Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235322e302f32332d3233203d3e20323636393532.roa
File: 34352e3232352e3235322e302f32332d3233203d3e20323636393532.roa (raw, json)
Hash identifier: Rr9o0FWuwKkzRgqX0AVuGpijXwaTxzSAsv1HHu3AkSE=
Subject key identifier: 05:BF:A2:10:24:0D:E5:D8:F6:35:36:E4:88:35:29:42:AE:50:F3:19
Certificate issuer: /CN=F8017B5E805C4A715B0DA978F817ABB4B74EEB52
Certificate serial: 7B23DE6983C4099A7BD3356307A03246D25AEE48
Authority key identifier: F8:01:7B:5E:80:5C:4A:71:5B:0D:A9:78:F8:17:AB:B4:B7:4E:EB:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235322e302f32332d3233203d3e20323636393532.roa
Signing time: Mon 08 Apr 2024 16:22:38 +0000
ROA not before: Mon 08 Apr 2024 16:17:38 +0000
ROA not after: Mon 07 Apr 2025 16:22:38 +0000
asID: 266952
IP address blocks: 45.225.252.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 20 Jul 2024 15:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:23:de:69:83:c4:09:9a:7b:d3:35:63:07:a0:32:46:d2:5a:ee:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8017B5E805C4A715B0DA978F817ABB4B74EEB52
Validity
Not Before: Apr 8 16:17:38 2024 GMT
Not After : Apr 7 16:22:38 2025 GMT
Subject: CN=05BFA210240DE5D8F63536E488352942AE50F319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:d1:2e:79:8c:ef:53:b1:f3:5b:8d:58:36:
42:31:ca:8d:4d:f3:50:67:42:51:76:3a:b2:13:a6:
c8:45:8c:2d:30:9c:f9:df:64:00:c2:12:f1:c4:1a:
88:22:04:c1:87:07:7e:7e:57:ed:f2:c6:d6:1b:d7:
da:d5:20:cc:01:be:61:3c:ee:e7:e4:d0:7f:ac:4f:
e4:8c:4b:93:90:63:7a:d3:e8:00:01:39:a4:81:b7:
63:fd:f2:17:1d:eb:07:5e:be:a5:c0:73:16:97:01:
e5:0c:30:66:57:f3:92:81:66:0c:7a:e4:d2:6f:4f:
68:fe:d1:b2:d5:33:3b:ab:1a:03:e8:8f:15:a7:e4:
ad:eb:c3:e2:0e:53:4e:2a:1d:52:f9:35:9c:33:91:
8b:94:e9:57:30:36:fe:5b:d2:2f:19:d0:95:f7:02:
20:57:ca:f0:68:d9:30:d6:87:a4:df:7f:02:2e:96:
7b:f1:97:53:7b:5e:d2:b8:f7:ec:93:fa:0e:f7:fa:
0c:25:cc:84:99:69:f7:85:4e:3b:75:6c:76:cd:0b:
ed:44:57:b8:f7:fd:6f:10:36:55:1e:59:51:e1:19:
7a:71:dd:2c:07:97:4b:f1:16:cc:c6:f9:a2:a4:4d:
e2:96:2a:0c:31:04:54:43:46:13:32:9b:ef:75:84:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BF:A2:10:24:0D:E5:D8:F6:35:36:E4:88:35:29:42:AE:50:F3:19
X509v3 Authority Key Identifier:
keyid:F8:01:7B:5E:80:5C:4A:71:5B:0D:A9:78:F8:17:AB:B4:B7:4E:EB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235322e302f32332d3233203d3e20323636393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.252.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:91:ce:3f:e1:3a:c1:30:63:bf:3c:0b:06:ab:97:75:c3:da:
b2:09:89:e2:86:3d:79:3a:4c:05:42:c9:65:24:7c:c7:96:06:
f0:d4:c5:60:91:c1:6a:21:d9:f9:1b:a3:64:28:c9:47:b5:e3:
41:dd:50:70:fb:07:e7:f5:8b:9b:34:41:f3:60:43:a1:ab:0c:
6a:f0:e4:a5:94:18:1f:47:57:cb:6b:23:81:53:1b:be:f5:b0:
71:91:33:53:7b:ba:e5:b2:ad:a1:61:d1:67:50:25:6e:7a:b1:
97:b5:1f:d3:90:80:56:91:24:b0:b7:d5:54:d3:f3:1e:db:af:
0f:d4:9d:d8:dc:fe:5d:44:4a:7e:dd:c7:17:93:be:57:79:63:
20:e0:7c:0a:07:5e:de:28:dc:af:2b:cc:27:48:ee:8c:d6:38:
5a:f9:07:09:53:07:82:0e:da:d7:f7:bf:a6:19:7c:a7:74:91:
84:50:3b:e2:b5:2f:ff:a9:e7:1d:8b:d6:a8:c3:2d:d9:7b:67:
86:84:fb:c7:5b:e6:9c:11:9a:47:42:80:09:7c:26:81:96:e0:
76:89:af:1d:7c:b8:07:fe:1a:01:a6:63:44:1f:a6:e8:aa:b2:
17:10:f4:63:03:b5:1b:ad:78:37:70:3a:e8:c6:7a:e7:52:ad:
55:61:4d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 17:42:41 2024 by rpki-client on console-fra.rpki-client.org