Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32322d3232203d3e20323636303437.roa
File: 34352e342e3130382e302f32322d3232203d3e20323636303437.roa (raw, json)
Hash identifier: ubdJDBVcEbUm4CQOuQPQRJdzAF8NG9V8kDOWPSh9bGU=
Subject key identifier: EE:BD:11:90:A9:2E:D4:02:28:00:31:2E:DB:AB:0A:A3:BD:A9:7F:82
Certificate issuer: /CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Certificate serial: 5B4ACF6EE2BA75BC7143853B4D93F5BFA3638E66
Authority key identifier: 5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32322d3232203d3e20323636303437.roa
Signing time: Thu 16 Jan 2025 13:02:03 +0000
ROA not before: Thu 16 Jan 2025 12:57:03 +0000
ROA not after: Thu 15 Jan 2026 13:02:03 +0000
asID: 266047
IP address blocks: 45.4.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 21 Jan 2025 20:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:4a:cf:6e:e2:ba:75:bc:71:43:85:3b:4d:93:f5:bf:a3:63:8e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Validity
Not Before: Jan 16 12:57:03 2025 GMT
Not After : Jan 15 13:02:03 2026 GMT
Subject: CN=EEBD1190A92ED4022800312EDBAB0AA3BDA97F82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:1c:fc:d8:1c:36:3e:13:b3:b8:0e:48:ac:
4a:73:7d:73:84:a9:43:bb:44:2b:01:1f:81:49:3b:
26:be:bd:ab:53:e2:34:ad:47:5f:de:14:c6:f4:c2:
e7:cc:b4:7a:3d:35:ec:0e:c0:8b:a0:93:7d:23:8a:
30:64:97:e4:96:d4:d8:6c:b0:04:db:49:a3:70:28:
5a:f4:60:f0:60:62:83:91:63:6f:1c:81:a5:6e:71:
70:ad:4e:24:e0:45:35:b9:c6:cc:87:39:ee:ca:72:
76:da:0b:88:1d:23:8e:87:55:d5:69:3a:f7:bc:d1:
27:6d:fb:0c:fa:58:bc:9b:37:b8:3a:6b:d6:81:21:
60:0e:69:13:9b:50:68:49:f8:18:2d:3e:2c:64:ea:
55:cd:91:fd:2e:0e:71:6e:46:57:38:c7:7e:09:12:
24:4d:81:fd:d4:cd:06:f0:d0:6b:7c:78:e1:1d:06:
5c:27:31:9a:09:70:0e:c8:0c:91:fe:90:83:01:17:
81:94:f6:81:68:2e:44:42:ec:5a:41:90:d3:f3:74:
14:0b:43:db:2b:c1:0d:bf:f6:5a:c5:fb:7b:59:7c:
03:9d:07:02:20:c9:1d:90:8d:7c:87:bb:46:cc:73:
22:94:ac:96:d5:cf:37:44:8c:59:78:01:3c:b5:0e:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BD:11:90:A9:2E:D4:02:28:00:31:2E:DB:AB:0A:A3:BD:A9:7F:82
X509v3 Authority Key Identifier:
keyid:5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32322d3232203d3e20323636303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.108.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:c2:23:47:98:92:02:b2:c6:b5:6e:dc:fc:09:3c:ac:1f:65:
16:9b:48:d0:bd:cb:dd:c5:b3:98:fe:4b:d3:d9:ff:3b:37:c4:
91:1e:1f:4a:3d:02:00:32:31:22:c2:e4:90:8c:c9:c5:03:9d:
f8:67:e7:4a:57:ec:e7:4c:16:35:ef:15:b8:75:93:12:f8:a6:
10:b7:be:b7:5f:86:e0:41:3a:55:95:89:4d:db:b5:43:00:d0:
c8:fd:72:42:aa:9c:5e:b9:89:53:b9:42:54:f3:a5:a5:0e:2e:
c9:60:b1:3d:a2:0d:8c:cd:b5:06:30:88:ae:74:79:2d:89:4f:
eb:71:bb:e1:66:9a:4b:a1:8a:8f:b7:c3:22:02:73:0c:92:2b:
2c:47:16:76:c5:2f:35:90:04:f9:63:57:55:0f:e4:15:e9:84:
99:ad:04:ac:dd:29:f0:0f:06:8f:43:70:55:34:e2:bf:52:d1:
16:54:01:b5:ae:53:c7:08:58:96:8f:2d:a2:28:52:22:db:c2:
30:30:90:18:9f:88:a7:c6:d0:36:c6:31:df:89:67:14:e8:1f:
68:5c:6c:64:d0:da:28:f7:29:17:99:37:7a:28:3e:75:a8:30:
4b:a2:68:32:60:cf:b5:3a:66:c4:2d:24:05:71:97:7b:b5:96:
51:89:39:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:32:00 2025 by rpki-client