:5d:f3:a9:d8:71:4b:82:1b:
5a:b0:86:86:ae:d6:86:b5:5d:3c:cb:8b:f8:4e:6e:
f8:c1:2f:91:5e:ab:52:1c:e3:15:c9:7c:8b:c8:16:
04:7a:f7:f6:9d:51:8c:de:47:8c:2c:16:f2:6d:71:
cb:94:f1:da:42:22:2e:59:ef:75:d5:35:fb:5c:e4:
57:a9:bc:44:b5:3d:ce:65:3f:56:e3:7f:a4:76:66:
a3:67:5c:ca:f4:ba:38:e5:e0:36:ff:e3:f6:38:6f:
88:6c:88:60:c4:52:15:59:cf:d6:be:1f:21:88:46:
c4:50:13:a6:d8:6c:a7:94:54:ae:e0:88:56:f0:2b:
80:64:e6:b0:92:f7:0f:0a:57:fa:6c:6f:a7:aa:7c:
13:69:6a:57:91:88:d8:29:9b:c7:e4:f9:92:6e:7d:
cb:37:c6:18:5e:75:09:70:af:6d:ae:30:8a:de:bb:
bb:d5:11:a7:b5:1c:f5:76:cb:3d:8c:e2:1b:7c:ae:
f5:26:ef:49:b5:ab:f0:0b:8d:32:09:1e:fa:d6:e6:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F5:40:F8:D1:C1:24:B6:B5:61:74:57:6E:CF:A7:0B:24:A7:7E:12
X509v3 Authority Key Identifier:
keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233322e302f32322d3234203d3e20323731363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:67:bc:42:21:40:52:53:f5:da:59:c0:77:a2:43:cd:2c:62:
13:f3:6a:a7:8c:05:a3:04:5a:f6:b1:35:7e:77:dc:f4:97:d5:
77:8e:da:fc:a1:8b:1e:a1:4b:81:43:a5:ce:d5:87:fb:6d:ab:
4c:4f:26:b8:7b:65:c0:a6:a3:68:b8:54:a6:84:e5:81:cf:ed:
42:d0:c1:bd:d5:f9:9c:51:26:2b:c7:fc:7a:c2:d0:16:60:60:
fd:e4:db:cc:08:7e:f8:5f:aa:b8:e6:85:f4:b1:53:11:1c:0b:
66:85:ba:3e:b9:2a:84:cd:53:0f:84:5e:b3:e6:7f:79:b9:af:
eb:45:8a:2f:7c:65:6e:24:17:2f:7e:1b:22:d5:57:5f:b7:eb:
6f:d7:fd:11:9d:c4:1f:89:24:67:d3:66:5d:4f:64:38:c0:f0:
be:35:ba:ec:82:66:16:81:18:b6:78:23:90:09:84:a7:14:d7:
e7:f5:80:df:bf:15:45:b5:80:8d:17:2f:b6:e1:7b:b6:e9:c6:
2b:23:14:62:cb:93:d2:37:0a:79:b9:5b:f7:36:bb:54:a8:b5:
c5:61:fe:d0:f3:62:cc:a5:e3:2c:7a:c2:a9:96:2f:26:d2:8b:
ba:b2:8e:a6:5c:40:a9:41:b8:21:4b:07:4a:7b:dd:2a:d5:39:
34:54:bb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:39:14 2025 by rpki-client