Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/34352e3233382e37322e302f32322d3234203d3e20323638333238.roa
File: 34352e3233382e37322e302f32322d3234203d3e20323638333238.roa (raw, json)
Hash identifier: nxDlvJx6U7XIRqId/yIqWejWB/QfvWO+hp8Uhotwu04=
Subject key identifier: 0B:49:9C:D3:6D:19:E1:CD:4B:3A:6E:8D:16:C6:7D:EF:11:71:D4:F6
Certificate issuer: /CN=B20C19BE837487F270BE3762AA874E14A967E6EC
Certificate serial: 66A72FDE88A337E070D359624C12CAF2C4DC012B
Authority key identifier: B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20C19BE837487F270BE3762AA874E14A967E6EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/34352e3233382e37322e302f32322d3234203d3e20323638333238.roa
Signing time: Wed 10 Apr 2024 20:24:36 +0000
ROA not before: Wed 10 Apr 2024 20:19:36 +0000
ROA not after: Wed 09 Apr 2025 20:24:36 +0000
asID: 268328
IP address blocks: 45.238.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 16:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a7:2f:de:88:a3:37:e0:70:d3:59:62:4c:12:ca:f2:c4:dc:01:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B20C19BE837487F270BE3762AA874E14A967E6EC
Validity
Not Before: Apr 10 20:19:36 2024 GMT
Not After : Apr 9 20:24:36 2025 GMT
Subject: CN=0B499CD36D19E1CD4B3A6E8D16C67DEF1171D4F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b5:96:a9:94:eb:7c:23:73:07:f3:dd:bb:7e:
b5:d3:c0:e7:a6:0b:59:84:78:c5:1f:0a:ca:b4:29:
b9:44:69:e9:7a:43:3b:0e:b0:d6:ff:f0:53:ca:d7:
dd:37:9a:8b:98:02:bf:75:ac:3a:83:e8:d1:23:07:
9e:da:e1:3a:45:c0:c6:de:1f:5e:99:1b:3f:7f:4f:
b2:8b:e2:b8:d2:99:43:b8:01:7c:7e:e0:3f:73:05:
80:21:29:bb:e9:60:32:ca:01:b8:56:09:b0:72:57:
9f:b1:30:a4:34:ab:3a:78:58:10:3f:ed:b8:e8:47:
e2:9e:bc:04:41:3a:b9:5b:58:f7:e7:9a:e6:e8:24:
6e:a1:ef:d9:3a:54:01:5a:e8:af:32:2f:39:16:42:
08:cb:42:e2:76:38:0a:76:61:fb:fc:a2:9f:45:79:
e8:cd:ff:d8:e9:f2:ed:3f:5a:d3:bc:7a:1f:a6:b2:
84:9a:0e:29:4b:04:32:6f:a8:87:7f:20:f4:df:4d:
33:72:54:ff:3d:42:6c:2b:31:06:cb:b4:b5:cf:c4:
ed:a6:52:7d:19:be:3d:1d:38:aa:7f:0a:10:2a:c3:
3d:ba:0f:06:4b:eb:33:17:78:80:ae:e0:44:e9:c9:
5d:e0:d4:d8:03:db:28:a8:7b:a9:b9:9e:93:bd:4b:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:49:9C:D3:6D:19:E1:CD:4B:3A:6E:8D:16:C6:7D:EF:11:71:D4:F6
X509v3 Authority Key Identifier:
keyid:B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/B20C19BE837487F270BE3762AA874E14A967E6EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20C19BE837487F270BE3762AA874E14A967E6EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/34352e3233382e37322e302f32322d3234203d3e20323638333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.72.0/22
Signature Algorithm: sha256WithRSAEncryption
08:4c:65:b4:d4:35:fc:34:df:2e:5a:27:c5:da:b5:22:f0:6c:
34:a7:42:ee:21:4b:99:a7:c1:cc:ae:59:d7:f0:6f:f2:60:35:
c3:58:95:b1:aa:38:10:0a:b1:1e:39:07:d9:b2:f2:ca:e6:61:
1e:dc:cc:77:2f:d9:8d:84:06:6b:fa:e4:ab:3a:f2:19:55:10:
e3:3b:3f:0d:09:1d:80:89:65:5f:f9:e5:b1:06:1f:66:0e:0b:
d3:8e:fa:ae:a6:be:64:4b:8b:f9:b7:ab:40:21:ff:f8:50:de:
24:27:04:7d:83:0b:4b:44:7a:08:3d:d7:fe:7e:7a:32:40:76:
8a:1d:ff:04:ad:2e:bd:43:8a:3c:bf:82:5e:72:e5:2b:de:b0:
db:d1:7f:b8:37:9d:0e:14:ab:9f:39:7c:39:6b:05:9d:d2:a8:
29:f1:59:6f:71:c6:b7:90:78:17:7b:32:d0:4a:9d:f8:b3:a7:
b1:6f:4b:6d:0f:ad:21:27:d1:89:16:47:2f:e8:ce:a2:75:b1:
63:80:18:e6:29:be:b1:3e:68:9d:da:1a:31:99:a5:47:e2:49:
6e:f8:bc:1c:12:e4:81:bc:8f:17:f4:4d:ab:1b:da:ea:c8:ed:
b5:97:6c:c7:d0:a0:6e:fb:5a:00:05:4f:82:f0:f5:92:5b:44:
9e:e3:de:a9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZqcv3oijN+Bw01liTBLK8sTcASswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjIwQzE5QkU4Mzc0ODdGMjcwQkUzNzYyQUE4NzRFMTRB
OTY3RTZFQzAeFw0yNDA0MTAyMDE5MzZaFw0yNTA0MDkyMDI0MzZaMDMxMTAvBgNV
BAMTKDBCNDk5Q0QzNkQxOUUxQ0Q0QjNBNkU4RDE2QzY3REVGMTE3MUQ0RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDstZaplOt8I3MH8927frXTwOem
C1mEeMUfCsq0KblEael6QzsOsNb/8FPK1903mouYAr91rDqD6NEjB57a4TpFwMbe
H16ZGz9/T7KL4rjSmUO4AXx+4D9zBYAhKbvpYDLKAbhWCbByV5+xMKQ0qzp4WBA/
7bjoR+KevARBOrlbWPfnmuboJG6h79k6VAFa6K8yLzkWQgjLQuJ2OAp2Yfv8op9F
eejN/9jp8u0/WtO8eh+msoSaDilLBDJvqId/IPTfTTNyVP89QmwrMQbLtLXPxO2m
Un0Zvj0dOKp/ChAqwz26DwZL6zMXeICu4ETpyV3g1NgD2yioe6m5npO9Sxm3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUC0mc020Z4c1LOm6NFsZ97xFx1PYwHwYDVR0j
BBgwFoAUsgwZvoN0h/JwvjdiqodOFKln5uwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW9lc3RnZEpXTnBUZXBIRGIxRXc0U3ZSa3BRWXU2QVFvS3JIc1Z0OVYy
TFgvMS9CMjBDMTlCRTgzNzQ4N0YyNzBCRTM3NjJBQTg3NEUxNEE5NjdFNkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyMEMxOUJFODM3NDg3RjI3
MEJFMzc2MkFBODc0RTE0QTk2N0U2RUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlvZXN0Z2RKV05wVGVwSERiMUV3NFN2UmtwUVl1NkFRb0tySHNWdDlWMkxYLzEv
MzQzNTJlMzIzMzM4MmUzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzMzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLe5IMA0GCSqGSIb3DQEBCwUAA4IBAQAITGW01DX8
NN8uWifF2rUi8Gw0p0LuIUuZp8HMrlnX8G/yYDXDWJWxqjgQCrEeOQfZsvLK5mEe
3Mx3L9mNhAZr+uSrOvIZVRDjOz8NCR2AiWVf+eWxBh9mDgvTjvqupr5kS4v5t6tA
If/4UN4kJwR9gwtLRHoIPdf+fnoyQHaKHf8ErS69Q4o8v4JecuUr3rDb0X+4N50O
FKufOXw5awWd0qgp8Vlvcca3kHgXezLQSp34s6exb0ttD60hJ9GJFkcv6M6idbFj
gBjmKb6xPmid2hoxmaVH4klu+LwcEuSBvI8X9E2rG9rqyO21l2zH0KBu+1oABU+C
8PWSW0Se496p
-----END CERTIFICATE-----
Generated at Thu Apr 11 21:38:16 2024 by rpki-client on console-ams.rpki-client.org