Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3133302e302f32332d3233203d3e20323636353238.roa
File: 34352e36352e3133302e302f32332d3233203d3e20323636353238.roa (raw, json)
Hash identifier: jtipoXJ31uz6Pe08fpUjRBopABtmN2iwv/yz78hq69M=
Subject key identifier: AE:48:D8:10:A8:97:9C:12:0F:03:50:67:5C:C2:E4:72:01:69:23:FE
Certificate issuer: /CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Certificate serial: 34B291485C6494F35C91703A2AB0C368499C55BB
Authority key identifier: CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3133302e302f32332d3233203d3e20323636353238.roa
Signing time: Thu 04 Apr 2024 09:29:34 +0000
ROA not before: Thu 04 Apr 2024 09:24:34 +0000
ROA not after: Thu 03 Apr 2025 09:29:34 +0000
asID: 266528
IP address blocks: 45.65.130.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 21 May 2024 01:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b2:91:48:5c:64:94:f3:5c:91:70:3a:2a:b0:c3:68:49:9c:55:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Validity
Not Before: Apr 4 09:24:34 2024 GMT
Not After : Apr 3 09:29:34 2025 GMT
Subject: CN=AE48D810A8979C120F0350675CC2E472016923FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:b5:ee:4b:03:72:cb:bf:bb:f4:db:57:c2:
37:46:c1:65:23:4b:0e:27:4b:06:78:db:83:46:35:
ae:46:35:02:76:dc:f6:2c:e8:31:62:91:3d:6e:dd:
f5:25:4c:79:2b:45:9e:eb:75:b5:51:98:32:54:5c:
05:70:49:91:96:8e:4d:e5:b9:da:c8:25:4c:61:80:
13:ea:4c:e7:9e:9a:46:d1:58:fa:ad:5a:67:c3:ad:
50:49:19:0d:6e:c2:c6:b1:e0:e2:63:c2:1c:0a:16:
01:48:6f:8f:52:15:65:0a:55:42:83:6d:1b:bc:4d:
fe:bc:03:b2:28:84:95:04:1f:9b:f0:ac:f4:80:18:
80:17:49:fc:fb:3d:81:96:af:e0:60:ab:02:0b:e8:
1b:68:2a:bc:e1:8e:39:4d:85:cd:39:58:e5:e4:7f:
16:c8:a0:76:7f:1b:66:29:4b:c1:9b:f8:a5:7c:72:
ee:ed:8c:3c:66:d5:00:c1:4f:11:b4:3d:d4:5d:d3:
f5:e8:56:73:ef:be:80:cb:62:31:fa:ec:a8:64:e6:
96:d6:fc:32:8d:ae:32:90:11:8e:f8:10:52:9a:0d:
be:66:b4:b2:07:bd:5a:00:a1:9a:5a:2d:ea:db:c1:
6b:78:f8:d5:22:d0:9e:ae:c0:e2:d0:4e:ca:4a:83:
c0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:48:D8:10:A8:97:9C:12:0F:03:50:67:5C:C2:E4:72:01:69:23:FE
X509v3 Authority Key Identifier:
keyid:CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3133302e302f32332d3233203d3e20323636353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.130.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:9f:1b:df:8b:52:82:0b:11:8e:df:c6:06:1d:4c:6e:4e:16:
c7:4a:73:4b:6c:e9:34:c3:ba:a7:e9:0b:39:be:34:0e:8e:17:
48:d0:71:5b:53:74:3a:1b:60:c1:9c:db:c6:df:f8:d8:98:15:
f9:73:a7:58:17:dc:b0:6e:bf:5e:63:6d:02:14:e6:95:2c:60:
99:ee:fe:4b:c4:bb:59:88:ad:26:d3:2f:ed:2f:9a:d0:b9:5a:
7e:cf:dd:b8:98:af:c8:b5:6a:40:cb:e6:c8:74:5a:ac:f3:0e:
cb:90:37:89:42:48:aa:66:20:1b:cf:fc:eb:60:de:1f:53:7e:
fc:e0:4c:9b:72:3c:cd:47:1a:53:03:a0:f5:9c:6f:db:8b:b6:
72:29:ea:bb:ba:d1:f3:73:b6:78:41:1a:07:9b:68:31:24:18:
c1:da:a9:17:00:59:82:74:f8:bb:e2:15:0f:49:93:cf:8d:36:
1a:78:c8:97:b4:30:e6:65:93:45:1e:b7:a4:c2:d0:96:a4:da:
5c:a4:f2:01:04:a5:51:85:fa:b0:35:d4:51:75:d8:02:7f:5c:
76:d5:75:18:bc:73:d6:5b:43:f1:56:fe:92:d8:f0:86:2b:c5:
51:ae:f0:7f:dc:16:fc:26:e0:5a:7a:0a:36:4b:66:bf:53:89:
3d:16:09:94
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNLKRSFxklPNckXA6KrDDaEmcVbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I1MTk1MDg5MTg2RjQ1QjdEQjZCRjBBRkU0NkRGQzVB
RkI0NzcwOTAeFw0yNDA0MDQwOTI0MzRaFw0yNTA0MDMwOTI5MzRaMDMxMTAvBgNV
BAMTKEFFNDhEODEwQTg5NzlDMTIwRjAzNTA2NzVDQzJFNDcyMDE2OTIzRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtvbXuSwNyy7+79NtXwjdGwWUj
Sw4nSwZ424NGNa5GNQJ23PYs6DFikT1u3fUlTHkrRZ7rdbVRmDJUXAVwSZGWjk3l
udrIJUxhgBPqTOeemkbRWPqtWmfDrVBJGQ1uwsax4OJjwhwKFgFIb49SFWUKVUKD
bRu8Tf68A7IohJUEH5vwrPSAGIAXSfz7PYGWr+BgqwIL6BtoKrzhjjlNhc05WOXk
fxbIoHZ/G2YpS8Gb+KV8cu7tjDxm1QDBTxG0PdRd0/XoVnPvvoDLYjH67Khk5pbW
/DKNrjKQEY74EFKaDb5mtLIHvVoAoZpaLerbwWt4+NUi0J6uwOLQTspKg8DdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrkjYEKiXnBIPA1BnXMLkcgFpI/4wHwYDVR0j
BBgwFoAUy1GVCJGG9Ft9tr8K/kbfxa+0dwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnJONWVYVDJNVUY1RnZNbWhCY25DRGpIdlBtYkZia21rV3hNQVNvN3Uy
dzIvMS9DQjUxOTUwODkxODZGNDVCN0RCNkJGMEFGRTQ2REZDNUFGQjQ3NzA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCNTE5NTA4OTE4NkY0NUI3
REI2QkYwQUZFNDZERkM1QUZCNDc3MDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JyTjVlWFQyTVVGNUZ2TW1oQmNuQ0RqSHZQbWJGYmtta1d4TUFTbzd1MncyLzEv
MzQzNTJlMzYzNTJlMzEzMzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2
MzUzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLUGCMA0GCSqGSIb3DQEBCwUAA4IBAQC1nxvfi1KC
CxGO38YGHUxuThbHSnNLbOk0w7qn6Qs5vjQOjhdI0HFbU3Q6G2DBnNvG3/jYmBX5
c6dYF9ywbr9eY20CFOaVLGCZ7v5LxLtZiK0m0y/tL5rQuVp+z924mK/ItWpAy+bI
dFqs8w7LkDeJQkiqZiAbz/zrYN4fU3784EybcjzNRxpTA6D1nG/bi7ZyKeq7utHz
c7Z4QRoHm2gxJBjB2qkXAFmCdPi74hUPSZPPjTYaeMiXtDDmZZNFHrekwtCWpNpc
pPIBBKVRhfqwNdRRddgCf1x21XUYvHPWW0PxVv6S2PCGK8VRrvB/3Bb8JuBaego2
S2a/U4k9FgmU
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org