Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32322d3232203d3e20323637313234.roa
File: 34352e3232392e35322e302f32322d3232203d3e20323637313234.roa (raw, json)
Hash identifier: 9llWiVz29h+7sSHb9tmTOhQ9eJ4Xbtwu0PS6quXP8Vc=
Subject key identifier: 5E:C5:1C:FF:0A:46:86:15:1C:17:38:25:C3:A1:B3:F3:D8:52:B4:C3
Certificate issuer: /CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
Certificate serial: 114B5F5520C4CA86982FCEA49D40DCE713A00CBE
Authority key identifier: EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32322d3232203d3e20323637313234.roa
Signing time: Thu 04 Apr 2024 16:10:09 +0000
ROA not before: Thu 04 Apr 2024 16:05:09 +0000
ROA not after: Thu 03 Apr 2025 16:10:09 +0000
asID: 267124
IP address blocks: 45.229.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 21 Aug 2024 15:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:4b:5f:55:20:c4:ca:86:98:2f:ce:a4:9d:40:dc:e7:13:a0:0c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
Validity
Not Before: Apr 4 16:05:09 2024 GMT
Not After : Apr 3 16:10:09 2025 GMT
Subject: CN=5EC51CFF0A4686151C173825C3A1B3F3D852B4C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:f1:fe:41:22:33:93:69:c7:54:4f:ff:b3:
2f:17:12:dd:6c:99:b5:35:85:ba:fd:52:d5:0c:ea:
8e:2b:51:b2:a1:f8:5a:9a:42:99:78:21:b8:ec:a8:
0b:8a:2c:e7:70:d1:63:a7:bf:e3:70:ef:c0:4e:c2:
51:20:3c:6a:4e:6f:39:31:f4:80:46:08:8c:16:3d:
35:db:9c:77:79:6e:da:ff:39:d9:2f:fd:4d:a8:66:
50:cb:91:76:be:8b:d5:60:e7:75:da:33:fe:fb:d2:
bd:5b:c8:d1:9f:2e:a7:0e:15:e2:41:19:3b:ca:bb:
9e:19:cf:49:ff:12:82:a3:3b:33:aa:8b:e3:05:a7:
03:f8:49:69:a8:12:8f:c2:8b:d0:c0:e1:2c:99:cf:
f9:c8:9f:2f:a2:6d:b1:3d:2d:79:53:50:26:65:1b:
06:29:8f:e8:78:0e:a3:49:0f:e2:c6:92:9a:92:18:
cb:f3:0d:1f:cc:8d:bc:80:90:fa:ec:42:42:0b:67:
a8:19:db:18:37:34:e6:38:5b:63:05:ce:3e:85:b5:
9a:f1:8f:af:d0:0b:17:5d:15:67:3c:e0:83:af:aa:
2e:f0:a6:46:d2:4b:25:48:b9:bf:1a:7c:84:a2:60:
e8:97:e6:7b:5a:5a:6c:e6:96:02:40:70:c2:11:cf:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C5:1C:FF:0A:46:86:15:1C:17:38:25:C3:A1:B3:F3:D8:52:B4:C3
X509v3 Authority Key Identifier:
keyid:EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32322d3232203d3e20323637313234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.52.0/22
Signature Algorithm: sha256WithRSAEncryption
99:51:6c:bb:53:45:40:d8:3b:45:b9:50:b7:68:1e:4d:39:c5:
64:0d:f5:96:8f:a7:01:91:b7:55:32:f3:20:19:6d:69:da:c8:
07:fc:bf:14:12:c5:6b:a8:0b:01:32:d8:aa:4d:e5:0f:1c:97:
97:77:e8:4b:f9:d2:e6:e5:38:03:53:29:01:3c:09:ee:96:5c:
d8:6b:0c:c8:ad:7a:94:1b:59:e2:16:54:72:74:cd:68:fe:e9:
78:f2:46:cc:f1:39:20:85:f9:cc:b6:6a:07:34:3c:66:e1:bf:
d2:16:7e:e2:2c:d5:cd:3e:9c:5d:35:a4:3b:cd:69:71:2e:3c:
7d:4a:f8:e3:3d:97:fd:5c:1c:d5:b3:24:56:ae:80:a6:86:a0:
c5:eb:65:d6:69:fc:16:e8:62:19:cf:33:ae:a7:b4:fd:a4:0a:
5e:b5:0d:71:dd:05:f8:c6:78:4d:b4:20:b5:51:c8:34:2e:ee:
02:1e:f4:b8:5b:df:53:f2:08:ad:9e:ea:5e:80:0c:df:7b:ef:
7a:65:60:21:b0:e7:f2:a8:a3:d6:99:bc:01:a6:59:3b:24:e6:
5d:32:cb:ae:62:e2:c2:c8:62:c8:5a:c0:13:fd:a7:25:25:16:
94:9e:a5:62:c3:99:e9:a3:5c:47:a6:a6:75:b7:05:39:ca:eb:
d3:52:ec:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:30 2025 by rpki-client