Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32332d3233203d3e20323638323632.roa
File: 34352e3233372e32342e302f32332d3233203d3e20323638323632.roa (raw, json)
Hash identifier: Qy5Rnss0aLYOcjdgz+bjSaLnZumipPavvMw+iBcp0fU=
Subject key identifier: BE:E7:57:4A:38:CD:85:CD:E3:EE:E2:B7:FB:AF:93:C0:5E:16:79:3F
Certificate issuer: /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
Certificate serial: 04D65532CFB9466A3DD6C7F816F8838B8911A356
Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32332d3233203d3e20323638323632.roa
Signing time: Thu 25 Apr 2024 13:14:42 +0000
ROA not before: Thu 25 Apr 2024 13:09:42 +0000
ROA not after: Thu 24 Apr 2025 13:14:42 +0000
asID: 268262
IP address blocks: 45.237.24.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d6:55:32:cf:b9:46:6a:3d:d6:c7:f8:16:f8:83:8b:89:11:a3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
Validity
Not Before: Apr 25 13:09:42 2024 GMT
Not After : Apr 24 13:14:42 2025 GMT
Subject: CN=BEE7574A38CD85CDE3EEE2B7FBAF93C05E16793F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:bd:0e:35:4b:26:55:18:5e:dd:66:14:bd:
b1:2f:26:a0:90:89:da:8d:b6:bb:65:57:65:d6:ea:
f1:fa:27:03:77:e7:dc:94:5d:35:ae:64:96:52:18:
6b:db:18:19:77:c8:a3:d2:86:80:2f:02:74:87:4f:
0e:92:23:16:6f:68:7a:2d:43:6e:39:d7:49:7a:d7:
7f:93:57:2a:07:af:f8:84:cf:d4:0d:f2:f5:cd:96:
54:da:e9:36:40:a7:2b:16:6d:b6:5b:d1:c2:f3:27:
9e:18:31:f7:f8:06:52:1c:4e:6e:ee:14:10:d3:f3:
dc:ec:2b:7c:e9:23:ec:a8:4c:5d:f9:42:da:1d:3f:
73:9b:e8:89:11:c7:d7:90:b1:ed:7a:41:d6:87:76:
6c:66:99:8d:35:57:48:2b:bf:f3:da:cf:57:d9:90:
95:4b:1d:69:fc:a1:09:dd:48:8c:56:5d:49:7a:cd:
d8:91:2e:5d:7f:47:7d:21:98:65:e5:90:ef:03:bf:
62:2b:d9:cb:16:e1:77:a3:02:01:41:5c:0b:1b:81:
3f:23:d3:22:c6:ae:0d:0b:fe:4d:29:c9:06:3e:6e:
83:27:82:1a:91:e0:9f:f2:71:62:0f:9a:26:4a:f5:
68:90:65:42:32:de:19:16:7c:ac:1a:d8:ba:48:9d:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E7:57:4A:38:CD:85:CD:E3:EE:E2:B7:FB:AF:93:C0:5E:16:79:3F
X509v3 Authority Key Identifier:
keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32332d3233203d3e20323638323632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.24.0/23
Signature Algorithm: sha256WithRSAEncryption
29:6d:b6:6b:27:7e:5d:ec:e2:75:5a:86:1e:e2:45:6c:86:19:
fa:02:a6:b7:f2:e7:2b:f8:4b:3e:b8:7e:70:a4:ac:98:16:18:
cb:a1:e3:47:a8:c2:6c:4d:4e:7e:3a:46:29:3c:df:5b:6b:fa:
6f:ac:f0:99:db:14:42:f0:b4:4c:04:74:7a:ea:0b:b5:8c:c2:
d8:8a:85:60:47:5a:a4:38:d1:b9:3a:53:73:ee:70:36:0f:0f:
8f:5d:8e:b2:bb:e8:0d:7a:e8:3d:61:e2:64:b0:de:f3:6b:7d:
65:d8:62:c1:ae:61:77:66:d2:7c:9e:87:6c:65:e3:e9:e9:04:
b2:9e:60:86:c0:06:1a:44:c5:95:2e:7b:42:4f:21:e6:64:d4:
9f:00:bd:73:97:f1:00:b6:1c:7c:fc:32:99:65:2e:a8:e8:2c:
36:62:e1:c0:f1:95:88:c0:1d:81:7c:d3:57:d6:db:0b:50:55:
d8:9f:ec:f6:d6:d0:0d:44:c1:69:bf:b4:e0:dc:24:33:88:a1:
fd:6e:d9:1e:d0:8b:a8:59:04:1a:05:28:62:1c:07:d5:d2:02:
cf:0c:b6:eb:b0:e6:ef:b7:47:54:cc:ae:08:ee:33:52:94:d3:
c2:76:2e:17:9a:e2:51:2e:56:99:10:91:99:fb:77:5a:a4:d2:
ab:62:3f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:57:20 2025 by rpki-client