Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32322d3232203d3e20323638323632.roa
File: 34352e3233372e32342e302f32322d3232203d3e20323638323632.roa (raw, json)
Hash identifier: IPHNlkUByf4EKIExdpXSNdUfEq0EZytwYSFZpf5I/ww=
Subject key identifier: 68:30:F4:85:44:8C:97:16:10:C6:2E:AF:AB:51:F6:00:CF:E8:5F:1E
Certificate issuer: /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
Certificate serial: 50D8DB4F269532E9A2A210E262BA0C62B4D05561
Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32322d3232203d3e20323638323632.roa
Signing time: Thu 25 Apr 2024 13:14:34 +0000
ROA not before: Thu 25 Apr 2024 13:09:34 +0000
ROA not after: Thu 24 Apr 2025 13:14:34 +0000
asID: 268262
IP address blocks: 45.237.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d8:db:4f:26:95:32:e9:a2:a2:10:e2:62:ba:0c:62:b4:d0:55:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
Validity
Not Before: Apr 25 13:09:34 2024 GMT
Not After : Apr 24 13:14:34 2025 GMT
Subject: CN=6830F485448C971610C62EAFAB51F600CFE85F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b8:e1:24:c4:26:24:63:cb:af:53:07:ed:19:
6a:31:ef:63:1e:45:27:55:f8:8a:ac:9a:e2:6b:a1:
66:1d:00:b1:5a:17:39:59:30:ff:ac:cc:bb:bc:f2:
c6:d6:9e:58:7a:3e:e1:c3:72:a0:1c:97:18:49:c2:
71:18:2b:a0:ce:b2:6c:51:0b:4d:e6:57:b9:e1:b6:
72:b2:ba:2b:1a:c4:52:08:d7:68:54:d7:9f:23:6d:
8e:27:ab:d1:11:df:32:b5:78:bc:3f:8d:7b:29:b3:
c4:4f:75:82:d6:45:6d:b9:1f:db:7d:ec:4e:42:76:
7e:10:df:da:e1:36:8a:3b:76:a7:27:ed:b8:6a:b7:
20:a3:98:48:6c:50:c3:47:ea:bf:96:09:ed:8b:a1:
53:53:75:4d:b3:27:b5:18:2c:a3:f7:09:fe:03:de:
06:1f:e1:d5:db:7c:22:7b:55:2f:c8:a4:a0:77:9b:
8c:3a:20:d4:b6:3c:e0:c1:74:30:6e:3a:d8:93:06:
f1:7f:a6:4f:95:3d:cb:34:76:06:cd:6c:ec:b7:39:
75:6a:11:ad:67:75:20:58:ad:99:d6:57:50:1f:68:
8f:41:0f:3d:3e:4c:71:19:01:e7:bc:da:fd:f1:92:
ba:5e:2d:bd:bd:b7:a8:4e:e4:31:d7:ef:f9:e6:f0:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:30:F4:85:44:8C:97:16:10:C6:2E:AF:AB:51:F6:00:CF:E8:5F:1E
X509v3 Authority Key Identifier:
keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32322d3232203d3e20323638323632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.24.0/22
Signature Algorithm: sha256WithRSAEncryption
23:ba:b9:86:10:6d:74:17:eb:93:9d:22:61:7c:50:51:3a:7e:
89:3b:9b:d4:8b:59:a5:aa:35:82:8a:97:14:f4:f2:cf:d2:ff:
6b:5a:cb:50:f0:07:a0:c7:77:6f:eb:ea:7a:ec:b6:4d:97:61:
d0:e4:75:18:30:53:a4:ce:82:6f:34:78:36:23:75:31:bc:be:
a2:f2:fb:8b:75:6a:b5:80:79:07:f1:31:9c:87:82:d7:80:f5:
04:c8:29:b3:60:63:0f:27:67:74:55:55:64:4e:bb:f7:f3:c2:
1f:8c:c3:bb:f2:09:39:64:ab:19:ea:1b:d2:ba:66:85:62:e8:
00:82:83:ea:b6:01:7d:09:05:b5:8e:a2:9e:df:d7:3d:06:3b:
a5:6e:ae:44:51:dd:be:00:65:a8:8f:cb:e4:3a:a3:bb:6d:51:
2c:4c:3e:0b:a4:f2:ff:6f:bc:2a:77:97:8c:8c:da:2e:73:00:
17:1b:7a:b5:24:f7:79:b8:09:7d:21:16:b2:da:86:c8:f8:a4:
f8:96:fe:7d:96:6f:bf:05:71:a1:20:86:ab:bf:34:2d:d6:e9:
76:27:52:c4:23:9e:b5:59:18:9f:3d:52:06:60:f1:d3:bb:55:
cd:4e:31:4d:c3:a8:91:1e:df:9a:e3:2e:39:a3:d2:4b:ac:23:
21:4b:6b:8f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUNjbTyaVMumiohDiYroMYrTQVWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZCQkU1M0FBNDBBQ0I0NUVENzZEQUMwRTZGODMzQjI4
QkVEOEE2OTAeFw0yNDA0MjUxMzA5MzRaFw0yNTA0MjQxMzE0MzRaMDMxMTAvBgNV
BAMTKDY4MzBGNDg1NDQ4Qzk3MTYxMEM2MkVBRkFCNTFGNjAwQ0ZFODVGMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXuOEkxCYkY8uvUwftGWox72Me
RSdV+IqsmuJroWYdALFaFzlZMP+szLu88sbWnlh6PuHDcqAclxhJwnEYK6DOsmxR
C03mV7nhtnKyuisaxFII12hU158jbY4nq9ER3zK1eLw/jXsps8RPdYLWRW25H9t9
7E5Cdn4Q39rhNoo7dqcn7bhqtyCjmEhsUMNH6r+WCe2LoVNTdU2zJ7UYLKP3Cf4D
3gYf4dXbfCJ7VS/IpKB3m4w6INS2PODBdDBuOtiTBvF/pk+VPcs0dgbNbOy3OXVq
Ea1ndSBYrZnWV1AfaI9BDz0+THEZAee82v3xkrpeLb29t6hO5DHX7/nm8CrlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaDD0hUSMlxYQxi6vq1H2AM/oXx4wHwYDVR0j
BBgwFoAU37vlOqQKy0XtdtrA5vgzsovtimkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl
VmovMC9ERkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkJFNTNBQTQwQUNCNDVF
RDc2REFDMEU2RjgzM0IyOEJFRDhBNjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N0WGhOb0RwemJaTmpXVHI5S3IyWVFnN0poRjZlMVZIamNuRms3WDNUZVZqLzAv
MzQzNTJlMzIzMzM3MmUzMjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzIzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLe0YMA0GCSqGSIb3DQEBCwUAA4IBAQAjurmGEG10
F+uTnSJhfFBROn6JO5vUi1mlqjWCipcU9PLP0v9rWstQ8Aegx3dv6+p67LZNl2HQ
5HUYMFOkzoJvNHg2I3UxvL6i8vuLdWq1gHkH8TGch4LXgPUEyCmzYGMPJ2d0VVVk
Trv388IfjMO78gk5ZKsZ6hvSumaFYugAgoPqtgF9CQW1jqKe39c9Bjulbq5EUd2+
AGWoj8vkOqO7bVEsTD4LpPL/b7wqd5eMjNoucwAXG3q1JPd5uAl9IRay2obI+KT4
lv59lm+/BXGhIIarvzQt1ul2J1LEI561WRifPVIGYPHTu1XNTjFNw6iRHt+a4y45
o9JLrCMhS2uP
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:12 2025 by rpki-client