Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131312e302f32342d3234203d3e20323637303539.roa
File: 34352e3232382e3131312e302f32342d3234203d3e20323637303539.roa (raw, json)
Hash identifier: eLtOgIjOsK7zLyOfLbJiFDg7ecAbJr4L4JqzmZuMCRo=
Subject key identifier: A8:42:70:47:1A:C9:35:AA:DA:64:08:16:71:C9:11:09:9E:DB:36:FC
Certificate issuer: /CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Certificate serial: 09CB9C7EFC8622714316DF7C7AFDECF55A2CC252
Authority key identifier: 13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131312e302f32342d3234203d3e20323637303539.roa
Signing time: Sat 26 Apr 2025 16:31:41 +0000
ROA not before: Sat 26 Apr 2025 16:26:41 +0000
ROA not after: Sat 25 Apr 2026 16:31:41 +0000
asID: 267059
IP address blocks: 45.228.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Apr 2025 17:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:cb:9c:7e:fc:86:22:71:43:16:df:7c:7a:fd:ec:f5:5a:2c:c2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Validity
Not Before: Apr 26 16:26:41 2025 GMT
Not After : Apr 25 16:31:41 2026 GMT
Subject: CN=A84270471AC935AADA64081671C911099EDB36FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:09:c6:f6:1c:cd:2a:a4:1c:09:d8:cf:65:
ca:c8:ee:36:cf:6d:ca:f2:cf:a0:1d:66:95:5e:f3:
16:cf:fe:59:e7:ec:8d:14:27:90:dd:44:08:33:5b:
3d:83:b2:f2:14:3a:ed:8c:23:7e:0b:97:a8:45:84:
97:5b:b2:65:4d:53:00:ed:0d:6e:16:33:e8:09:f9:
da:7d:18:3c:5e:86:07:d2:1f:f0:ff:73:6b:87:68:
d1:7d:7e:5e:68:0e:8c:18:97:bc:f5:e3:41:8b:0d:
c4:6d:ff:31:f2:ce:6b:fb:8a:ae:fe:4f:4d:28:9b:
df:fc:59:9b:a6:b5:a0:87:6d:d8:60:ce:11:48:2e:
a0:23:8f:70:e8:6d:88:3c:0a:4f:3f:b3:0a:99:eb:
73:41:ad:2b:b9:7b:4e:6e:cc:d4:9f:a5:94:44:0e:
74:10:3a:02:6e:d8:d2:3c:0b:ee:cf:11:5a:7f:ff:
01:d7:c2:7a:20:59:42:4d:e6:ef:d2:3f:7e:32:3d:
0a:59:f2:fc:2c:f5:64:04:97:2e:ad:ff:75:4e:81:
f4:d1:74:ba:8d:49:57:d3:a1:a6:16:0b:3d:8d:e0:
7c:68:04:a9:47:0b:c6:5a:ed:bc:82:96:4e:88:3e:
02:09:14:97:e2:4b:d7:b7:0c:e2:3a:8f:5b:73:31:
23:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:42:70:47:1A:C9:35:AA:DA:64:08:16:71:C9:11:09:9E:DB:36:FC
X509v3 Authority Key Identifier:
keyid:13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131312e302f32342d3234203d3e20323637303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.111.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:36:0a:dd:bb:31:86:5e:69:d8:c6:9a:80:28:35:c3:b5:17:
72:a5:42:1e:23:da:d5:fa:f9:f0:eb:c1:bd:50:2f:21:0a:b5:
5e:05:9b:e3:c0:82:2d:8c:4f:25:1f:4a:64:00:74:07:17:57:
67:c6:01:9d:67:0a:b6:bf:b6:2a:89:7f:61:85:a8:49:bd:63:
f3:2b:82:88:27:9e:8c:3b:0b:9c:2e:f6:53:fd:c2:e5:fb:7b:
64:41:1e:68:9d:86:ff:d9:ee:7d:22:b2:60:bc:f4:73:dd:4b:
f6:3e:db:76:79:91:76:09:74:c3:7b:17:03:62:7b:70:83:5e:
50:4c:fb:95:10:64:1e:06:2c:91:4f:e4:40:b2:7e:c2:2c:a2:
7f:0e:b4:46:a1:26:8f:fa:2b:51:ce:8b:5a:0a:4a:e9:b1:6f:
03:17:4b:49:c0:56:ab:6c:ff:b0:63:73:04:6a:c3:ba:4f:7a:
09:05:89:e9:09:fa:2b:d0:89:57:7d:01:f6:b8:44:00:6c:77:
cf:a6:32:f3:2f:ee:81:55:f0:1f:55:7e:cc:e2:fa:ce:17:fe:
c1:da:10:b8:36:73:c8:cb:2c:9f:03:e3:13:16:df:b1:4d:08:
50:e5:c7:ed:7b:3b:8c:46:a9:65:4e:56:3c:43:f0:0c:42:a8:
73:2d:8a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:02:53 2025 by rpki-client