Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa
File: 34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa (raw, json)
Hash identifier: yOxVyRQFSeY8Lygut+cfOKJwCIWKInVXVXTp+GbXE7Q=
Subject key identifier: 32:7C:CF:DC:9F:BE:C1:E2:8D:07:B4:AE:FA:B8:D1:7E:8C:42:01:13
Certificate issuer: /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial: 3D5B07FEF9E26C56EDF11C89F9AC18E09C54FD53
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa
Signing time: Thu 04 Apr 2024 08:39:49 +0000
ROA not before: Thu 04 Apr 2024 08:34:49 +0000
ROA not after: Thu 03 Apr 2025 08:39:49 +0000
asID: 268452
IP address blocks: 45.160.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 17:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:5b:07:fe:f9:e2:6c:56:ed:f1:1c:89:f9:ac:18:e0:9c:54:fd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
Validity
Not Before: Apr 4 08:34:49 2024 GMT
Not After : Apr 3 08:39:49 2025 GMT
Subject: CN=327CCFDC9FBEC1E28D07B4AEFAB8D17E8C420113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:07:f1:70:ae:21:36:ad:ec:27:ef:da:6a:
5f:11:ac:7a:64:2e:06:f4:39:35:57:b4:28:1f:bb:
cb:7e:f1:1e:81:2a:e2:ea:e0:f6:c2:98:2a:8b:3c:
09:2e:9f:30:4a:28:db:ab:64:4a:d7:61:82:3d:fe:
a9:36:b0:33:98:4e:9c:95:90:79:57:7e:fc:82:ae:
c3:2f:2d:16:8e:37:6b:1f:7c:33:58:20:25:6e:0d:
28:7d:b5:40:10:e3:93:02:1b:00:d7:2f:a2:5f:9b:
97:39:ce:53:9d:0c:52:05:f4:c0:f8:e1:70:f6:83:
79:e7:65:86:43:88:87:52:2e:25:2e:b8:bc:7a:34:
8e:b7:0a:69:3f:25:74:62:73:69:e6:b7:10:e8:b5:
4e:28:f1:7f:48:03:be:11:8a:47:41:16:03:e1:34:
be:70:64:bf:99:e3:9f:4f:22:24:ba:8f:79:4e:8c:
d3:b9:a1:68:20:26:b0:0f:8f:6d:4a:b7:2e:89:4c:
24:38:ab:1f:9e:55:44:67:0e:b4:a2:1c:b8:53:ce:
d5:2c:00:7a:4a:23:3a:91:c0:5b:b5:ce:ca:ec:ec:
ad:61:6c:71:b9:3f:bc:59:a4:82:32:fd:3f:20:6d:
1a:c8:59:13:de:4d:79:05:28:46:77:c0:63:b2:cf:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7C:CF:DC:9F:BE:C1:E2:8D:07:B4:AE:FA:B8:D1:7E:8C:42:01:13
X509v3 Authority Key Identifier:
keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:06:1a:7e:32:9c:f9:a0:55:0f:16:cf:6a:0f:9b:71:91:0b:
3d:6e:b3:ef:f1:af:29:55:9d:68:e9:cb:4c:ad:f7:20:24:56:
64:fc:07:97:a6:b4:f0:c7:74:83:1c:cd:26:09:46:d5:b8:cc:
95:15:cf:d4:1b:10:6d:ee:3c:7a:bc:5e:ac:be:56:e1:06:b9:
9a:bb:3f:7b:c0:fd:15:87:12:a0:8b:96:17:1b:28:10:70:07:
64:d0:81:18:a5:74:57:56:2a:0b:37:38:17:a1:8f:22:54:f1:
e3:35:81:9b:7a:cd:2f:44:01:64:d9:7b:ac:5b:a3:31:44:7c:
a6:b9:82:ed:8a:be:7a:6b:b1:4e:59:97:6c:ee:ba:a1:b8:f5:
16:f7:74:76:e2:03:a3:14:8e:d9:54:f0:27:76:52:63:52:20:
2e:f3:f8:65:a3:28:d5:c9:be:c9:65:f1:69:d7:57:41:5d:64:
6b:21:bc:5a:09:35:bb:3c:a4:df:4d:e3:1a:77:43:f1:af:1e:
3f:fb:73:48:e3:25:45:77:a4:81:0e:fa:89:dc:43:d4:ae:a4:
7a:66:5f:72:c7:0e:2f:de:19:c5:ce:a9:c2:28:74:03:b7:f5:
07:80:92:b8:eb:05:4f:a2:d1:73:35:08:6c:85:f8:a2:b5:1d:
ed:b1:3d:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPVsH/vnibFbt8RyJ+awY4JxU/VMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQzOTg5NzYzMjI2OTE5ODhDQUJBNjQwQkJCMjg1NEFF
Q0RGNkI4NzAeFw0yNDA0MDQwODM0NDlaFw0yNTA0MDMwODM5NDlaMDMxMTAvBgNV
BAMTKDMyN0NDRkRDOUZCRUMxRTI4RDA3QjRBRUZBQjhEMTdFOEM0MjAxMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCytwfxcK4hNq3sJ+/aal8RrHpk
Lgb0OTVXtCgfu8t+8R6BKuLq4PbCmCqLPAkunzBKKNurZErXYYI9/qk2sDOYTpyV
kHlXfvyCrsMvLRaON2sffDNYICVuDSh9tUAQ45MCGwDXL6Jfm5c5zlOdDFIF9MD4
4XD2g3nnZYZDiIdSLiUuuLx6NI63Cmk/JXRic2nmtxDotU4o8X9IA74RikdBFgPh
NL5wZL+Z459PIiS6j3lOjNO5oWggJrAPj21Kty6JTCQ4qx+eVURnDrSiHLhTztUs
AHpKIzqRwFu1zsrs7K1hbHG5P7xZpIIy/T8gbRrIWRPeTXkFKEZ3wGOyzzg1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMnzP3J++weKNB7Su+rjRfoxCARMwHwYDVR0j
BBgwFoAUhDmJdjImkZiMq6ZAu7KFSuzfa4cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhIOXNpQWdDOTZIRjJYTlBZNjJZdFZQTVpISEwzMTIyMUNEbjhjWEpm
MzUvMS84NDM5ODk3NjMyMjY5MTk4OENBQkE2NDBCQkIyODU0QUVDREY2Qjg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0Mzk4OTc2MzIyNjkxOTg4
Q0FCQTY0MEJCQjI4NTRBRUNERjZCODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZISDlzaUFnQzk2SEYyWE5QWTYyWXRWUE1aSEhMMzEyMjFDRG44Y1hKZjM1LzEv
MzQzNTJlMzEzNjMwMmUzMjM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNDM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItoPQwDQYJKoZIhvcNAQELBQADggEBAHoGGn4y
nPmgVQ8Wz2oPm3GRCz1us+/xrylVnWjpy0yt9yAkVmT8B5emtPDHdIMczSYJRtW4
zJUVz9QbEG3uPHq8Xqy+VuEGuZq7P3vA/RWHEqCLlhcbKBBwB2TQgRildFdWKgs3
OBehjyJU8eM1gZt6zS9EAWTZe6xbozFEfKa5gu2KvnprsU5Zl2zuuqG49Rb3dHbi
A6MUjtlU8Cd2UmNSIC7z+GWjKNXJvsll8WnXV0FdZGshvFoJNbs8pN9N4xp3Q/Gv
Hj/7c0jjJUV3pIEO+oncQ9SupHpmX3LHDi/eGcXOqcIodAO39QeAkrjrBU+i0XM1
CGyF+KK1He2xPQA=
-----END CERTIFICATE-----
Generated at Mon Jul 1 18:55:02 2024 by rpki-client on console-fra.rpki-client.org