Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e34392e302f32342d3234203d3e20323638373933.roa
File: 34352e3137332e34392e302f32342d3234203d3e20323638373933.roa (raw, json)
Hash identifier: GXD/lYvrPdkJF2IFpEN1FkBuR+RphMkeJccMdJ9t4Y4=
Subject key identifier: 88:0D:17:E1:FD:DA:FF:3F:04:42:7C:EA:32:9B:1F:4B:D1:97:C8:02
Certificate issuer: /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial: 454F61BF730FACB1CB4FAE26AAF6CAAF861C6B9C
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e34392e302f32342d3234203d3e20323638373933.roa
Signing time: Tue 17 Dec 2024 16:00:24 +0000
ROA not before: Tue 17 Dec 2024 15:55:24 +0000
ROA not after: Tue 16 Dec 2025 16:00:24 +0000
asID: 268793
IP address blocks: 45.173.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 13:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:4f:61:bf:73:0f:ac:b1:cb:4f:ae:26:aa:f6:ca:af:86:1c:6b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
Validity
Not Before: Dec 17 15:55:24 2024 GMT
Not After : Dec 16 16:00:24 2025 GMT
Subject: CN=880D17E1FDDAFF3F04427CEA329B1F4BD197C802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:c9:62:72:a0:e6:21:f8:b2:0b:90:40:4d:
a7:d9:c4:99:33:bf:fd:80:67:69:81:cd:45:cc:7e:
98:6b:80:08:33:24:7c:80:41:38:2d:82:12:c3:4b:
c3:0b:e8:eb:c9:27:a0:51:4c:e6:3e:27:18:b9:f2:
c0:81:9a:a2:85:8b:a4:39:fa:3b:2c:17:f3:01:c6:
83:29:ad:5f:27:10:b6:d1:40:73:ef:8e:b8:b0:ca:
61:ae:23:de:f6:2e:e9:85:94:64:48:34:55:05:65:
a3:d2:3b:1c:4b:93:c1:d3:c1:c6:ee:3d:ea:64:6a:
d5:77:9a:51:e8:4f:d2:9e:80:19:b8:ca:9a:2c:a7:
7b:7d:42:26:b3:4a:87:cd:5d:04:80:b5:92:10:e1:
d3:f4:58:92:fa:31:53:c1:d6:d5:20:50:fe:2a:c1:
8d:36:44:1a:66:0c:3e:90:71:ed:1d:33:82:1d:93:
70:8b:d9:45:a6:77:6a:b4:de:50:25:93:d1:82:09:
6c:0b:a4:45:53:28:8d:ef:bd:c6:6c:4a:3c:98:46:
9c:c5:de:b7:ba:12:c0:af:cd:02:ca:cb:4c:fe:82:
3d:23:60:1f:78:b6:74:4d:ac:18:f9:ac:96:1f:55:
54:ed:20:df:b2:d9:14:0b:56:9c:f6:42:c2:f6:6f:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0D:17:E1:FD:DA:FF:3F:04:42:7C:EA:32:9B:1F:4B:D1:97:C8:02
X509v3 Authority Key Identifier:
keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e34392e302f32342d3234203d3e20323638373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.49.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c1:cf:e4:1b:90:c1:4a:dc:bc:f8:ff:a0:d0:9d:3e:0e:8e:
ac:7b:d4:c0:f1:67:a4:e2:41:e8:bf:71:4f:55:ab:65:20:5c:
68:9e:57:9f:51:c7:c0:40:c0:f7:23:7b:2a:20:8f:d6:65:b9:
dd:52:ae:89:ef:fc:03:68:6b:48:a6:28:94:9b:56:1f:ae:67:
30:b8:cd:a2:ea:6c:36:0f:38:6d:e1:c7:89:de:0d:d7:64:01:
47:e7:85:2f:e9:00:c4:55:bf:0a:01:25:8a:5d:67:1a:71:88:
15:88:59:5d:de:a0:2c:f2:fc:8e:14:f6:28:8d:b4:30:4c:1c:
b1:9f:89:88:aa:f7:24:19:f6:5b:9d:53:c3:0f:9d:d9:6a:25:
e1:cc:be:d9:34:fe:4a:68:86:63:58:81:b2:a2:48:0b:81:3b:
8b:52:0b:77:c9:c5:25:71:6d:b5:80:94:15:71:1d:1b:34:23:
f7:31:ce:e4:d9:8e:bc:c7:d3:ae:03:20:e3:01:89:30:8f:5b:
f1:9a:1b:d9:a6:4b:d9:18:53:e9:45:c5:d7:8e:a7:a3:8d:ae:
1d:4f:84:d2:0e:c7:34:d6:99:e8:be:9e:a6:00:24:33:9f:f7:
bc:5c:dd:bc:e3:b3:23:2b:df:52:62:82:5a:ca:0a:de:6f:3f:
d6:93:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 22:18:27 2025 by rpki-client