Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32342d3234203d3e20323637303539.roa
File: 34352e3232382e3130382e302f32342d3234203d3e20323637303539.roa (raw, json)
Hash identifier: dFPnTn7CLlCjkGkg6wIb3EGeg++n3rxJR853BEXGxLo=
Subject key identifier: 40:7C:10:B3:9D:21:53:D1:47:43:3C:3D:EE:98:94:E3:9D:51:AC:17
Certificate issuer: /CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Certificate serial: 2329CCCCC193B4ABB59E36B6B4F0119361BBCAAE
Authority key identifier: 13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32342d3234203d3e20323637303539.roa
Signing time: Sat 26 Apr 2025 16:31:30 +0000
ROA not before: Sat 26 Apr 2025 16:26:30 +0000
ROA not after: Sat 25 Apr 2026 16:31:30 +0000
asID: 267059
IP address blocks: 45.228.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Apr 2025 17:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:29:cc:cc:c1:93:b4:ab:b5:9e:36:b6:b4:f0:11:93:61:bb:ca:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Validity
Not Before: Apr 26 16:26:30 2025 GMT
Not After : Apr 25 16:31:30 2026 GMT
Subject: CN=407C10B39D2153D147433C3DEE9894E39D51AC17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:a9:26:66:a8:6a:e1:ef:30:c8:35:4b:f5:
c1:66:91:28:42:24:ae:aa:5b:89:d8:52:2e:ff:4c:
f9:33:bc:43:4e:83:85:8b:b3:d0:b5:69:3a:26:01:
5c:81:76:46:5e:c5:db:1c:f8:ae:d6:bf:11:eb:38:
1d:a7:39:13:91:c1:99:44:b5:5e:6e:e5:12:a8:55:
03:2a:f8:64:19:86:a2:e2:88:00:94:53:ac:ee:93:
71:cb:23:43:b1:af:49:ba:74:cf:a9:ac:8d:8f:c4:
c2:51:1f:66:56:24:ef:62:28:13:99:fc:33:42:fb:
c0:e9:cd:df:f8:07:14:be:91:af:4c:30:7a:83:ef:
3d:7a:e9:75:70:a7:d6:bb:57:da:bd:34:10:b2:6c:
2b:7a:b7:44:84:36:8c:0b:08:c0:35:d6:49:81:63:
7c:4e:45:d2:1b:fa:e0:4c:be:6a:42:8d:b2:e5:88:
04:0d:2b:11:4c:07:96:11:7c:1c:77:c5:55:12:70:
2d:88:74:79:87:2f:d3:74:7b:ee:42:43:12:be:6d:
e7:88:10:ea:cb:b7:c1:7b:96:3e:68:69:71:82:f9:
ed:8a:a4:ce:59:30:80:f4:ae:0e:9a:91:c4:df:44:
42:ff:45:29:ce:0d:e6:a0:5b:8f:ab:ba:a8:81:e3:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7C:10:B3:9D:21:53:D1:47:43:3C:3D:EE:98:94:E3:9D:51:AC:17
X509v3 Authority Key Identifier:
keyid:13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32342d3234203d3e20323637303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.108.0/24
Signature Algorithm: sha256WithRSAEncryption
51:1e:49:04:0a:d1:95:d7:56:3c:bd:83:4b:bd:e3:ed:e3:0f:
1f:6e:a9:df:8d:f5:30:3d:7a:a8:58:f2:69:6b:77:e0:88:9f:
d2:b6:c7:f0:89:52:7e:b8:14:37:6a:cf:36:75:31:a1:3a:3e:
72:df:37:3d:e2:47:a1:15:75:18:df:c4:e8:8c:2b:95:4f:81:
46:c3:1e:16:b6:51:78:81:af:3b:3e:b7:10:e5:19:a7:c9:94:
05:a3:cc:f3:51:fa:36:9e:68:fa:46:7b:5a:ed:a1:c1:2e:5f:
cb:55:7a:f9:5e:79:dc:ae:41:87:80:ed:4e:e4:c8:67:22:37:
4e:90:0d:29:d2:e3:9e:29:96:b7:5d:44:b4:06:92:a4:ee:39:
b7:96:aa:02:e1:94:7a:07:ef:ef:88:93:25:f5:5f:25:ff:02:
ad:e7:00:b5:63:c3:d9:69:60:34:18:13:9c:a2:81:21:46:a0:
f1:e0:cd:b5:c5:c8:80:6d:66:e2:4f:82:02:9c:32:2e:9d:ec:
f4:0d:e9:d3:d6:01:37:ed:17:33:c4:9c:68:dc:8e:f0:42:81:
28:b7:06:7b:77:22:e0:34:69:13:20:e8:17:38:b7:24:e1:c8:
71:e6:40:4c:c4:8d:17:a9:16:32:3e:62:9e:f6:81:8f:fc:f2:
ea:1c:34:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:04:47 2025 by rpki-client