Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233352e302f32342d3332203d3e20323731363536.roa
File: 34352e3138362e3233352e302f32342d3332203d3e20323731363536.roa (raw, json)
Hash identifier: +RNUmT6JPBAOEtKqQDkjQDioGOuo8owZGm5bEMXyUvA=
Subject key identifier: 79:E4:67:C8:CE:C0:FA:68:5E:85:FF:26:E9:53:9E:E8:96:84:60:2F
Certificate issuer: /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial: 78B36C2D376718211C18CE1E8498E83B3621A2C2
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233352e302f32342d3332203d3e20323731363536.roa
Signing time: Wed 05 Feb 2025 13:10:17 +0000
ROA not before: Wed 05 Feb 2025 13:05:17 +0000
ROA not after: Wed 04 Feb 2026 13:10:17 +0000
asID: 271656
IP address blocks: 45.186.235.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 06 Feb 2025 14:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b3:6c:2d:37:67:18:21:1c:18:ce:1e:84:98:e8:3b:36:21:a2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Validity
Not Before: Feb 5 13:05:17 2025 GMT
Not After : Feb 4 13:10:17 2026 GMT
Subject: CN=79E467C8CEC0FA685E85FF26E9539EE89684602F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:ab:cf:ec:6f:9e:bd:a4:f5:4b:60:2b:be:
14:e8:54:07:89:9a:1d:96:77:6e:ce:32:1b:f7:8a:
60:4f:a5:32:ff:7c:1d:c6:e1:07:fb:bc:4c:25:b2:
af:34:f5:6d:7d:8a:a1:30:42:46:4b:01:04:eb:87:
f2:3e:5c:bb:5f:b1:70:f3:fe:35:8e:83:ea:b4:02:
ab:ff:f8:e3:c0:5c:5c:89:f3:51:15:18:94:ac:e2:
7f:ca:12:55:f4:6c:96:ea:28:4d:1c:fc:61:ca:ac:
7d:6d:e6:e7:48:86:05:dc:20:0e:c8:5b:0f:09:69:
5f:24:bf:ef:7a:bc:7b:a9:8e:50:b6:10:42:84:46:
73:da:85:53:d7:3c:db:f5:e1:c9:39:57:26:1f:2a:
83:7b:ce:b4:f0:82:e1:bf:9b:d9:c4:44:d9:80:67:
48:31:c3:9e:03:79:ea:3e:d0:60:ae:e7:95:2c:1d:
e5:62:5d:22:db:8d:ff:f5:7b:04:0b:e3:13:01:27:
4f:38:c8:a3:fa:27:31:66:95:5a:17:80:77:51:c9:
76:8b:35:e4:12:c1:b2:e1:d7:6d:4c:1a:a0:2a:1c:
d8:d0:5b:da:ef:a8:35:cc:81:3b:5b:0d:d6:17:db:
6e:44:07:34:4f:72:c3:5f:ca:8e:8c:a0:ff:e1:f9:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E4:67:C8:CE:C0:FA:68:5E:85:FF:26:E9:53:9E:E8:96:84:60:2F
X509v3 Authority Key Identifier:
keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233352e302f32342d3332203d3e20323731363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.235.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:21:a3:40:d9:b0:da:b8:3f:6e:f0:68:c4:4d:e2:11:86:5e:
91:20:49:a6:51:ae:a8:04:c1:5c:48:30:d5:b6:85:2a:36:99:
54:c1:9e:1e:f0:25:0e:8a:77:b9:32:bc:21:ab:df:f9:cf:fa:
05:7d:b8:5f:0f:68:18:00:b7:f1:d7:f1:d6:aa:a2:ed:90:b5:
7d:37:6c:c4:e1:5a:4c:41:6e:67:8d:43:a5:77:98:60:61:c1:
55:5e:b4:33:66:11:09:66:a0:ec:8e:55:95:ee:df:2c:49:eb:
ea:3f:25:bd:56:6d:4a:16:50:cc:29:8b:d6:b5:73:21:1c:97:
d9:57:01:e9:40:5e:7b:14:fb:ce:33:9b:78:17:9b:82:d9:2e:
7b:81:ac:9e:e8:51:d5:b1:28:b2:c0:a3:2f:c6:44:c0:af:59:
8b:bf:1c:0f:c1:1d:0e:7a:39:a4:9f:8d:1f:ad:25:b9:f8:82:
3a:38:08:e7:7e:51:d8:f7:05:f3:77:8b:32:7e:00:b5:f6:3b:
f1:02:e9:68:63:16:31:74:c0:8a:de:2a:ff:c8:0b:e0:e0:50:
0f:9f:bb:9f:cf:40:1c:29:5b:c3:fa:13:a2:39:be:c0:e5:92:
b4:5d:eb:09:8a:c6:c1:65:01:9d:c0:fd:fc:47:90:05:56:b3:
56:d5:5b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:29:51 2025 by rpki-client