Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/34352e36352e3139362e302f32322d3234203d3e203238333433.roa
File: 34352e36352e3139362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier: fgFqgHYuAI4bR9zb6dCctW2GQ3lEgS0uDjtIrtUI0CM=
Subject key identifier: F0:3B:15:D1:57:26:76:E6:00:78:94:6C:76:53:82:4E:96:7A:DB:A9
Certificate issuer: /CN=0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80
Certificate serial: 69A2B280174D14CA7A75A72187F38519B78EA3FC
Authority key identifier: 0A:09:45:5F:3B:85:C8:20:AD:F8:A8:A5:B0:0E:6B:24:E5:2D:9D:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/34352e36352e3139362e302f32322d3234203d3e203238333433.roa
Signing time: Thu 03 Apr 2025 20:46:44 +0000
ROA not before: Thu 03 Apr 2025 20:41:44 +0000
ROA not after: Thu 02 Apr 2026 20:46:44 +0000
asID: 28343
IP address blocks: 45.65.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 11:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a2:b2:80:17:4d:14:ca:7a:75:a7:21:87:f3:85:19:b7:8e:a3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80
Validity
Not Before: Apr 3 20:41:44 2025 GMT
Not After : Apr 2 20:46:44 2026 GMT
Subject: CN=F03B15D1572676E60078946C7653824E967ADBA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:d3:8f:3f:97:cd:da:91:d4:ab:5f:9e:69:
76:b8:f2:d4:c2:6f:27:fb:c7:3e:08:02:32:72:47:
49:36:46:7a:4a:3b:47:d9:51:2a:3c:b1:cb:ee:4a:
53:06:a4:ca:aa:ce:61:ba:48:e2:65:32:a8:06:91:
f8:f7:15:24:1f:48:5f:ac:87:e7:71:02:ff:3a:58:
ff:44:03:87:85:47:5b:5b:cd:66:4a:1f:63:9c:1e:
c6:89:53:87:35:56:01:61:65:8e:84:63:3b:7b:5a:
36:63:be:43:47:79:5f:62:f5:30:37:8f:e4:3a:39:
58:51:13:5e:ab:36:87:b0:f7:14:14:16:be:02:1b:
ba:cc:aa:f1:12:c0:32:25:60:4c:3e:4e:e5:e0:19:
80:91:cc:be:73:31:51:47:d3:40:bc:81:86:33:21:
33:87:d0:58:78:37:87:ad:9f:13:03:b7:35:be:a3:
c7:e0:13:f5:3f:77:82:cf:2a:56:26:44:09:c8:4f:
a7:da:b0:da:24:6b:99:46:8f:12:9b:1f:7b:44:3a:
0e:9e:cc:85:8f:a8:be:4d:c2:f4:b1:ba:5a:0f:10:
19:e5:0f:91:0b:03:04:4e:17:13:6b:ec:28:ce:29:
7b:58:13:c7:91:58:29:f7:ad:82:b4:8e:62:e8:ea:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3B:15:D1:57:26:76:E6:00:78:94:6C:76:53:82:4E:96:7A:DB:A9
X509v3 Authority Key Identifier:
keyid:0A:09:45:5F:3B:85:C8:20:AD:F8:A8:A5:B0:0E:6B:24:E5:2D:9D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/34352e36352e3139362e302f32322d3234203d3e203238333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.196.0/22
Signature Algorithm: sha256WithRSAEncryption
19:02:26:1e:f4:7b:0f:2b:b3:7b:f1:9d:ce:ea:89:36:ec:c6:
8f:20:3d:f4:c6:03:14:2b:b1:0e:35:3b:07:ec:f4:f7:ce:ed:
be:3f:cb:0f:91:1b:0f:4b:85:91:81:c8:b4:ff:45:89:e6:16:
69:d3:06:e6:5f:fb:33:8a:59:1f:62:ed:39:49:6f:ac:aa:0f:
b2:31:b7:db:87:a0:43:c3:a1:2f:3d:7a:70:1c:d4:b7:55:a1:
ac:d4:c6:cc:ca:a8:7d:ba:41:e9:9e:07:64:56:e9:02:03:bc:
98:c6:1e:7c:8a:f9:62:25:68:61:44:aa:e3:34:33:b3:82:37:
20:6d:a6:d9:bf:93:43:6d:0b:ba:8b:18:58:3e:bc:4e:01:5a:
9a:ab:99:bf:97:6b:01:20:34:6b:4d:a8:44:31:69:bb:34:d7:
25:69:4d:f7:bb:ae:76:c7:55:b3:03:50:2d:17:d3:3d:ef:53:
33:c7:7e:f8:97:11:bf:0f:86:d7:80:48:0a:2f:c7:db:04:71:
76:55:ab:1b:9c:8f:30:d9:f0:2e:77:4c:10:fa:53:a5:a9:f0:
05:72:5a:98:96:18:77:7b:4c:f6:3d:cb:70:b8:d7:65:7c:48:
ec:26:0a:9b:5d:13:8c:41:c3:c9:34:cc:c6:fe:c5:83:29:61:
e0:1b:36:6b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaaKygBdNFMp6dachh/OFGbeOo/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEwOTQ1NUYzQjg1QzgyMEFERjhBOEE1QjAwRTZCMjRF
NTJEOUQ4MDAeFw0yNTA0MDMyMDQxNDRaFw0yNjA0MDIyMDQ2NDRaMDMxMTAvBgNV
BAMTKEYwM0IxNUQxNTcyNjc2RTYwMDc4OTQ2Qzc2NTM4MjRFOTY3QURCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmKdOPP5fN2pHUq1+eaXa48tTC
byf7xz4IAjJyR0k2RnpKO0fZUSo8scvuSlMGpMqqzmG6SOJlMqgGkfj3FSQfSF+s
h+dxAv86WP9EA4eFR1tbzWZKH2OcHsaJU4c1VgFhZY6EYzt7WjZjvkNHeV9i9TA3
j+Q6OVhRE16rNoew9xQUFr4CG7rMqvESwDIlYEw+TuXgGYCRzL5zMVFH00C8gYYz
ITOH0Fh4N4etnxMDtzW+o8fgE/U/d4LPKlYmRAnIT6fasNoka5lGjxKbH3tEOg6e
zIWPqL5NwvSxuloPEBnlD5ELAwROFxNr7CjOKXtYE8eRWCn3rYK0jmLo6nQ3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU8DsV0VcmduYAeJRsdlOCTpZ626kwHwYDVR0j
BBgwFoAUCglFXzuFyCCt+KilsA5rJOUtnYAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWlyZEwzOFJ1ZDlGZTQzbnJ3Q1RoNkxQZ1JlcmFWc3pIUzZ2MUp5SDZZ
U3cvMC8wQTA5NDU1RjNCODVDODIwQURGOEE4QTVCMDBFNkIyNEU1MkQ5RDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMDk0NTVGM0I4NUM4MjBB
REY4QThBNUIwMEU2QjI0RTUyRDlEODAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlpcmRMMzhSdWQ5RmU0M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAv
MzQzNTJlMzYzNTJlMzEzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMz
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi1BxDANBgkqhkiG9w0BAQsFAAOCAQEAGQImHvR7Dyuz
e/GdzuqJNuzGjyA99MYDFCuxDjU7B+z0987tvj/LD5EbD0uFkYHItP9FieYWadMG
5l/7M4pZH2LtOUlvrKoPsjG324egQ8OhLz16cBzUt1WhrNTGzMqofbpB6Z4HZFbp
AgO8mMYefIr5YiVoYUSq4zQzs4I3IG2m2b+TQ20LuosYWD68TgFamquZv5drASA0
a02oRDFpuzTXJWlN97uudsdVswNQLRfTPe9TM8d++JcRvw+G14BICi/H2wRxdlWr
G5yPMNnwLndMEPpTpanwBXJamJYYd3tM9j3LcLjXZXxI7CYKm10TjEHDyTTMxv7F
gylh4Bs2aw==
-----END CERTIFICATE-----
Generated at Thu May 1 12:12:15 2025 by rpki-client