Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134382e302f32332d3234203d3e20323637393633.roa
File: 34352e3136362e3134382e302f32332d3234203d3e20323637393633.roa (raw, json)
Hash identifier: ZlBT3aSjNeoCk4D4rN03cW79FkYOQyoBRW2zzaOUoPQ=
Subject key identifier: 87:1C:AD:35:CD:85:A6:F1:48:CC:EA:E5:5F:92:84:2A:43:45:D0:35
Certificate issuer: /CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Certificate serial: 2D5EA365AF563696B422D1F89747F9EF8EB2931F
Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134382e302f32332d3234203d3e20323637393633.roa
Signing time: Thu 06 Mar 2025 16:49:57 +0000
ROA not before: Thu 06 Mar 2025 16:44:57 +0000
ROA not after: Thu 05 Mar 2026 16:49:57 +0000
asID: 267963
IP address blocks: 45.166.148.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 19:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:5e:a3:65:af:56:36:96:b4:22:d1:f8:97:47:f9:ef:8e:b2:93:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Validity
Not Before: Mar 6 16:44:57 2025 GMT
Not After : Mar 5 16:49:57 2026 GMT
Subject: CN=871CAD35CD85A6F148CCEAE55F92842A4345D035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:51:7f:e7:81:12:ec:47:28:ba:96:18:9b:
c1:85:5b:c9:bd:30:03:d5:d5:36:b1:72:fe:74:8d:
7d:72:83:4c:a7:61:f7:5e:23:79:be:37:38:49:16:
c2:9e:74:ad:50:b8:14:9f:e8:33:e4:ab:19:15:71:
21:68:7f:a5:86:7a:eb:da:0a:4d:77:4e:21:e2:65:
3d:75:7b:7a:37:ab:b1:ae:94:bc:dc:e4:9b:49:35:
34:fa:52:95:4c:cd:6a:9e:92:41:df:1e:f9:e1:d2:
90:28:28:4a:c4:cf:23:10:3f:0a:00:0e:85:8a:81:
39:47:cb:ab:c0:9b:aa:d3:58:b0:fa:5c:c6:d2:5a:
ba:a2:9b:88:03:22:2c:d7:fa:26:9b:e8:3e:72:88:
ef:a8:3c:f3:b2:b3:e7:ba:a6:80:25:e6:4b:c9:b3:
3a:29:89:95:47:79:58:d2:83:1d:1f:5c:60:8e:dc:
37:b6:6f:9d:30:49:a9:f4:28:0a:7e:d7:8a:80:d5:
4f:00:b6:a1:2d:c7:b2:d4:5a:c7:ae:5c:65:9d:d8:
68:99:1e:45:5d:99:3d:11:5e:78:3d:8f:86:63:81:
47:f2:66:e4:40:ef:f9:10:2d:c6:7a:4d:14:37:b9:
23:b5:08:03:d2:81:d5:31:90:d2:a3:30:0b:db:48:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1C:AD:35:CD:85:A6:F1:48:CC:EA:E5:5F:92:84:2A:43:45:D0:35
X509v3 Authority Key Identifier:
keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134382e302f32332d3234203d3e20323637393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.148.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:d8:11:5f:7e:4e:0c:8c:7d:96:e4:d3:0f:70:00:12:38:8a:
fa:64:b3:d4:df:53:ea:29:ce:56:56:46:f9:9a:05:e7:2d:40:
05:e4:c2:bd:52:00:a8:61:e2:1d:8a:0d:df:3c:13:fd:56:6c:
f0:03:dd:2b:10:03:2e:5e:06:51:2c:5d:ba:17:e5:7a:4c:a0:
e7:95:54:36:aa:a9:c3:8a:a4:aa:d1:60:7a:22:1d:eb:db:f7:
8d:5b:5c:7d:a1:d4:7d:78:f4:65:c9:aa:a1:b4:4a:f5:6f:56:
21:92:54:2b:f1:e2:bb:9a:a6:43:a1:58:c9:2e:e2:bb:f6:d4:
53:60:45:5f:c7:7f:02:1b:05:f2:52:87:9e:87:c1:01:b7:c6:
f1:b4:93:e1:88:2b:2c:a1:6d:55:7e:05:e5:5a:3a:a7:28:37:
8f:15:e8:40:74:fc:3e:f1:5a:46:e7:42:fa:76:e4:83:74:c5:
b4:6c:32:2f:a0:f4:6c:9c:3c:05:62:5f:39:ec:96:1b:c6:4c:
65:1f:9d:71:07:a7:38:52:0d:15:db:2d:3d:93:b2:e4:a3:1f:
42:26:57:7a:3b:c9:53:87:7d:6c:7f:1c:33:9b:20:01:6f:5a:
1c:36:38:d5:91:09:15:39:d1:f0:f1:22:92:03:a7:11:5a:8f:
58:84:fd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:42:31 2025 by rpki-client