Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/34352e3136342e3139362e302f32342d3234203d3e20323638363430.roa
File: 34352e3136342e3139362e302f32342d3234203d3e20323638363430.roa (raw, json)
Hash identifier: Jmfju8cUaAKPyrDtzMdatOXY822HGf/M3Beee8V1cc8=
Subject key identifier: 8F:1B:D3:FE:7E:E6:09:19:68:BF:95:3E:F8:D9:EF:8D:01:04:26:D9
Certificate issuer: /CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
Certificate serial: 5190D72F09EFE3CEECC3F352FE265769E306700C
Authority key identifier: CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/34352e3136342e3139362e302f32342d3234203d3e20323638363430.roa
Signing time: Tue 28 May 2024 14:39:57 +0000
ROA not before: Tue 28 May 2024 14:34:57 +0000
ROA not after: Tue 27 May 2025 14:39:57 +0000
asID: 268640
IP address blocks: 45.164.196.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:90:d7:2f:09:ef:e3:ce:ec:c3:f3:52:fe:26:57:69:e3:06:70:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
Validity
Not Before: May 28 14:34:57 2024 GMT
Not After : May 27 14:39:57 2025 GMT
Subject: CN=8F1BD3FE7EE6091968BF953EF8D9EF8D010426D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:1f:63:13:e6:f2:81:ad:cb:de:55:48:5a:
e4:e4:e3:c6:dc:45:94:92:51:c4:ef:69:f2:c9:2a:
32:21:e9:b8:c8:67:03:a4:03:c9:3e:03:78:bf:fa:
9c:03:a7:d4:6c:d6:a4:3e:45:4d:d3:7d:d9:a5:5a:
d4:80:ef:43:42:5d:d1:87:ef:ed:32:b2:64:83:77:
2f:a0:ff:e0:0c:e3:fe:7f:7a:a8:9a:64:1b:46:87:
32:3f:77:4e:cf:ba:7e:b0:5a:04:97:62:00:e3:13:
e0:10:94:d0:4c:eb:b8:93:da:1c:00:ac:8b:b0:fe:
5b:86:c1:b9:5f:de:7c:09:b4:74:f3:f6:8d:1c:aa:
53:57:44:d1:76:9f:6a:af:f3:41:ff:f1:93:ec:f8:
6d:32:5b:f0:76:47:47:28:2c:9a:bd:ee:3a:fa:03:
ce:d9:66:be:0d:04:33:12:9f:7e:b9:77:1a:30:df:
a0:35:78:79:26:6e:40:6a:26:ef:c7:f8:33:fd:a3:
23:41:6e:a3:54:33:7f:bc:83:b5:66:9c:e5:ba:68:
82:13:ee:ff:b3:e3:b9:95:77:7e:10:b1:b0:e0:a5:
8a:b9:20:4a:8b:98:ca:31:eb:28:07:52:90:a9:21:
66:33:5f:d1:a9:c8:2e:0c:1a:c3:a1:23:93:27:fb:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1B:D3:FE:7E:E6:09:19:68:BF:95:3E:F8:D9:EF:8D:01:04:26:D9
X509v3 Authority Key Identifier:
keyid:CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/34352e3136342e3139362e302f32342d3234203d3e20323638363430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:db:0e:f2:64:0d:24:62:7f:58:90:ca:58:c5:d3:7a:11:a6:
3b:76:40:c5:3d:c6:74:ea:bf:1b:4a:56:41:1f:f0:0b:4c:28:
27:f1:72:c9:cb:e6:c8:9c:75:86:97:9e:18:52:f7:fc:d0:b6:
cd:ac:57:d7:d9:59:60:30:82:10:48:96:ad:db:6f:20:22:f8:
2f:bf:bb:fb:97:80:c2:ae:b4:6d:9f:a8:5c:8e:49:14:9e:00:
cf:3a:90:b3:37:41:ed:87:ac:7a:6d:ee:a9:99:eb:0b:27:ca:
6c:78:7e:1e:30:44:40:b1:cf:1d:8e:f7:be:9b:1f:d4:bf:7b:
4d:0c:66:a2:8e:6a:02:70:fb:cc:94:57:69:47:a4:d2:98:4a:
25:aa:37:79:02:42:f5:0d:d3:42:90:b8:2f:50:de:a4:57:0b:
fa:76:58:b9:53:65:9b:64:d8:98:f1:e3:09:72:30:30:a8:50:
9d:ca:6c:56:ba:6b:7a:af:db:f0:8d:f7:32:bd:34:27:3a:0b:
d6:f8:3c:b2:f9:be:cf:c8:8a:b2:c0:0e:ce:cc:6a:24:34:5a:
d0:72:7b:7f:76:f6:8e:4a:08:c5:26:e1:be:5a:58:d6:f7:03:
04:4e:2e:66:48:8c:0d:08:17:2a:4f:98:a9:4b:e6:ca:63:37:
c2:2f:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:42 2025 by rpki-client