Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233342e302f32342d3332203d3e20323731363536.roa
File: 34352e3138362e3233342e302f32342d3332203d3e20323731363536.roa (raw, json)
Hash identifier: yFszJaVIE5/GWscpQjzIHya4VUtFlHK7WE8qmtAKXnY=
Subject key identifier: DE:EB:5C:AF:01:BD:BB:CC:F0:A2:BB:53:75:1D:B4:5B:96:FD:93:8B
Certificate issuer: /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial: 4B002F36CA0E6D4918C103423FA658253A1173E1
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233342e302f32342d3332203d3e20323731363536.roa
Signing time: Wed 05 Feb 2025 13:10:12 +0000
ROA not before: Wed 05 Feb 2025 13:05:12 +0000
ROA not after: Wed 04 Feb 2026 13:10:12 +0000
asID: 271656
IP address blocks: 45.186.234.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 06 Feb 2025 14:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:00:2f:36:ca:0e:6d:49:18:c1:03:42:3f:a6:58:25:3a:11:73:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Validity
Not Before: Feb 5 13:05:12 2025 GMT
Not After : Feb 4 13:10:12 2026 GMT
Subject: CN=DEEB5CAF01BDBBCCF0A2BB53751DB45B96FD938B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:59:09:ec:c2:79:b1:eb:cc:f4:d6:66:69:
33:2f:00:9c:35:4e:01:80:39:8a:29:13:1f:e6:ea:
96:36:63:0c:93:8c:f6:63:85:6c:01:96:2f:0e:83:
2a:4b:77:f9:c6:ec:40:99:cf:19:5f:89:b0:16:63:
08:34:4a:9c:dc:df:ff:07:9e:a0:49:75:f2:0b:e9:
78:a1:60:82:0f:93:a3:b2:cd:84:7d:58:cf:6f:6e:
b8:71:08:a1:db:7a:b0:cc:69:1f:f7:14:77:2b:a1:
7b:1f:ba:0c:79:07:34:2f:0b:54:37:83:b2:13:59:
d8:df:25:3f:e1:6a:aa:ad:ae:fa:a3:bf:0c:0e:ca:
dd:99:35:bc:49:bd:b3:ca:2e:17:11:f5:98:0a:0d:
e0:77:ab:3e:73:c6:28:53:ca:f9:45:9c:6a:99:81:
3c:ca:41:5a:db:c5:00:3d:87:09:ff:c8:8b:cc:a6:
46:40:81:b0:07:61:f1:7c:fd:7c:b6:af:f0:4e:2c:
f0:81:e3:b6:78:5b:85:69:0b:00:7f:dd:77:fa:36:
e1:d2:bf:9e:d1:f9:bf:1e:e5:ce:c7:ef:c4:ce:3a:
9f:a6:a0:7c:bd:e9:04:42:59:47:3a:d8:1a:21:03:
f2:d0:5e:a5:d9:b8:4c:77:cb:16:71:dd:ba:49:6f:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EB:5C:AF:01:BD:BB:CC:F0:A2:BB:53:75:1D:B4:5B:96:FD:93:8B
X509v3 Authority Key Identifier:
keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233342e302f32342d3332203d3e20323731363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.234.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4b:66:1b:08:60:b5:1d:99:58:c7:06:fa:2a:a4:36:78:c2:
12:d9:0b:f3:61:41:da:ac:6c:ae:a2:ce:e1:29:13:0d:66:73:
29:50:49:ca:b5:98:a5:68:25:c0:1d:47:0c:71:7c:48:da:21:
52:63:a1:83:a0:20:03:18:c8:4d:06:50:fe:7d:da:05:ad:1f:
71:8f:0d:d2:c3:fd:ec:06:bc:00:b1:ba:b3:35:30:d7:e7:47:
75:27:30:78:5b:d6:a4:73:8b:cf:c0:fe:c9:9e:da:20:2c:29:
76:3e:b5:4c:2c:bd:9d:b6:8a:46:5f:b4:10:81:99:ea:47:16:
dc:8b:27:7d:2b:8c:8f:1a:e7:90:53:dd:cd:ba:42:58:84:10:
d8:e3:e1:d6:86:b9:75:50:e4:64:7f:59:cc:db:4c:2d:92:53:
09:57:9a:b3:5b:4d:1c:8a:27:4a:2c:f8:eb:57:39:bc:2b:b0:
d1:30:67:2c:45:16:da:ca:53:c9:2f:97:af:83:93:fb:ba:09:
f9:52:9c:cf:66:86:09:de:b9:0d:e8:ec:0c:d8:88:6a:54:1a:
25:27:8a:3e:fc:da:3f:16:be:ae:9a:7c:99:0c:4e:81:f5:a8:
80:e8:f6:21:9b:c7:7f:27:51:13:f3:98:a8:6f:ab:a7:d0:bd:
76:f0:e9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:30:01 2025 by rpki-client