Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32332d3233203d3e20323636303437.roa
File: 34352e342e3130382e302f32332d3233203d3e20323636303437.roa (raw, json)
Hash identifier: hJ9yE3r+S2earS066AYGg9oAOYMjS+vOGOVtj/UbeBA=
Subject key identifier: E1:24:DA:EE:45:89:65:16:41:3B:17:6A:0E:E7:C8:DF:A1:1E:97:FD
Certificate issuer: /CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Certificate serial: 2B64C134D50AB60B17A0D70D03CBC7BC2BD68CE1
Authority key identifier: 5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32332d3233203d3e20323636303437.roa
Signing time: Thu 16 Jan 2025 13:02:05 +0000
ROA not before: Thu 16 Jan 2025 12:57:05 +0000
ROA not after: Thu 15 Jan 2026 13:02:05 +0000
asID: 266047
IP address blocks: 45.4.108.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 21 Jan 2025 20:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:64:c1:34:d5:0a:b6:0b:17:a0:d7:0d:03:cb:c7:bc:2b:d6:8c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Validity
Not Before: Jan 16 12:57:05 2025 GMT
Not After : Jan 15 13:02:05 2026 GMT
Subject: CN=E124DAEE45896516413B176A0EE7C8DFA11E97FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:01:14:14:b3:a7:bf:e9:7f:ec:de:39:39:
f3:92:6b:68:02:e2:c2:ce:12:ee:60:9c:23:9e:02:
b8:78:49:97:31:49:63:a6:31:b9:bf:4d:f5:29:35:
26:7e:2d:08:b9:7c:08:d5:49:f6:9d:d7:36:af:96:
d8:aa:3c:96:67:0b:61:fc:48:fc:70:ce:32:b7:4b:
b9:e9:2e:41:4d:96:80:d4:88:ca:41:84:ba:db:4e:
b6:30:42:94:52:04:1b:1b:37:f9:c5:bb:d8:0c:d6:
68:b2:71:b9:db:7a:17:06:56:92:c5:14:07:b4:14:
23:c0:df:b7:d6:20:0b:59:42:fd:9a:72:94:f1:da:
54:93:9a:0b:29:b4:58:01:36:35:08:88:cf:33:a9:
c4:84:b3:76:b6:9a:15:68:1f:d0:86:d6:79:a4:32:
cb:69:23:76:dd:b5:1d:36:a9:c4:77:0e:40:97:20:
9b:3b:87:09:ad:f5:d3:93:ee:68:bb:5e:f7:a8:6d:
04:10:7b:b0:6b:b7:f3:4a:a7:42:a4:a6:e4:3e:93:
7d:f4:dc:cc:47:c2:05:fd:bd:dc:c2:47:c2:de:3a:
46:b5:3f:b1:7e:86:45:28:4c:95:4a:e8:f2:d0:09:
31:1e:d3:98:45:40:ec:40:9d:0b:11:b9:41:53:0f:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:DA:EE:45:89:65:16:41:3B:17:6A:0E:E7:C8:DF:A1:1E:97:FD
X509v3 Authority Key Identifier:
keyid:5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32332d3233203d3e20323636303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.108.0/23
Signature Algorithm: sha256WithRSAEncryption
64:13:99:7a:2f:d7:fc:9b:7f:f5:ba:3d:a2:00:68:4a:d3:56:
ec:5a:c8:ab:4a:02:f9:44:3e:35:09:b8:8a:d7:1b:6f:7a:0d:
b6:a0:8c:9e:84:39:49:30:74:c4:28:69:4d:9c:e3:46:57:9f:
f8:6f:a8:f8:36:f9:0a:4f:b0:c7:b4:fd:c6:d8:d2:10:bc:36:
bd:54:6c:3b:31:90:30:bc:d1:6f:85:64:a6:e0:7e:75:f2:8d:
c2:04:61:df:23:ab:33:99:85:3d:d2:1a:61:45:61:46:4e:8f:
ad:fd:43:cc:d9:86:c3:52:4f:0f:f8:2a:43:3b:e4:74:fe:aa:
d9:df:3e:8e:a6:89:7c:48:ea:cd:57:ea:23:df:a9:4e:33:70:
a5:af:46:c0:e4:d4:b1:c6:22:2a:72:69:f5:b4:5e:6f:33:51:
5f:86:60:49:ab:5e:d9:7f:a5:10:64:f9:24:92:39:e7:a9:ca:
23:30:6c:dd:79:91:9a:42:d4:fa:46:a3:02:c7:ea:d9:14:84:
27:e5:f1:95:d0:40:51:03:23:91:a1:38:e4:9e:f7:c7:a5:96:
83:ed:2d:a2:f8:40:66:6f:cb:57:15:61:6b:0c:c5:0d:53:b4:
35:22:92:51:50:9b:c9:ce:3f:23:71:e9:8c:78:94:2f:6e:8e:
11:ea:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:33:13 2025 by rpki-client