Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/34352e3233362e3133322e302f32322d3234203d3e203238333433.roa
File: 34352e3233362e3133322e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier: 2Kq9Sd5s3W64FAqD+nxnOnV0PAONDk/nzWeO5l6S6ec=
Subject key identifier: 01:90:67:8E:27:78:A5:6C:3C:75:35:63:35:54:97:AD:4D:02:0A:E7
Certificate issuer: /CN=0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80
Certificate serial: 6044F166B870F1CECF6FA7F9542A6D61433785EF
Authority key identifier: 0A:09:45:5F:3B:85:C8:20:AD:F8:A8:A5:B0:0E:6B:24:E5:2D:9D:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/34352e3233362e3133322e302f32322d3234203d3e203238333433.roa
Signing time: Thu 03 Apr 2025 20:59:09 +0000
ROA not before: Thu 03 Apr 2025 20:54:09 +0000
ROA not after: Thu 02 Apr 2026 20:59:09 +0000
asID: 28343
IP address blocks: 45.236.132.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 11:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:44:f1:66:b8:70:f1:ce:cf:6f:a7:f9:54:2a:6d:61:43:37:85:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80
Validity
Not Before: Apr 3 20:54:09 2025 GMT
Not After : Apr 2 20:59:09 2026 GMT
Subject: CN=0190678E2778A56C3C753563355497AD4D020AE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:b3:96:37:29:f8:4d:31:35:22:cd:1f:3e:
3b:84:d9:24:db:cb:a9:57:8e:87:a9:9b:9e:77:a8:
2d:52:91:94:74:58:8f:19:b3:8e:4f:99:0b:8a:c3:
9c:ab:85:2d:17:7a:26:0a:41:bf:1f:d6:98:4a:df:
b7:df:50:e3:80:17:60:15:48:82:74:4d:f4:ba:c3:
8e:f0:2e:14:61:35:0f:9d:ab:d2:77:82:87:ab:98:
74:6b:64:66:5c:28:0b:91:33:2d:6e:58:31:13:04:
16:c8:5b:2d:12:c3:95:6e:35:a2:e9:1b:86:6b:eb:
6f:4a:c6:fd:d5:b8:f9:41:72:fe:cc:c3:42:0a:91:
aa:3f:d8:e0:bf:c8:8c:83:b0:d0:7b:54:ae:8d:2f:
d3:52:7b:48:ca:d6:b6:b6:f0:96:f5:de:00:16:80:
bc:3d:a6:65:64:00:7d:a0:6d:46:d5:b6:55:25:d0:
fb:41:68:2c:c3:97:07:02:af:78:2c:a4:02:49:71:
4d:56:ba:32:b9:e5:eb:e2:b4:c8:f6:90:6c:4d:f5:
9f:e9:3a:bd:a1:e0:82:e6:b0:ef:75:18:26:39:9d:
80:b6:9d:62:03:94:f7:88:e6:40:fc:a5:50:f9:89:
d9:e5:37:86:40:1d:25:ff:16:0a:50:f9:5e:99:c8:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:90:67:8E:27:78:A5:6C:3C:75:35:63:35:54:97:AD:4D:02:0A:E7
X509v3 Authority Key Identifier:
keyid:0A:09:45:5F:3B:85:C8:20:AD:F8:A8:A5:B0:0E:6B:24:E5:2D:9D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/34352e3233362e3133322e302f32322d3234203d3e203238333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.132.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:d7:da:de:00:90:21:c7:17:d7:83:2c:eb:68:d4:3a:d9:15:
3a:84:5b:71:16:b4:dc:43:cb:52:3c:fd:84:7e:18:29:a3:84:
09:8e:0e:d8:99:97:00:d5:e8:c9:d0:9b:0b:48:86:c6:3a:e9:
90:d7:d8:2f:1f:ca:21:0c:c3:ad:b6:6a:ce:d1:22:f8:da:ab:
10:c2:3c:0f:99:e8:f2:72:73:58:98:0f:93:4f:40:7a:64:f8:
a6:f7:71:1b:de:18:b1:f7:c8:d3:6f:75:78:4d:9f:9c:8a:6a:
d7:65:f1:d5:ff:b0:43:14:fb:b5:7a:86:7d:ee:ab:a2:cc:60:
25:6d:92:e8:ed:a7:be:cd:66:c6:8a:7a:eb:6b:c2:16:36:46:
86:26:cb:10:23:26:0f:15:60:c3:9b:de:3b:f6:85:17:f3:09:
5b:4a:9c:0c:4b:00:8e:39:c7:38:5b:0e:f2:a7:0d:6f:b9:4d:
7a:93:b0:ca:16:4c:9b:39:b4:74:f8:38:df:87:32:7d:d5:ad:
ec:f1:e2:38:01:88:0e:60:d5:96:fa:cc:27:5b:5c:9d:dd:76:
41:35:48:2b:e4:82:73:e2:20:98:75:12:c5:d4:7c:60:93:86:
89:5b:24:ba:3c:e5:ea:85:7d:bc:29:0c:8c:b5:f3:db:20:d8:
0f:e0:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:07:52 2025 by rpki-client