Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34322e302f32342d3234203d3e20323639353730.roa
File: 34352e3138392e34322e302f32342d3234203d3e20323639353730.roa (raw, json)
Hash identifier: qD8NZnHZIm88GJoAnjptRQyPAV0dLs5/CB+iUSCMIwA=
Subject key identifier: D2:D7:16:20:EC:6B:9F:EF:FA:C1:F9:E0:D1:7D:39:BC:B4:F0:44:4E
Certificate issuer: /CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
Certificate serial: 258D2D4FF229752DFE6C18DB658DEC6A5CFED560
Authority key identifier: 13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34322e302f32342d3234203d3e20323639353730.roa
Signing time: Tue 23 Apr 2024 13:18:16 +0000
ROA not before: Tue 23 Apr 2024 13:13:16 +0000
ROA not after: Tue 22 Apr 2025 13:18:16 +0000
asID: 269570
IP address blocks: 45.189.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:8d:2d:4f:f2:29:75:2d:fe:6c:18:db:65:8d:ec:6a:5c:fe:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
Validity
Not Before: Apr 23 13:13:16 2024 GMT
Not After : Apr 22 13:18:16 2025 GMT
Subject: CN=D2D71620EC6B9FEFFAC1F9E0D17D39BCB4F0444E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:ad:cc:3f:05:84:71:9f:8e:c6:23:d1:58:
92:a7:8f:a4:71:7d:f3:5f:bf:ed:a2:82:13:dd:e7:
4f:c6:c6:bb:ba:d5:dd:37:55:b8:32:ed:53:6e:11:
e5:d4:80:f9:d3:15:f9:e0:83:6a:4b:b4:a8:01:44:
fc:91:8a:e5:a4:d5:89:64:84:b2:da:68:cb:9f:ca:
96:ae:8c:39:20:f3:cb:42:2e:64:f2:d3:89:42:65:
0f:88:1f:e7:22:0f:4b:82:e0:5f:67:e8:ee:c0:ce:
07:96:47:a6:e1:b4:51:19:e3:48:7b:64:4f:10:63:
4c:0d:d5:d4:53:7b:cf:d2:4e:0e:a1:0f:5c:0c:61:
b9:e2:8e:55:2b:aa:d8:fa:7e:23:f0:f9:c5:60:af:
3d:7b:75:45:3d:8c:b2:12:e6:c6:39:b3:cd:a9:8f:
08:3b:53:3d:e7:2a:65:9e:cb:2a:d8:b4:f4:33:91:
37:08:60:7d:b3:3e:4c:47:2a:25:82:b3:f8:ee:37:
38:f0:f6:31:7a:85:7d:77:e7:d2:b8:38:10:e1:2a:
78:46:d3:18:a9:d6:7e:93:76:3c:90:09:5d:73:16:
61:86:7d:6f:b8:41:46:30:30:60:8d:c0:43:da:ba:
61:4c:0b:47:fc:45:c5:0c:da:6e:41:10:64:d1:7c:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D7:16:20:EC:6B:9F:EF:FA:C1:F9:E0:D1:7D:39:BC:B4:F0:44:4E
X509v3 Authority Key Identifier:
keyid:13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34322e302f32342d3234203d3e20323639353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:70:58:7c:65:b2:4a:e9:ed:a4:b6:9b:de:8e:de:bc:1b:fd:
d9:24:ab:7f:5a:be:f9:8e:2c:c2:5f:c4:88:c3:7d:f0:9d:de:
05:0b:93:31:59:f2:ea:69:e2:c3:d8:0b:61:48:fb:19:90:d4:
1c:10:7d:f2:9f:a4:81:3f:f7:d8:5f:53:2f:cd:2b:96:e2:98:
d8:95:cf:f7:89:71:d4:90:3e:ab:81:5c:10:b9:a1:c8:89:bb:
5c:1d:37:23:17:aa:32:59:24:50:f4:93:3b:92:20:95:07:32:
d0:19:fe:0d:97:78:a3:40:a3:a4:81:f2:d0:04:e9:89:d5:9b:
c2:aa:55:e5:10:d7:91:04:07:37:28:7c:e7:54:c3:69:21:35:
16:18:a5:18:41:b8:ed:65:43:40:f7:63:20:01:03:4e:24:91:
3d:39:5c:56:65:e6:97:80:a2:88:6d:21:85:d4:53:b1:f3:6f:
24:d2:9f:cc:8a:2a:24:f0:c9:b2:3b:3f:78:93:9a:ef:70:89:
6e:37:1d:0c:88:2c:0f:4c:53:3c:77:36:fe:bc:be:6b:30:bd:
b2:33:3d:4e:bf:68:53:5b:32:ae:ce:e8:8e:31:72:68:dd:92:
d3:a7:43:2e:fe:2a:4a:2c:f4:21:69:18:ac:25:26:7d:87:db:
40:c4:8c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org