Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36352e302f32342d3234203d3e20323639353238.roa
File: 34352e3138372e36352e302f32342d3234203d3e20323639353238.roa (raw, json)
Hash identifier: dPcHJoZg1u7ZGX/6XG4hxQfCrOypgOJcL5tlp+x3Mvg=
Subject key identifier: 83:F8:76:7A:DB:80:C5:DC:32:C5:65:15:31:53:56:48:33:10:EC:16
Certificate issuer: /CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
Certificate serial: 132BF0C33EE823F5A8FC47244A4B1BFD8C81A681
Authority key identifier: 4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36352e302f32342d3234203d3e20323639353238.roa
Signing time: Wed 26 Feb 2025 00:18:37 +0000
ROA not before: Wed 26 Feb 2025 00:13:37 +0000
ROA not after: Wed 25 Feb 2026 00:18:37 +0000
asID: 269528
IP address blocks: 45.187.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 14:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:2b:f0:c3:3e:e8:23:f5:a8:fc:47:24:4a:4b:1b:fd:8c:81:a6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
Validity
Not Before: Feb 26 00:13:37 2025 GMT
Not After : Feb 25 00:18:37 2026 GMT
Subject: CN=83F8767ADB80C5DC32C56515315356483310EC16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bf:ab:e9:57:87:e8:4e:f7:bd:7d:78:7c:14:
c2:a5:74:ad:b3:b8:c6:a5:ae:cc:10:f6:7a:e3:42:
6e:61:55:a5:49:1e:c3:b7:98:58:49:d1:67:1f:5d:
bb:c4:1b:c2:02:b5:65:0d:5f:2a:d1:a7:eb:28:d8:
12:59:90:39:90:7a:84:02:c8:40:e5:01:75:7d:27:
40:8e:85:9a:f2:38:f8:1d:c4:1f:6f:e1:86:30:22:
27:48:c4:44:85:e8:1c:c5:48:4a:f6:5f:5c:49:7c:
23:e8:e5:f4:24:6c:fa:51:37:f0:2c:63:94:78:16:
3d:a7:43:1e:85:6b:e6:3b:02:7b:27:c7:4f:6f:d3:
49:c1:1c:5d:23:a0:b5:36:57:11:ce:8b:37:d6:ad:
1c:2e:d1:13:03:8a:1c:8b:d1:8f:7e:6b:bb:a9:f6:
9a:a6:21:4b:0f:50:7a:5f:16:69:45:68:b3:8f:d8:
d5:49:d7:c1:a8:9b:33:f1:ea:08:af:2c:3c:bf:c9:
00:ea:31:0d:3d:c1:6b:c6:09:74:10:13:e0:2c:3b:
9d:c2:d6:44:93:fe:aa:b0:4f:c9:ee:06:87:66:a2:
23:ee:fe:c9:ee:b8:28:6d:5d:6a:8c:4c:07:a9:3d:
f4:a8:ae:05:4b:79:06:87:3d:b4:6b:24:33:c1:e9:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F8:76:7A:DB:80:C5:DC:32:C5:65:15:31:53:56:48:33:10:EC:16
X509v3 Authority Key Identifier:
keyid:4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36352e302f32342d3234203d3e20323639353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.65.0/24
Signature Algorithm: sha256WithRSAEncryption
43:03:f9:18:c1:9e:6c:d9:b2:71:b6:90:52:9c:b2:7f:3d:63:
76:2f:73:3f:6f:f7:e6:fe:de:58:34:ef:0a:60:5c:15:03:54:
71:dc:17:4c:5f:18:9c:de:df:41:f7:bf:14:32:81:8a:71:12:
b3:11:b2:2c:43:5b:3d:3a:76:8f:04:d9:9e:f4:32:fb:d0:7a:
68:6f:aa:04:70:31:b7:96:bd:15:e2:16:19:f2:4d:2d:5b:b5:
be:aa:54:91:f6:37:af:df:46:06:56:7e:15:bd:aa:32:fc:25:
81:8c:26:e4:57:b3:2f:cd:84:8d:ec:53:73:95:53:e2:ff:3e:
1c:1c:d3:09:65:c1:3a:79:6f:78:73:8c:4b:90:70:17:1f:6a:
04:63:94:34:82:82:d7:80:48:5c:48:d8:b0:65:2e:62:1b:a0:
d4:bf:bf:56:2a:7e:4f:b9:35:d4:cc:00:34:4a:00:09:a8:20:
f0:8c:e9:94:22:f7:a2:cf:89:1f:46:7c:1d:98:22:1a:7d:aa:
f5:5b:6d:54:3b:2c:0f:3a:4a:10:43:60:58:a3:99:69:a0:b5:
69:7d:3d:ca:9a:8f:d8:d4:0d:53:3f:b1:65:eb:09:bb:80:d4:
67:83:1e:73:7c:35:2e:86:72:63:bf:b8:7e:7b:10:e3:2d:45:
c0:f4:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:37:25 2025 by rpki-client