Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35322e302f32322d3332203d3e20323639343131.roa
File: 34352e3138362e35322e302f32322d3332203d3e20323639343131.roa (raw, json)
Hash identifier: Vy8F6jLR0eMke9yvF4dl34w/4fR64F9IFMdJM4IdNDQ=
Subject key identifier: 65:96:C3:A2:7E:EF:C9:AC:6D:2F:85:85:F5:D3:9C:77:F9:DD:9F:A2
Certificate issuer: /CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Certificate serial: 0861C48FE3D886AD1E4AECFF6783F69CD1AAFC0E
Authority key identifier: 70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35322e302f32322d3332203d3e20323639343131.roa
Signing time: Thu 04 Apr 2024 19:37:35 +0000
ROA not before: Thu 04 Apr 2024 19:32:35 +0000
ROA not after: Thu 03 Apr 2025 19:37:35 +0000
asID: 269411
IP address blocks: 45.186.52.0/22 maxlen: 32
Validation: Failed, certificate revoked on Thu 23 May 2024 01:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:61:c4:8f:e3:d8:86:ad:1e:4a:ec:ff:67:83:f6:9c:d1:aa:fc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Validity
Not Before: Apr 4 19:32:35 2024 GMT
Not After : Apr 3 19:37:35 2025 GMT
Subject: CN=6596C3A27EEFC9AC6D2F8585F5D39C77F9DD9FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:15:db:47:77:77:12:39:eb:d2:af:3d:85:
7a:7d:7e:ab:b3:4c:06:ec:75:64:e8:41:dd:a5:21:
db:7b:c0:df:f9:02:ab:9e:8c:09:e1:a8:69:5d:ab:
75:a6:25:b6:4b:85:85:33:7d:7d:d4:68:9c:14:41:
f6:72:d1:2e:30:69:20:0b:28:ab:2a:7c:62:35:30:
58:a5:f7:ad:ec:dd:d4:41:7d:a5:ae:7e:2f:20:fc:
b5:5c:8f:a1:de:96:5e:14:ab:c0:a9:50:df:58:6f:
13:24:67:85:78:24:33:6c:14:ac:fc:23:cc:e0:01:
98:f1:18:d8:44:78:00:cc:c8:2c:e7:ec:9a:eb:d5:
a3:43:80:b9:af:9b:cd:8b:5a:f1:b5:41:26:9e:ac:
10:a9:57:fb:44:15:7e:ff:14:1f:fd:bc:bf:ee:84:
7e:69:57:fd:4b:ec:66:99:75:69:cc:bd:cd:62:0a:
97:20:9c:b2:ef:ec:dc:6c:10:b8:e4:7c:4c:18:f4:
99:e5:b0:8d:c4:da:0e:b2:6e:79:d3:10:5f:f8:7c:
5b:53:9f:19:69:da:15:f7:26:4b:68:d2:e3:7c:85:
ee:08:df:81:48:c4:47:b5:49:5e:e4:20:34:d7:d8:
04:37:20:59:3e:d4:57:46:03:88:6c:ae:a3:88:ad:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:96:C3:A2:7E:EF:C9:AC:6D:2F:85:85:F5:D3:9C:77:F9:DD:9F:A2
X509v3 Authority Key Identifier:
keyid:70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35322e302f32322d3332203d3e20323639343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:0a:b0:16:77:3a:1a:96:9f:6e:90:87:a6:80:b8:51:e6:f5:
ce:6f:14:25:e2:ad:fc:aa:55:ec:78:bf:6e:9e:95:01:1b:64:
9d:88:af:22:e9:fb:45:a6:b0:2b:15:3c:0b:aa:95:51:a4:a8:
84:cf:bd:e5:45:2c:6c:00:5e:5b:70:c9:b2:f0:26:82:1c:01:
99:a1:54:bb:cd:e9:38:85:ce:44:9c:02:f0:f4:ee:b5:73:f2:
a5:fc:15:f5:30:83:cc:05:af:49:08:72:c6:c0:c1:11:00:33:
8b:c2:9b:f6:4d:25:36:16:51:1d:e5:b5:f7:c3:6c:a3:d4:b0:
ca:df:b4:55:69:97:62:74:81:f5:cc:21:d4:60:e2:08:fb:be:
94:98:5a:ce:0a:82:c0:da:f5:bf:f7:4d:ce:e9:3f:fd:57:4c:
d0:2e:a7:f2:f2:df:47:c8:2d:4d:3b:94:fa:b2:b0:90:7b:8a:
a5:f7:ec:03:57:4f:9a:28:13:f1:b8:85:9e:37:cb:84:68:6e:
95:84:15:42:b8:ef:53:09:c0:bf:92:e5:c8:0e:4e:01:75:04:
21:95:6f:ee:fe:3c:e1:22:3f:b2:6f:52:74:c0:17:6c:e6:cb:
ca:76:a5:21:5b:08:7c:c1:fa:8c:06:23:f2:39:fb:41:65:6d:
d4:5f:4f:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCGHEj+PYhq0eSuz/Z4P2nNGq/A4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzAxRkIxQUNEQTJBNzI1QzU3RTJGMjI5Njc4QzQ1RTZG
MEI2NkJBOTAeFw0yNDA0MDQxOTMyMzVaFw0yNTA0MDMxOTM3MzVaMDMxMTAvBgNV
BAMTKDY1OTZDM0EyN0VFRkM5QUM2RDJGODU4NUY1RDM5Qzc3RjlERDlGQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi/RXbR3d3Ejnr0q89hXp9fquz
TAbsdWToQd2lIdt7wN/5AquejAnhqGldq3WmJbZLhYUzfX3UaJwUQfZy0S4waSAL
KKsqfGI1MFil963s3dRBfaWufi8g/LVcj6Hell4Uq8CpUN9YbxMkZ4V4JDNsFKz8
I8zgAZjxGNhEeADMyCzn7Jrr1aNDgLmvm82LWvG1QSaerBCpV/tEFX7/FB/9vL/u
hH5pV/1L7GaZdWnMvc1iCpcgnLLv7NxsELjkfEwY9JnlsI3E2g6ybnnTEF/4fFtT
nxlp2hX3Jkto0uN8he4I34FIxEe1SV7kIDTX2AQ3IFk+1FdGA4hsrqOIrdrHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZZbDon7vyaxtL4WF9dOcd/ndn6IwHwYDVR0j
BBgwFoAUcB+xrNoqclxX4vIpZ4xF5vC2a6kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR
eEUvMS83MDFGQjFBQ0RBMkE3MjVDNTdFMkYyMjk2NzhDNDVFNkYwQjY2QkE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwMUZCMUFDREEyQTcyNUM1
N0UyRjIyOTY3OEM0NUU2RjBCNjZCQTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzEv
MzQzNTJlMzEzODM2MmUzNTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbo0MA0GCSqGSIb3DQEBCwUAA4IBAQCkCrAWdzoa
lp9ukIemgLhR5vXObxQl4q38qlXseL9unpUBG2SdiK8i6ftFprArFTwLqpVRpKiE
z73lRSxsAF5bcMmy8CaCHAGZoVS7zek4hc5EnALw9O61c/Kl/BX1MIPMBa9JCHLG
wMERADOLwpv2TSU2FlEd5bX3w2yj1LDK37RVaZdidIH1zCHUYOII+76UmFrOCoLA
2vW/903O6T/9V0zQLqfy8t9HyC1NO5T6srCQe4ql9+wDV0+aKBPxuIWeN8uEaG6V
hBVCuO9TCcC/kuXIDk4BdQQhlW/u/jzhIj+yb1J0wBds5svKdqUhWwh8wfqMBiPy
OftBZW3UX0+W
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org