Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130392e302f32342d3234203d3e20323636303437.roa
File: 34352e342e3130392e302f32342d3234203d3e20323636303437.roa (raw, json)
Hash identifier: UHEzugDhRhRp+zjzyL3LBe9bN6hSci5ykTpUIwUVueE=
Subject key identifier: CD:F1:61:FB:35:25:7A:87:62:94:D6:A7:3F:2C:F3:88:68:A7:2E:F2
Certificate issuer: /CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Certificate serial: 1D428A17B940DDBA3E8C0335111A6C221E9068A1
Authority key identifier: 5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130392e302f32342d3234203d3e20323636303437.roa
Signing time: Thu 16 Jan 2025 13:02:10 +0000
ROA not before: Thu 16 Jan 2025 12:57:10 +0000
ROA not after: Thu 15 Jan 2026 13:02:10 +0000
asID: 266047
IP address blocks: 45.4.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 20:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:42:8a:17:b9:40:dd:ba:3e:8c:03:35:11:1a:6c:22:1e:90:68:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Validity
Not Before: Jan 16 12:57:10 2025 GMT
Not After : Jan 15 13:02:10 2026 GMT
Subject: CN=CDF161FB35257A876294D6A73F2CF38868A72EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:58:30:d7:91:d2:7b:ac:c2:03:9e:db:53:
29:96:4b:40:56:98:94:9d:90:e1:1b:ff:ad:e4:81:
94:b6:97:51:38:8f:64:90:a1:fa:38:ec:bb:c0:ce:
a8:34:d5:e2:6f:28:1b:23:21:50:c3:17:9a:14:e7:
17:c4:f3:16:35:74:26:83:dd:7a:33:8a:4b:bd:a7:
12:ce:92:a9:e9:5c:08:0e:0c:d1:a1:01:fb:92:2a:
05:37:74:65:dc:02:3d:7c:c2:b5:1c:77:80:30:8b:
82:09:6c:fd:81:4a:34:cd:f7:80:32:58:a7:30:fb:
cb:10:6d:82:b2:46:2b:fe:75:4e:8d:42:a2:ad:b5:
b0:60:4a:98:3b:90:82:ec:4e:fc:34:6d:3e:d7:62:
7f:19:d4:49:2c:16:91:0a:e1:44:5e:e9:0e:0a:c5:
7f:12:dc:b3:cf:d8:69:88:b1:28:93:57:da:de:14:
1c:4a:39:21:41:89:ef:0f:6e:85:10:e6:da:d9:0d:
94:55:d7:bf:21:4f:01:16:e3:5b:3c:cb:9e:ec:17:
7c:cb:8e:52:6a:ad:6e:53:34:6c:cd:bd:5a:93:c2:
41:c3:71:e3:17:7e:f8:b1:a4:fa:2b:37:b1:e4:98:
54:52:80:29:29:ac:8d:1a:74:37:88:88:2d:0d:26:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F1:61:FB:35:25:7A:87:62:94:D6:A7:3F:2C:F3:88:68:A7:2E:F2
X509v3 Authority Key Identifier:
keyid:5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130392e302f32342d3234203d3e20323636303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.109.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a3:0b:e1:22:f0:60:4c:29:7d:50:ae:b5:01:84:43:af:b0:
97:dd:74:bc:73:6f:ad:c7:8e:fb:e0:fe:7d:29:b7:60:e5:6a:
97:00:bf:4b:e9:da:81:2c:e0:79:85:6b:de:b5:69:7d:a9:31:
5b:b2:66:3e:a2:63:b7:2b:4f:88:49:8d:ee:b3:07:92:3b:c0:
37:08:26:00:fa:d3:b0:7a:c5:83:69:12:ea:a1:5d:3d:e6:b4:
8e:5f:e8:9e:a1:df:bd:46:7e:bf:77:a6:9c:21:b7:ea:93:4a:
75:45:01:89:0f:3c:83:a8:e3:52:23:07:87:e5:e1:0c:dd:66:
97:65:6c:57:c9:04:b3:cb:96:cf:13:cc:21:dd:a5:b6:c8:5d:
9c:39:3d:70:1a:2a:08:2d:43:73:2e:f0:09:de:a3:f9:7b:fe:
ff:4b:14:12:3f:7c:dd:36:25:1d:fc:bd:1e:a2:cb:e6:05:5d:
9d:cf:67:32:86:4c:70:b2:a1:58:05:3d:9d:9f:c6:a4:a7:3e:
1f:0b:66:d4:40:5b:da:0f:7a:b8:ce:a2:e4:9a:45:fd:58:38:
7d:a7:e4:8f:16:6d:fc:a3:f5:68:e0:cb:5e:db:66:1c:66:a0:
71:af:91:fc:96:71:3d:3d:97:ad:bd:f4:49:20:5e:a6:de:3d:
22:fa:2d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:37:48 2025 by rpki-client