Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32342d3234203d3e20323636303437.roa
File: 34352e342e3130382e302f32342d3234203d3e20323636303437.roa (raw, json)
Hash identifier: ew1wDPUXqYXRQJSpvgUqu1CsX7ZaW+Ro+fUQEdGVzpQ=
Subject key identifier: B3:47:22:70:E4:89:29:DB:88:EC:48:AE:28:3F:C5:A5:5E:36:5D:51
Certificate issuer: /CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Certificate serial: 61653CC5EF034765FB56608DA560D22A760F01CB
Authority key identifier: 5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32342d3234203d3e20323636303437.roa
Signing time: Thu 16 Jan 2025 13:02:07 +0000
ROA not before: Thu 16 Jan 2025 12:57:07 +0000
ROA not after: Thu 15 Jan 2026 13:02:07 +0000
asID: 266047
IP address blocks: 45.4.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 20:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:65:3c:c5:ef:03:47:65:fb:56:60:8d:a5:60:d2:2a:76:0f:01:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Validity
Not Before: Jan 16 12:57:07 2025 GMT
Not After : Jan 15 13:02:07 2026 GMT
Subject: CN=B3472270E48929DB88EC48AE283FC5A55E365D51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:9b:a0:cc:80:40:b2:b6:d1:eb:9f:1d:df:
a9:cd:8f:e4:c2:66:36:ab:3d:a3:75:9e:07:78:ce:
b5:67:d1:66:49:a1:94:cd:32:42:bd:7b:59:a2:94:
46:fd:6b:b3:c9:8d:ca:88:9a:d2:e9:f4:70:82:9c:
e2:38:de:55:0f:0f:92:e4:7f:dd:01:2c:7e:bb:e3:
62:ba:8d:f4:81:2a:10:a5:45:c4:a2:9a:77:2b:ed:
4e:e2:ad:40:30:6f:36:48:d7:90:4b:4b:54:af:79:
54:96:4f:2a:40:da:59:60:8b:76:44:14:bb:0b:78:
d2:26:3b:ef:9c:59:af:20:3c:3f:14:99:f3:41:7e:
81:70:18:b8:92:c8:bd:6f:95:33:08:8a:80:a9:ba:
cd:3a:df:c2:5b:75:6d:a6:4a:66:be:ea:68:b0:6a:
fb:15:db:3d:24:36:03:89:19:17:e6:52:cf:4d:7e:
ad:8c:a2:de:e9:9f:01:89:56:d8:bc:f6:e8:04:4f:
8f:47:27:12:bd:9a:5d:37:f7:5e:ba:f1:1f:9a:9c:
15:92:20:ba:3d:2c:eb:f6:e5:09:92:f7:e5:bb:24:
34:e6:d2:3d:c8:07:52:04:f9:00:9b:f7:95:39:1b:
40:4f:e8:68:6b:54:3d:dc:36:c6:04:9c:6e:39:c6:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:47:22:70:E4:89:29:DB:88:EC:48:AE:28:3F:C5:A5:5E:36:5D:51
X509v3 Authority Key Identifier:
keyid:5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32342d3234203d3e20323636303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.108.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:13:7e:7e:62:c2:a2:93:e3:cb:b5:1f:f4:46:c4:db:fc:b2:
7b:37:e1:0c:35:22:50:39:aa:93:5b:05:05:26:af:ea:0b:cd:
ef:4c:8c:05:5d:a6:03:1f:ff:19:6a:6e:3d:5e:79:0e:22:42:
11:49:07:ea:38:56:0b:92:f9:95:dc:3a:c0:c7:f3:32:f5:81:
81:2b:0a:49:5a:15:89:57:69:22:cd:cb:30:2a:81:81:e7:ad:
43:69:9b:f5:8b:45:86:57:67:b5:3c:e3:56:4f:c5:96:bb:fd:
c8:5a:a6:80:cd:4b:79:98:82:3e:34:32:b6:24:35:8b:6a:0d:
1f:fe:fc:93:29:57:ac:e7:0f:f4:53:70:d6:ac:4f:87:8a:f6:
fd:57:92:14:8d:96:30:cb:82:e1:1c:26:d9:9c:0a:fd:ab:76:
45:d2:61:c7:a5:e2:f1:8a:bb:fd:7a:7d:c1:c8:50:cd:d1:ec:
1f:9c:ba:51:01:57:67:24:3c:de:e9:00:f3:84:86:60:66:2a:
0f:9c:04:d9:c1:6b:1c:8b:21:1b:66:76:b2:16:90:93:4c:e5:
20:0c:09:64:91:6a:73:b1:a0:1e:37:1e:6e:02:a0:52:c3:28:
1a:9c:8a:34:6e:ea:f3:49:37:45:27:c5:99:f7:1d:5a:4e:0d:
75:63:a7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:35:49 2025 by rpki-client