Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/34352e3136342e3139382e302f32332d3233203d3e20323638363430.roa
File: 34352e3136342e3139382e302f32332d3233203d3e20323638363430.roa (raw, json)
Hash identifier: iWuhw+V6iaqfW23aqE8bZF0MrxDUOvX+kkFlcbPIjtw=
Subject key identifier: 4D:9A:C1:89:85:D7:B9:C2:49:DD:45:22:CD:1F:2E:7F:6F:92:12:88
Certificate issuer: /CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
Certificate serial: 5337A9831E6F10E946640D7746DC966EAD02E243
Authority key identifier: CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/34352e3136342e3139382e302f32332d3233203d3e20323638363430.roa
Signing time: Tue 28 May 2024 14:40:06 +0000
ROA not before: Tue 28 May 2024 14:35:06 +0000
ROA not after: Tue 27 May 2025 14:40:06 +0000
asID: 268640
IP address blocks: 45.164.198.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 18 Jun 2024 14:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:37:a9:83:1e:6f:10:e9:46:64:0d:77:46:dc:96:6e:ad:02:e2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
Validity
Not Before: May 28 14:35:06 2024 GMT
Not After : May 27 14:40:06 2025 GMT
Subject: CN=4D9AC18985D7B9C249DD4522CD1F2E7F6F921288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:c5:69:4a:d0:d9:8e:d1:21:57:3e:28:ec:
d6:7d:77:d3:77:40:a2:6b:be:b5:10:18:a2:46:8f:
01:cb:17:0f:f6:90:56:0c:68:54:e2:6f:8d:d8:31:
c8:d2:e1:bf:26:93:3b:9a:90:e5:da:e0:28:2c:65:
9d:e5:25:b1:6e:58:cb:83:14:23:da:27:55:02:f5:
89:05:10:5e:d5:b3:23:29:ac:54:b3:41:6d:cf:e9:
a0:42:79:6f:0b:6f:59:80:11:9d:3e:95:35:14:4d:
b0:7c:29:02:3e:3d:85:9f:3e:cb:1f:f4:0d:d0:bd:
f5:7d:34:84:3e:2d:cb:10:2f:de:c1:01:93:27:df:
0d:e5:b9:43:e3:99:64:7c:32:7a:a1:c9:16:33:19:
81:e1:2b:0a:a1:ea:c5:81:1b:7c:9f:b5:de:2f:28:
ad:78:48:e7:a4:7c:2f:5b:1c:fa:86:bd:a5:a8:4a:
87:ee:76:5e:cf:d7:0e:66:98:e7:40:c9:d8:19:e8:
3d:a5:9c:9e:7e:fe:34:9c:27:ef:fa:5f:1e:7f:f5:
1a:d1:ba:af:fd:ed:82:1c:d0:ac:5c:c0:5e:10:f0:
1b:e2:17:f7:95:3b:1c:47:14:b1:7c:25:a4:23:2a:
ae:29:30:85:9f:8c:90:14:1d:1d:e7:fc:6b:d6:a3:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9A:C1:89:85:D7:B9:C2:49:DD:45:22:CD:1F:2E:7F:6F:92:12:88
X509v3 Authority Key Identifier:
keyid:CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/34352e3136342e3139382e302f32332d3233203d3e20323638363430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.198.0/23
Signature Algorithm: sha256WithRSAEncryption
32:5f:9c:d9:cb:18:3b:1c:75:81:ca:a8:4a:40:0b:f4:fa:3d:
ca:45:d1:97:7a:49:2d:94:be:68:33:40:e5:d0:87:22:9e:20:
d8:94:c0:01:5d:9a:14:25:d5:ca:a4:02:9c:24:f6:48:5f:ab:
3c:c6:b0:2d:33:d9:6a:b2:44:f4:02:3a:23:17:e1:4a:f5:55:
f4:d4:68:ab:38:55:03:ca:04:09:24:a6:e9:0c:ca:e0:ef:8d:
1b:32:82:77:ba:90:bc:0b:d5:60:fc:93:84:01:81:a5:f7:27:
3f:c1:6d:51:6b:84:8a:e1:ca:28:64:77:47:9f:e0:4d:c1:2c:
dc:a0:3b:7d:ee:4e:1d:1a:78:a3:3a:95:43:e4:ac:6f:2b:f2:
e7:8b:83:03:9c:21:49:76:37:8d:98:7a:50:66:ca:25:79:d9:
04:91:05:00:c7:d5:40:af:b3:8e:c6:70:d1:21:5d:ff:35:ce:
ee:d8:d5:f4:0c:3d:ff:2e:b6:20:82:6c:c1:41:31:73:ed:23:
3c:82:81:f0:d2:ed:d5:8c:9c:79:a8:92:54:ac:cd:51:7e:17:
5b:43:57:87:55:1e:ce:85:8b:0c:89:87:99:3a:80:0e:ce:04:
37:fc:a4:7c:77:b4:22:af:51:48:0a:e6:fc:24:15:ae:54:2b:
36:93:c2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 17:55:48 2024 by rpki-client on console-fra.rpki-client.org