Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3233312e302f32342d3234203d3e20323637313335.roa
File: 34352e3232392e3233312e302f32342d3234203d3e20323637313335.roa (raw, json)
Hash identifier: OmYJ70om8SKqGU0hEvEbo2HmQ1WA0nSQ+Kn1HJkzmX4=
Subject key identifier: 07:21:DC:87:FC:50:69:25:51:74:88:C6:75:E1:07:64:58:CA:D4:2A
Certificate issuer: /CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
Certificate serial: 3B6FD8DA3A640E6656BC3CB94BBE49B29B98C7A4
Authority key identifier: 8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3233312e302f32342d3234203d3e20323637313335.roa
Signing time: Mon 20 Jan 2025 13:29:09 +0000
ROA not before: Mon 20 Jan 2025 13:24:09 +0000
ROA not after: Mon 19 Jan 2026 13:29:09 +0000
asID: 267135
IP address blocks: 45.229.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 12:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6f:d8:da:3a:64:0e:66:56:bc:3c:b9:4b:be:49:b2:9b:98:c7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
Validity
Not Before: Jan 20 13:24:09 2025 GMT
Not After : Jan 19 13:29:09 2026 GMT
Subject: CN=0721DC87FC506925517488C675E1076458CAD42A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:81:b4:b4:cd:3a:71:96:c6:13:7d:16:de:
6e:04:80:cd:dc:90:1c:e4:a7:70:e4:39:06:2f:84:
41:76:69:85:cd:80:3b:b9:cf:dc:06:5c:77:8f:e3:
c3:cd:b6:60:9a:fa:5b:f1:f3:4c:e5:49:fc:dc:40:
cc:e0:82:97:8a:c6:30:df:1d:41:e1:88:98:b4:fe:
2e:49:c6:f5:5d:e3:69:cd:a8:8b:a2:ae:33:25:ce:
16:3a:7b:07:e4:c0:24:56:36:fb:65:d2:0f:28:79:
aa:28:6c:fe:cd:ed:52:db:e4:b9:5d:d9:41:6a:b0:
e5:c7:d5:4f:63:aa:54:d1:8b:84:29:f9:18:34:5c:
38:29:77:7f:07:90:3e:aa:bf:40:60:70:43:76:16:
a1:fa:43:e2:4e:7a:76:57:b8:38:cb:97:0d:20:01:
76:2c:49:1c:f7:41:ea:39:f0:3c:dd:b9:24:b2:54:
f2:39:62:bc:58:4a:b2:34:f0:99:a5:8a:7b:ef:f7:
0e:19:36:6e:0f:2b:39:b1:44:5b:e8:ca:a4:f1:81:
ac:9b:7d:9b:d2:09:bc:a2:b2:37:05:5e:c4:be:aa:
1a:1a:03:fb:f2:48:93:c1:ef:e1:8d:c2:44:75:9e:
ae:25:cb:aa:ad:8a:f5:ae:68:ff:41:90:b5:f0:e9:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:DC:87:FC:50:69:25:51:74:88:C6:75:E1:07:64:58:CA:D4:2A
X509v3 Authority Key Identifier:
keyid:8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3233312e302f32342d3234203d3e20323637313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.231.0/24
Signature Algorithm: sha256WithRSAEncryption
08:82:7d:6e:6c:1c:69:ef:67:51:cf:ce:6b:ec:13:0f:ee:d3:
e4:f4:2d:90:97:a4:ab:6b:5b:22:6c:df:6b:d8:ba:0f:8a:c0:
7c:6b:9f:a9:65:a2:e5:61:50:fb:b3:c8:07:2f:0f:e6:bd:ef:
6c:f4:b6:38:5d:da:4d:02:cf:40:bb:b2:05:84:d3:4f:94:8a:
3f:ac:32:a6:78:d0:53:ce:19:64:ce:bc:99:1a:12:5e:3f:ec:
b3:ee:f8:e0:87:a2:50:4d:79:5d:a8:f4:3b:09:5d:80:a3:c5:
cc:8f:a9:86:92:24:6d:c6:cc:d2:ed:5c:ef:f0:e7:ba:dd:09:
f0:5e:8a:b8:94:fc:64:d7:c3:2d:cf:c1:80:26:d9:d3:dc:9f:
cc:42:a3:e2:c5:eb:2d:2b:ff:73:ea:07:fe:19:20:f6:89:e6:
24:a4:34:69:f3:97:af:a0:8b:27:f5:53:f4:2c:c9:d1:e7:10:
46:c1:fe:41:01:2f:fc:34:f4:4e:59:66:6b:6c:2c:cb:81:89:
29:83:ec:5d:b7:31:5f:e3:19:59:36:56:62:f7:cb:d4:ec:d3:
09:de:4c:44:92:65:63:8d:d2:a4:93:8d:15:dd:dc:59:bd:80:
81:e4:1f:ce:8a:0b:3f:9e:0a:c3:cc:a1:69:83:55:3d:73:50:
be:c7:4f:54
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUO2/Y2jpkDmZWvDy5S75JspuYx6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCQjc5MDg3QUNBMjdBMjE5ODVGNkYwNUI5MTAzRDQ0
NkJCNjVGNDAeFw0yNTAxMjAxMzI0MDlaFw0yNjAxMTkxMzI5MDlaMDMxMTAvBgNV
BAMTKDA3MjFEQzg3RkM1MDY5MjU1MTc0ODhDNjc1RTEwNzY0NThDQUQ0MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGIG0tM06cZbGE30W3m4EgM3c
kBzkp3DkOQYvhEF2aYXNgDu5z9wGXHeP48PNtmCa+lvx80zlSfzcQMzggpeKxjDf
HUHhiJi0/i5JxvVd42nNqIuirjMlzhY6ewfkwCRWNvtl0g8oeaoobP7N7VLb5Lld
2UFqsOXH1U9jqlTRi4Qp+Rg0XDgpd38HkD6qv0BgcEN2FqH6Q+JOenZXuDjLlw0g
AXYsSRz3Qeo58DzduSSyVPI5YrxYSrI08Jmlinvv9w4ZNm4PKzmxRFvoyqTxgayb
fZvSCbyisjcFXsS+qhoaA/vySJPB7+GNwkR1nq4ly6qtivWuaP9BkLXw6fAvAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUByHch/xQaSVRdIjGdeEHZFjK1CowHwYDVR0j
BBgwFoAUirt5CHrKJ6IZhfbwW5ED1Ea7ZfQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZUmtFUE1wa1BQTEZLaHhNZHhRUnFRNmd3UlVSV1lpYWRWQUt3NndOdENE
LzAvOEFCQjc5MDg3QUNBMjdBMjE5ODVGNkYwNUI5MTAzRDQ0NkJCNjVGNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84QUJCNzkwODdBQ0EyN0EyMTk4
NUY2RjA1QjkxMDNENDQ2QkI2NUY0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
UmtFUE1wa1BQTEZLaHhNZHhRUnFRNmd3UlVSV1lpYWRWQUt3NndOdENELzAvMzQz
NTJlMzIzMjM5MmUzMjMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzcz
MTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAt5ecwDQYJKoZIhvcNAQELBQADggEBAAiCfW5sHGnv
Z1HPzmvsEw/u0+T0LZCXpKtrWyJs32vYug+KwHxrn6llouVhUPuzyAcvD+a972z0
tjhd2k0Cz0C7sgWE00+Uij+sMqZ40FPOGWTOvJkaEl4/7LPu+OCHolBNeV2o9DsJ
XYCjxcyPqYaSJG3GzNLtXO/w57rdCfBeiriU/GTXwy3PwYAm2dPcn8xCo+LF6y0r
/3PqB/4ZIPaJ5iSkNGnzl6+giyf1U/QsydHnEEbB/kEBL/w09E5ZZmtsLMuBiSmD
7F23MV/jGVk2VmL3y9Ts0wneTESSZWON0qSTjRXd3Fm9gIHkH86KCz+eCsPMoWmD
VT1zUL7HT1Q=
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:39:16 2025 by rpki-client