![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/34352e3233312e39362e302f32342d3234203d3e20323637313932.roa
File: 34352e3233312e39362e302f32342d3234203d3e20323637313932.roa (raw, json)
Hash identifier: 4cfO2aylRflUCXWSnAUtu4rNjxwZlC5Y8rrLNBxABbM=
Subject key identifier: BF:D6:7E:3B:2C:A6:67:39:6A:4B:88:20:66:58:EC:F5:AF:FF:9A:38
Certificate issuer: /CN=59D79079ECD031F0A1D0E88BA326755415EE0813
Certificate serial: 1B0927CB8034E573620EB2A44D2AFE78F3D647C4
Authority key identifier: 59:D7:90:79:EC:D0:31:F0:A1:D0:E8:8B:A3:26:75:54:15:EE:08:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/34352e3233312e39362e302f32342d3234203d3e20323637313932.roa
Signing time: Thu 25 Apr 2024 12:19:21 +0000
ROA not before: Thu 25 Apr 2024 12:14:21 +0000
ROA not after: Thu 24 Apr 2025 12:19:21 +0000
asID: 267192
IP address blocks: 45.231.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:09:27:cb:80:34:e5:73:62:0e:b2:a4:4d:2a:fe:78:f3:d6:47:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59D79079ECD031F0A1D0E88BA326755415EE0813
Validity
Not Before: Apr 25 12:14:21 2024 GMT
Not After : Apr 24 12:19:21 2025 GMT
Subject: CN=BFD67E3B2CA667396A4B88206658ECF5AFFF9A38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:84:d6:50:6b:c0:20:04:47:27:e6:86:e4:60:
05:34:62:b5:12:88:66:50:3d:ce:d6:5d:8a:8a:f6:
cc:c5:f1:25:b5:ba:87:f8:41:1d:f3:92:c6:0a:1d:
55:51:7f:6f:ca:ee:1c:2a:ad:24:c3:10:a5:c4:54:
05:ff:6b:cd:da:6d:d4:7a:63:39:5d:20:14:27:be:
40:8a:d4:df:b7:69:a7:15:8a:03:07:b2:f4:75:d5:
1c:89:8e:90:a0:b3:fb:e2:d6:6a:7d:d8:fd:cb:af:
e7:b7:43:2e:b5:f5:fa:0d:d3:4e:e2:e8:99:4f:a5:
97:98:27:96:1d:1a:c1:d2:3a:55:04:7f:35:34:50:
bd:9f:c7:2f:53:4b:5e:24:11:71:6f:f4:12:d7:13:
ca:4b:d3:fc:ba:72:7e:70:54:9d:d6:ed:86:6f:95:
a7:2e:3c:3d:0c:17:12:4d:38:e8:ba:db:ed:98:b0:
ef:59:fc:9a:6a:53:8a:11:bc:6c:98:09:41:e8:c1:
81:1b:27:42:5f:9b:85:04:d1:87:da:0c:64:bd:da:
7d:80:9e:48:d3:d0:bc:96:d2:0b:b6:27:7c:35:2a:
ef:af:7d:b2:91:97:15:c2:d1:76:98:50:aa:68:29:
bf:0d:e5:a2:94:e9:70:35:5d:bb:8f:5a:b7:b5:94:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D6:7E:3B:2C:A6:67:39:6A:4B:88:20:66:58:EC:F5:AF:FF:9A:38
X509v3 Authority Key Identifier:
keyid:59:D7:90:79:EC:D0:31:F0:A1:D0:E8:8B:A3:26:75:54:15:EE:08:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/34352e3233312e39362e302f32342d3234203d3e20323637313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:0a:3c:03:77:ee:e7:fe:71:79:9e:5f:d3:7d:a9:82:f2:56:
61:d7:c7:b4:17:f1:6d:5d:e8:9b:a7:fd:a7:84:67:0a:f4:56:
46:90:36:bf:3a:ea:fe:56:32:d5:4e:89:df:82:1f:f8:5c:26:
03:66:c3:31:49:60:3a:20:29:c7:d9:cf:29:6e:1e:1f:66:ae:
a8:22:e7:3e:71:f4:5b:fa:02:bb:33:66:04:63:da:ed:ba:15:
c0:4c:45:ad:d1:9d:94:b3:82:4d:76:25:bb:c0:2e:1a:03:3f:
b2:fc:b5:25:cb:dd:5b:bf:9b:f5:21:64:1f:22:1e:5c:78:8b:
87:e8:a6:43:1d:5a:56:b1:51:25:4a:b1:65:0e:a9:ad:f9:f8:
d5:c8:cc:ac:a6:f0:8f:ff:e4:18:e7:8f:5b:c4:79:6f:5c:a7:
e2:b4:8a:c2:02:2b:d5:8d:0b:ea:e0:05:29:99:43:e7:51:ca:
81:3a:8f:06:31:31:32:f5:13:9d:a7:a7:5b:5c:cf:eb:52:09:
d3:57:7a:d9:ec:29:ef:8c:da:01:80:a6:3d:89:c8:a8:3d:57:
f5:09:fc:4e:8e:92:d4:a3:f7:cc:c2:d0:b2:79:3b:50:1b:ab:
e7:bf:ac:20:46:8b:65:bf:70:c3:f9:1b:c3:ae:8e:8d:62:a7:
69:34:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:38 2025 by rpki-client