Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131322e302f32322d3232203d3e20323637303234.roa
File: 34352e3232372e3131322e302f32322d3232203d3e20323637303234.roa (raw, json)
Hash identifier: 5gZkSilwA1bxx8ksbOsgCho0W8UxyJ6zrViEZGvSOL8=
Subject key identifier: 88:D5:44:D7:6C:AF:3A:49:91:CC:25:25:95:9E:1B:B6:5F:6A:81:B0
Certificate issuer: /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial: 7B24DBF20B0C7DBCD9743BBA806E22D97750E6EA
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131322e302f32322d3232203d3e20323637303234.roa
Signing time: Mon 10 Mar 2025 21:43:34 +0000
ROA not before: Mon 10 Mar 2025 21:38:34 +0000
ROA not after: Mon 09 Mar 2026 21:43:34 +0000
asID: 267024
IP address blocks: 45.227.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 04 Apr 2025 19:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:24:db:f2:0b:0c:7d:bc:d9:74:3b:ba:80:6e:22:d9:77:50:e6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Validity
Not Before: Mar 10 21:38:34 2025 GMT
Not After : Mar 9 21:43:34 2026 GMT
Subject: CN=88D544D76CAF3A4991CC2525959E1BB65F6A81B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:23:b4:41:15:54:01:85:67:ec:81:fd:69:
d4:26:8b:03:ca:b7:14:5b:20:bc:bf:ef:6d:58:c8:
10:dc:62:4e:6f:82:6a:52:b0:f8:f6:82:d7:28:8e:
3b:51:fa:e7:2b:40:a2:fb:ec:88:f3:8e:1f:c8:ee:
b4:33:90:2f:c2:cd:5c:f2:47:37:53:c0:fb:9e:5c:
07:d4:72:ad:77:d7:63:b5:fe:01:0f:5e:2c:a0:0a:
7a:f3:a0:ca:33:69:cf:46:bc:26:9c:b6:c0:43:a9:
d0:c2:d7:00:5c:c8:03:0d:ed:86:70:d1:92:32:c8:
c3:7c:ef:b7:04:02:9a:38:e5:1e:ec:5c:8d:6c:57:
59:97:af:93:58:53:34:97:f0:52:34:d6:6a:c8:7c:
11:c2:c8:23:64:d4:3c:a8:55:9e:ad:d6:d4:70:9c:
53:68:3f:15:64:9e:64:29:4a:e2:00:21:7d:ca:96:
58:ac:7c:d0:ea:cb:2e:2e:76:d9:d4:75:55:09:6f:
9f:b2:be:8f:91:ec:11:6c:b7:5e:fc:20:32:af:ec:
0b:bb:f4:48:52:22:07:f0:1b:e9:cb:dc:93:f9:1a:
ec:fc:e0:53:4e:bc:ae:38:c4:9f:ff:dd:b5:b8:e5:
72:09:a3:dc:74:3b:97:b8:17:19:61:7f:28:3a:df:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D5:44:D7:6C:AF:3A:49:91:CC:25:25:95:9E:1B:B6:5F:6A:81:B0
X509v3 Authority Key Identifier:
keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131322e302f32322d3232203d3e20323637303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.112.0/22
Signature Algorithm: sha256WithRSAEncryption
02:51:77:3a:ff:bf:f1:b0:ba:02:d9:d1:0c:7f:78:f1:bf:18:
4e:ec:11:d1:52:2d:51:79:40:8c:50:ad:32:57:c8:82:79:07:
31:d6:59:d0:5f:ab:67:3e:d8:34:57:b7:08:64:b3:02:c3:c4:
e2:d1:cb:de:ae:f5:9e:c0:38:2d:0a:61:2a:15:83:27:e7:bc:
99:b3:ea:6f:85:ce:93:4e:e3:cf:76:ed:40:9b:2d:e6:3a:b3:
2a:88:13:b0:a8:f8:1a:05:06:2d:e6:95:32:07:87:f3:ae:d9:
02:36:6a:f5:88:ed:d4:a6:66:bc:08:4d:54:38:6e:e4:9b:9d:
91:13:eb:07:c5:ae:38:63:30:3e:55:87:86:9b:23:83:e8:14:
f1:ab:53:4a:f1:d9:4f:77:b0:1b:e3:23:5a:90:1d:66:de:d6:
67:96:4e:3d:42:9d:70:0e:85:8c:ee:f1:b1:59:a9:5a:de:dc:
f8:6f:0c:f2:a8:4c:fd:99:11:fc:b5:4d:da:ce:85:f7:b6:4d:
d8:77:c3:af:3b:34:a5:e9:5a:f9:a0:ec:34:d1:46:22:a5:3f:
11:bc:ae:44:a8:36:d2:38:64:a9:5d:eb:f4:97:d0:c2:28:6e:
e4:74:76:13:08:9f:0f:84:fc:94:c0:83:5d:97:75:49:9e:ea:
23:80:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:40:16 2025 by rpki-client