![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39372e302f32342d3234203d3e20323639313238.roa
File: 34352e3138302e39372e302f32342d3234203d3e20323639313238.roa (raw, json)
Hash identifier: tmvrzNtnmfDnLcKldoxxtDaVgrC4Psy77D/sz9T45s4=
Subject key identifier: 03:EF:D3:42:D4:65:EB:E8:9D:4C:96:37:A1:99:AD:F4:D5:0A:B3:6A
Certificate issuer: /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial: 3AFFCB6639EA9E09B36937D2AB3D3FB748CB2657
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39372e302f32342d3234203d3e20323639313238.roa
Signing time: Thu 04 Apr 2024 08:00:46 +0000
ROA not before: Thu 04 Apr 2024 07:55:46 +0000
ROA not after: Thu 03 Apr 2025 08:00:46 +0000
asID: 269128
IP address blocks: 45.180.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Sep 2024 15:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ff:cb:66:39:ea:9e:09:b3:69:37:d2:ab:3d:3f:b7:48:cb:26:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Validity
Not Before: Apr 4 07:55:46 2024 GMT
Not After : Apr 3 08:00:46 2025 GMT
Subject: CN=03EFD342D465EBE89D4C9637A199ADF4D50AB36A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:8c:a0:6b:28:0f:89:42:82:03:0a:74:99:
7d:fb:14:c8:2a:a0:bd:36:d8:01:a9:19:26:48:69:
b6:f0:e6:f9:b1:d9:06:f1:0d:a1:18:3f:cd:e9:f3:
ba:3f:69:fe:94:eb:ee:62:0c:04:8b:a7:bd:8f:a3:
95:65:42:86:d0:6f:62:83:9c:c2:a9:49:26:63:c6:
9e:a7:a5:db:b3:c6:4c:25:a1:eb:d0:96:fe:1a:2f:
62:de:5e:3b:55:67:a1:da:06:58:8b:eb:70:ad:39:
79:ca:f2:14:3c:40:30:0e:9b:d5:87:1e:0d:aa:1b:
15:5f:41:7b:98:a7:ba:0b:cf:26:5e:bd:21:96:aa:
d3:a7:8f:a6:a9:c7:77:3b:01:c1:34:92:39:dd:90:
f3:c3:c6:91:ac:b0:8c:0d:db:1a:fd:71:71:ff:93:
7f:08:99:68:b6:a0:4b:5d:fa:45:2a:17:0b:55:22:
78:39:eb:98:fd:5d:ae:84:1a:67:db:39:8e:c7:7d:
df:91:62:47:1b:e9:52:d6:17:e7:cf:f2:30:f9:7f:
87:17:42:7d:6d:d6:78:8f:b4:5d:77:0c:3f:52:c9:
a4:3d:20:1a:25:e4:6e:28:62:79:bf:85:68:d1:5d:
d8:ca:01:f8:00:70:e2:0d:4d:5e:38:e0:2a:99:09:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EF:D3:42:D4:65:EB:E8:9D:4C:96:37:A1:99:AD:F4:D5:0A:B3:6A
X509v3 Authority Key Identifier:
keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39372e302f32342d3234203d3e20323639313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.180.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:7d:01:85:49:0b:4e:b1:cb:b1:64:10:43:2c:59:82:95:4e:
4c:22:f8:80:64:a9:d3:70:81:a9:6f:47:c9:33:3b:a4:ff:41:
0a:01:ed:88:55:95:28:20:6b:a6:b4:87:b8:b8:be:21:60:63:
b2:9e:50:96:5a:1b:6f:1f:17:57:28:d6:c5:9c:d3:b4:69:2c:
df:f4:d7:d6:4f:7f:9e:71:42:c4:77:39:2b:ce:40:09:fb:f5:
31:41:ea:78:48:5a:88:3b:63:b3:57:38:94:f3:1b:df:dc:86:
93:0e:a2:f9:ac:5b:20:9a:00:42:be:c6:3d:c9:7d:5d:6d:44:
4a:26:fb:60:d7:f5:bb:d7:df:f3:a4:46:bb:f7:65:9f:d6:e3:
e5:e0:be:8b:16:dc:ee:9d:ff:b1:ed:d0:63:a1:a1:f6:91:ab:
46:d7:b9:0a:f9:47:95:39:26:a5:04:c6:e5:fb:d9:60:fb:10:
18:f6:c5:d6:74:28:6d:44:13:2c:d8:15:1b:da:9a:60:a4:2a:
d0:9a:e0:ad:3e:e4:69:49:1a:70:9f:9b:51:f0:0c:d6:c2:ce:
1f:8c:6e:86:7d:b7:0d:03:26:61:4e:14:6d:04:b5:ad:e8:68:
98:88:ec:f6:80:dc:54:6f:bf:ad:e3:c5:93:b0:29:66:37:5b:
0a:3f:97:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:54 2025 by rpki-client