Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/34352e3233342e3138342e302f32322d3234203d3e203238333433.roa
File: 34352e3233342e3138342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier: Vz2zhLW93ebT/iftK8Q0XBHkSyIpNCukpZSfAh8VKlo=
Subject key identifier: AC:D7:FB:8F:71:EC:CB:4A:4C:88:E0:36:88:42:2D:F0:DF:E4:75:01
Certificate issuer: /CN=0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80
Certificate serial: 3C1D625FB6C9A911612D0BAFAC6C4F12F3BBEFBE
Authority key identifier: 0A:09:45:5F:3B:85:C8:20:AD:F8:A8:A5:B0:0E:6B:24:E5:2D:9D:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/34352e3233342e3138342e302f32322d3234203d3e203238333433.roa
Signing time: Thu 03 Apr 2025 20:51:49 +0000
ROA not before: Thu 03 Apr 2025 20:46:49 +0000
ROA not after: Thu 02 Apr 2026 20:51:49 +0000
asID: 28343
IP address blocks: 45.234.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 11:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:1d:62:5f:b6:c9:a9:11:61:2d:0b:af:ac:6c:4f:12:f3:bb:ef:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80
Validity
Not Before: Apr 3 20:46:49 2025 GMT
Not After : Apr 2 20:51:49 2026 GMT
Subject: CN=ACD7FB8F71ECCB4A4C88E03688422DF0DFE47501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:61:a3:b7:3d:8c:9d:b5:10:9e:4d:f6:85:
99:d8:90:d7:e3:50:f6:41:cf:17:35:c8:b9:3a:97:
56:f5:33:12:db:c9:d9:ab:4b:73:d0:bd:16:4a:e8:
c7:bc:f4:55:50:ca:6a:21:a7:ac:4f:9f:8b:3b:4a:
9d:c4:eb:02:32:5b:3b:8f:97:0c:d1:40:b1:8d:cc:
ca:88:af:38:14:dd:6b:5f:69:12:f9:f6:18:e4:94:
08:03:7d:18:f5:94:6b:c6:98:14:9b:00:98:b9:e2:
42:10:e0:dd:cc:a6:ff:06:ff:fc:67:79:7d:2b:18:
4c:87:28:f3:08:72:10:e5:ff:bd:b0:c6:1a:b4:b9:
18:19:f9:37:b5:0a:bf:08:13:6a:4f:9a:17:06:f3:
27:4d:7b:eb:84:e8:a0:1b:0b:8d:49:52:e0:26:30:
97:fa:b6:6f:92:0e:b2:b7:83:39:94:82:82:79:49:
1d:ef:62:d4:7c:ab:d5:17:b6:88:32:6b:39:3b:14:
5b:72:be:66:86:ea:36:46:53:6c:ad:a1:dd:35:67:
41:51:e7:f9:1c:dc:d5:38:78:39:e7:47:fd:d1:9b:
88:9b:3a:49:fc:a0:a7:90:3a:42:c2:75:e2:0b:38:
e5:3b:b9:56:75:45:27:83:39:12:c6:bb:29:1e:4f:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D7:FB:8F:71:EC:CB:4A:4C:88:E0:36:88:42:2D:F0:DF:E4:75:01
X509v3 Authority Key Identifier:
keyid:0A:09:45:5F:3B:85:C8:20:AD:F8:A8:A5:B0:0E:6B:24:E5:2D:9D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/34352e3233342e3138342e302f32322d3234203d3e203238333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:08:32:37:46:3e:9e:35:3f:16:6e:69:d4:da:d5:05:f2:69:
dd:e2:34:18:0c:60:6b:51:a8:61:af:9a:9c:a2:d4:91:7a:07:
17:ca:da:e9:32:f9:c9:3a:af:64:7a:f6:1e:d9:eb:d6:41:cc:
06:91:be:5e:a6:8e:ca:84:b4:e5:96:12:a3:be:f2:99:be:1b:
1d:28:a3:9f:1f:de:11:d7:ff:96:e2:5f:6e:ab:47:b3:8a:86:
83:40:0e:33:7c:c8:a6:95:f2:2b:33:c4:df:b4:92:22:3e:ea:
f8:27:d1:b7:18:e7:35:ea:df:9d:05:19:c0:ab:6f:5e:6c:c4:
82:3e:42:0c:7d:14:0b:a5:c7:d2:ea:07:59:39:b5:c0:5b:66:
6c:76:80:b9:52:82:65:46:95:89:b9:7f:00:47:59:f4:dc:0c:
75:51:0a:c5:f1:d4:3e:57:d3:40:68:d1:9b:42:e4:09:05:a4:
b0:31:e2:d5:08:c5:0c:9b:8c:15:cd:e1:07:a6:b4:5e:e2:ba:
66:e4:cd:e1:c5:7f:9e:3b:cc:b6:0d:f7:73:fd:ea:9b:9a:ea:
9d:40:81:d7:f6:bd:9b:d6:ea:89:06:8e:de:a8:0b:10:06:fb:
3d:b3:8c:e1:f6:c3:60:5b:0c:46:ba:ce:21:51:31:32:9f:d3:
08:85:df:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:20:29 2025 by rpki-client