Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32322d3232203d3e20323637303539.roa
File: 34352e3232382e3130382e302f32322d3232203d3e20323637303539.roa (raw, json)
Hash identifier: FeH7AA21tbU+OKP1RAgE+PxZ2Z1xhxNz2jayAg+Pms8=
Subject key identifier: E0:C7:F8:0A:D0:96:2F:8C:3E:23:B5:B4:08:71:A6:B9:B8:4A:1F:12
Certificate issuer: /CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Certificate serial: 0BEA54B72B94E4C0886B3131BAB8F27257DD8FA5
Authority key identifier: 13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32322d3232203d3e20323637303539.roa
Signing time: Sun 27 Apr 2025 21:14:27 +0000
ROA not before: Sun 27 Apr 2025 21:09:27 +0000
ROA not after: Sun 26 Apr 2026 21:14:27 +0000
asID: 267059
IP address blocks: 45.228.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 28 Apr 2025 17:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ea:54:b7:2b:94:e4:c0:88:6b:31:31:ba:b8:f2:72:57:dd:8f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Validity
Not Before: Apr 27 21:09:27 2025 GMT
Not After : Apr 26 21:14:27 2026 GMT
Subject: CN=E0C7F80AD0962F8C3E23B5B40871A6B9B84A1F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:21:23:49:91:bb:31:6b:82:aa:25:ae:5c:ae:
bc:6a:d3:38:7d:17:88:1e:16:ef:3e:51:5b:fa:e1:
3f:39:a7:54:fa:01:21:18:b5:6a:7d:e3:39:dd:e0:
51:b5:a7:a4:66:d0:4e:47:26:9e:68:46:cd:02:62:
88:3b:eb:43:27:f8:7e:b5:3e:e3:a4:15:68:8f:18:
8d:ba:41:49:32:97:2c:8b:91:5e:ea:ea:cf:ad:8a:
2c:8d:1a:19:8d:01:b6:20:c7:e2:0d:b7:25:4f:98:
c1:1f:c0:7e:b2:23:9b:aa:86:a1:79:c6:53:f9:a5:
e9:63:97:13:cb:ec:52:81:a1:df:17:26:ba:ae:1d:
2b:b5:e4:af:34:e1:4b:7c:d0:9f:62:d0:4d:9f:47:
c0:d1:8f:d9:f0:7a:4d:de:0f:74:a4:1c:6f:45:c9:
79:1a:9f:ed:91:31:e4:22:65:13:22:cd:bc:c5:78:
3b:81:9e:e7:a1:b9:80:38:fd:18:9e:15:3f:15:69:
a6:90:ca:39:06:ba:c7:a5:56:c6:8d:13:f9:84:22:
37:a3:a2:da:c7:a7:7e:27:5e:f5:4d:0b:a2:86:83:
9c:26:b8:dc:3c:74:b8:39:8b:e7:75:a4:76:c7:db:
a2:73:95:d9:63:1b:7a:d0:dc:44:42:e3:da:ff:c3:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C7:F8:0A:D0:96:2F:8C:3E:23:B5:B4:08:71:A6:B9:B8:4A:1F:12
X509v3 Authority Key Identifier:
keyid:13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32322d3232203d3e20323637303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.108.0/22
Signature Algorithm: sha256WithRSAEncryption
28:86:e5:49:1b:4e:ca:19:0a:e5:9c:42:ba:d4:d5:cb:73:58:
a7:62:c4:e0:c4:52:af:0d:2b:59:f3:93:35:27:ac:25:0c:22:
07:7e:ca:26:d8:a4:96:25:3b:e8:54:1c:3e:ff:5c:e1:3c:9d:
59:db:d8:eb:71:98:e4:4d:b1:55:6d:34:9b:d0:fb:53:28:b3:
ed:a6:d7:ef:16:78:51:ee:4c:a9:6e:0f:3f:cb:09:e8:11:22:
b6:09:f6:5c:93:3b:d0:ad:95:6b:ad:76:c9:6e:2e:f2:35:69:
99:b0:fd:94:aa:04:76:4f:e3:c3:67:cf:89:eb:43:4b:fc:ed:
1f:cc:7c:64:16:b1:c2:27:68:3d:06:46:13:b4:13:02:24:44:
a7:dd:19:28:b5:db:9d:b1:d3:c8:90:15:f7:21:1b:73:21:56:
24:fa:0a:f7:76:ab:14:64:88:97:67:38:c2:c3:b9:19:70:a7:
e2:f7:82:6e:92:5f:bc:02:1b:6f:48:cb:5e:7d:e9:7e:5e:99:
c8:83:a8:81:d9:47:eb:6a:7d:d7:ba:22:af:c0:91:4f:f7:07:
18:01:87:a5:4e:fd:a1:dd:2e:4d:58:bc:04:d7:ce:fa:16:fd:
e6:e6:6a:88:d2:c3:12:86:43:4f:36:e6:22:4c:e8:42:3c:17:
bb:08:b2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:03:14 2025 by rpki-client