Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32322d3232203d3e20323638383431.roa
File: 34352e3137342e302e302f32322d3232203d3e20323638383431.roa (raw, json)
Hash identifier: u2fLW3VTBMdWahmBRyIRtQI88tmyMvkcITNWlFnYZaY=
Subject key identifier: F8:34:79:2E:2E:7F:D9:67:C1:17:8C:C7:9B:7D:22:E3:5B:83:26:2D
Certificate issuer: /CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Certificate serial: 4CD2D15CE13C28B50015E2CA0D6BC3896508BCEE
Authority key identifier: 5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32322d3232203d3e20323638383431.roa
Signing time: Sat 25 Jan 2025 01:41:20 +0000
ROA not before: Sat 25 Jan 2025 01:36:20 +0000
ROA not after: Sat 24 Jan 2026 01:41:20 +0000
asID: 268841
IP address blocks: 45.174.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 25 Jan 2025 11:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d2:d1:5c:e1:3c:28:b5:00:15:e2:ca:0d:6b:c3:89:65:08:bc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Validity
Not Before: Jan 25 01:36:20 2025 GMT
Not After : Jan 24 01:41:20 2026 GMT
Subject: CN=F834792E2E7FD967C1178CC79B7D22E35B83262D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8a:1e:23:dc:d9:ee:d9:f6:fc:f8:a3:e3:fc:
2e:be:52:1c:73:24:aa:cb:b5:66:0f:cb:cb:0b:9f:
1e:8c:a7:4c:f0:fb:f5:6f:fa:11:e0:38:7b:e5:95:
a8:50:fd:2f:21:0b:ce:32:2b:7b:9e:2c:94:25:3d:
01:f8:cf:a3:15:0e:8d:3c:02:d3:eb:5e:05:5f:cd:
ae:d0:bf:fd:20:07:88:61:de:4c:af:7b:70:01:f5:
51:bc:3b:bf:ea:7e:d3:d1:78:43:22:2c:fd:f7:30:
9f:e9:fc:f1:90:1a:6d:f9:30:1e:ac:cf:7a:44:03:
af:b7:e1:90:62:1e:cf:63:40:70:ab:31:8e:86:a8:
99:4f:e3:5d:42:31:41:c4:08:8b:ac:b3:fc:11:50:
36:f7:6b:bc:94:11:3b:4d:b9:3f:cb:41:60:7b:8b:
94:ef:06:8f:06:03:bf:f1:e6:75:19:24:bb:7d:b9:
98:f6:08:6f:1a:1b:c1:5b:d2:ca:c1:59:c1:5f:0a:
64:7f:9a:f5:5e:40:44:bc:2d:75:eb:8f:22:96:3a:
a8:6d:23:b7:5d:38:42:f6:e8:d9:43:de:c3:75:d9:
cf:ab:8d:8e:1c:89:76:d0:fa:76:04:ec:f3:7b:23:
e9:42:63:36:d4:12:5c:7d:84:f2:f2:11:fe:04:d8:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:34:79:2E:2E:7F:D9:67:C1:17:8C:C7:9B:7D:22:E3:5B:83:26:2D
X509v3 Authority Key Identifier:
keyid:5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32322d3232203d3e20323638383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.0.0/22
Signature Algorithm: sha256WithRSAEncryption
30:48:dc:01:d2:4d:43:71:e5:d3:7f:b3:da:9b:9d:90:bc:02:
1a:ee:bb:37:75:c2:47:5e:c7:b2:23:03:55:74:e6:0e:59:32:
73:24:de:c8:a9:fe:b4:79:fd:e4:9c:28:1a:1a:95:75:5e:a1:
33:d9:d8:ec:7a:26:d1:5f:be:9b:6e:90:5b:8c:54:74:80:82:
12:97:a6:c2:dc:e3:83:39:69:31:f0:04:f8:cd:53:35:88:29:
fe:72:0f:6d:48:77:dc:e8:a7:75:90:cf:fd:c9:81:b1:e1:de:
00:e3:7f:e3:4a:9c:9b:c9:d0:64:d5:9c:1c:a7:ad:39:ad:d5:
9a:d8:8c:d6:7a:60:f8:21:86:05:9d:c4:9e:9e:d5:22:c5:98:
46:e2:fd:fb:54:90:b4:09:7b:b0:98:52:97:99:c7:3c:db:44:
f5:23:41:2f:db:4e:07:a6:02:1b:e7:56:00:45:67:cb:9f:df:
fd:45:6d:03:6e:48:37:35:0f:61:aa:16:b5:48:e8:aa:46:af:
46:2f:60:24:9d:37:1a:b7:c2:ba:91:51:4c:b6:0d:8b:88:ad:
f9:61:3f:70:a1:2a:c9:db:35:f9:1a:31:80:cd:e2:6f:7d:c1:
c2:48:96:28:e4:0e:65:3b:5e:50:23:6e:96:0a:ff:52:3b:8b:
8c:d7:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:29 2025 by rpki-client