Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/34352e3136342e3139372e302f32342d3234203d3e20323638363430.roa
File: 34352e3136342e3139372e302f32342d3234203d3e20323638363430.roa (raw, json)
Hash identifier: HM3Jyt36awVuyRtUqvwRIa9lLE5SQr4qjc1t6P2vBFE=
Subject key identifier: A2:85:8E:16:3B:03:96:41:40:9A:AC:74:36:C2:44:68:DC:56:A6:52
Certificate issuer: /CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
Certificate serial: 3C3107F3C829EAE4A97065DE9D120918DE4D4083
Authority key identifier: CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/34352e3136342e3139372e302f32342d3234203d3e20323638363430.roa
Signing time: Tue 28 May 2024 14:40:02 +0000
ROA not before: Tue 28 May 2024 14:35:02 +0000
ROA not after: Tue 27 May 2025 14:40:02 +0000
asID: 268640
IP address blocks: 45.164.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 14:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:31:07:f3:c8:29:ea:e4:a9:70:65:de:9d:12:09:18:de:4d:40:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
Validity
Not Before: May 28 14:35:02 2024 GMT
Not After : May 27 14:40:02 2025 GMT
Subject: CN=A2858E163B039641409AAC7436C24468DC56A652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:2c:54:a7:57:b5:da:56:dc:23:96:da:c5:
d8:ad:f6:93:d3:67:dd:ff:a4:ce:23:9e:51:e9:23:
5d:c3:ec:a9:ae:db:f6:7c:b5:e5:ec:93:ad:7a:f5:
7c:1d:dc:ec:cc:63:1a:16:52:0c:2a:32:b7:17:6f:
d9:ed:2e:6d:ce:7c:30:1e:f0:ee:a2:80:7c:b4:f0:
a1:4d:1e:bc:19:e0:c8:24:51:b9:79:8c:dc:4a:e0:
91:c0:53:eb:c7:03:0b:b2:0a:e7:23:f7:47:e5:47:
33:01:db:13:e9:66:3f:5c:7e:c1:fb:b2:f7:30:0a:
2b:ea:8b:28:87:53:d4:a3:d8:c7:19:19:17:1f:5b:
01:06:7f:68:ea:53:f0:5a:d5:57:0e:88:05:03:b1:
84:9f:c2:a8:88:34:0c:63:3c:42:ef:f4:78:5d:e9:
e0:2d:74:52:b1:7c:f9:87:09:82:03:3b:77:19:1b:
bc:9b:4c:cb:f4:9c:33:1a:63:1d:37:0c:99:c2:43:
45:a6:4a:3b:ec:f6:e4:d7:0a:44:69:71:7a:a4:1e:
38:72:1f:83:60:42:10:df:8f:64:39:78:a4:cf:5b:
4b:46:59:c8:d8:74:6f:35:ac:12:5d:1c:71:4b:f1:
e7:7b:41:31:2f:da:6a:d6:84:f7:b7:f6:19:96:e5:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:85:8E:16:3B:03:96:41:40:9A:AC:74:36:C2:44:68:DC:56:A6:52
X509v3 Authority Key Identifier:
keyid:CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/34352e3136342e3139372e302f32342d3234203d3e20323638363430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.197.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:4c:fa:e3:c5:c5:9b:5d:b3:8c:44:2f:cc:07:b6:c2:54:b8:
8b:1a:75:f1:16:e9:8a:f5:d3:37:8a:12:3a:5d:96:d8:7f:13:
8d:4d:c6:34:17:5e:e1:26:fe:bc:31:6c:80:69:11:ee:67:90:
55:c7:5d:59:2a:21:0b:5d:0d:3d:52:34:21:55:9c:cc:08:be:
1a:f5:3c:1d:3a:3b:a5:a2:69:04:48:35:c0:58:41:28:df:db:
03:d0:1e:0b:90:9f:83:04:6c:54:2e:02:d9:b7:9a:d2:18:0e:
d3:33:54:d9:b2:ee:81:51:fd:f4:66:b8:1a:4a:26:bc:b4:9b:
42:c6:01:1b:35:4f:c0:16:4d:0f:70:f7:e9:61:a4:fb:5d:8f:
22:e4:5d:5c:2b:12:75:69:b3:d0:3b:bd:90:e0:d9:fe:df:4b:
d6:26:12:15:c0:a3:38:aa:fd:9f:68:4e:dd:c8:13:c0:c6:c6:
f1:e9:10:38:1f:00:f2:c4:64:d4:bf:f1:04:48:b5:65:c9:cf:
6a:3f:81:a6:e0:b2:2a:05:98:b9:db:61:7b:ca:1a:5d:9f:d4:
7e:56:f5:a2:44:a8:5e:0b:06:56:97:8d:76:53:20:c1:6f:c5:
a2:cf:ac:74:c7:7f:76:76:df:03:74:1d:34:a8:a9:4d:b4:9d:
5c:0f:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:25:48 2025 by rpki-client