Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/323830343a376463303a3a2f33322d3332203d3e20323731353830.roa
File: 323830343a376463303a3a2f33322d3332203d3e20323731353830.roa (raw, json)
Hash identifier: K2y9e6Jp7njtPjtbRFy91XL+F/2nCkdRXn3jPzh1CKU=
Subject key identifier: 03:2D:BC:25:10:DA:90:4E:0D:92:23:66:70:26:72:2A:47:C8:6F:AC
Certificate issuer: /CN=C1C298FB8C90994C283CD51157EDBA40378A4876
Certificate serial: 590D5F3C10B09144DB7D1ADA083F7EAAFCB639AD
Authority key identifier: C1:C2:98:FB:8C:90:99:4C:28:3C:D5:11:57:ED:BA:40:37:8A:48:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C298FB8C90994C283CD51157EDBA40378A4876.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/323830343a376463303a3a2f33322d3332203d3e20323731353830.roa
Signing time: Fri 20 Jun 2025 18:01:53 +0000
ROA not before: Fri 20 Jun 2025 17:56:53 +0000
ROA not after: Fri 19 Jun 2026 18:01:53 +0000
asID: 271580
IP address blocks: 2804:7dc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 20 Jun 2025 18:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0d:5f:3c:10:b0:91:44:db:7d:1a:da:08:3f:7e:aa:fc:b6:39:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C298FB8C90994C283CD51157EDBA40378A4876
Validity
Not Before: Jun 20 17:56:53 2025 GMT
Not After : Jun 19 18:01:53 2026 GMT
Subject: CN=032DBC2510DA904E0D9223667026722A47C86FAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0e:46:e3:ec:3c:ac:e0:c9:4c:58:60:43:72:
97:23:13:5f:d0:52:cc:4a:1f:26:3b:a9:37:92:b1:
16:76:49:12:d8:17:c9:0f:18:17:b8:f7:40:28:9a:
0c:9e:b0:8d:f6:c6:e8:92:ab:14:74:e9:db:a3:5e:
72:01:af:44:51:c8:b9:5d:35:09:02:5b:ee:b3:f5:
8c:0f:88:f1:45:80:cc:cf:93:ad:9a:b6:24:d5:73:
69:0c:ee:1a:25:2c:23:b1:87:92:5c:77:50:22:a3:
1c:fb:39:40:d9:b6:19:e5:02:87:dd:78:1b:93:8d:
53:e2:55:c1:26:04:d7:11:0e:a7:07:02:94:cc:61:
43:d9:f3:20:8c:96:d3:6a:ea:57:a4:73:56:c0:a7:
c9:e6:e4:3e:00:b1:ee:7d:89:20:6a:52:64:cb:72:
f7:c6:67:2f:ec:4b:3c:d1:e4:d0:42:53:49:40:23:
be:5f:98:b7:ee:73:69:7f:7a:e0:a8:84:af:a1:05:
92:13:bb:1f:8e:79:5f:6f:f4:d3:66:21:bd:04:42:
74:ae:86:7a:ba:e3:c0:29:14:55:5d:ac:11:54:1e:
78:09:fb:3d:07:5c:28:d8:a5:4b:22:8c:c0:3a:7e:
45:2a:34:cf:e9:31:fe:cc:4f:e6:e1:89:e9:33:fa:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2D:BC:25:10:DA:90:4E:0D:92:23:66:70:26:72:2A:47:C8:6F:AC
X509v3 Authority Key Identifier:
keyid:C1:C2:98:FB:8C:90:99:4C:28:3C:D5:11:57:ED:BA:40:37:8A:48:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/C1C298FB8C90994C283CD51157EDBA40378A4876.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C298FB8C90994C283CD51157EDBA40378A4876.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/323830343a376463303a3a2f33322d3332203d3e20323731353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7dc0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:32:4b:3e:a0:66:f5:ca:f9:22:a8:be:3e:bc:40:e2:a8:23:
0d:15:26:4b:12:46:d1:7e:9d:6f:d1:33:ff:a2:db:e9:1b:16:
67:31:05:7b:29:10:af:bb:16:b3:cf:dd:3f:fe:e1:86:3a:a1:
17:74:2a:85:9a:b9:0b:61:41:0b:13:87:9a:ce:dd:9a:5b:ec:
16:f0:0d:b8:c2:8e:8a:cc:ac:f0:ee:13:79:e8:f3:51:8d:0e:
ef:d3:25:b1:ec:59:24:46:b6:62:7d:6b:ee:b2:cb:4d:a1:64:
cf:66:5e:d3:c7:c9:30:b0:dc:94:92:e1:a7:31:47:d7:9d:3e:
72:77:08:2a:ea:c6:0c:92:4d:8c:de:53:eb:a0:82:9d:1e:6e:
66:cc:ba:67:99:c7:88:4c:d6:8a:65:90:81:4f:a4:12:95:e2:
1c:85:34:af:ba:1a:7f:98:3a:37:0e:32:39:2c:9e:ee:3e:01:
ee:d3:8e:e2:73:97:8d:69:b4:15:8c:bc:8f:85:eb:be:b1:97:
e9:c8:83:6b:4b:3e:de:a6:3f:a8:7d:02:00:4d:14:50:e6:dd:
ef:eb:4a:03:d4:92:4a:f1:86:30:4a:69:b7:a7:5b:ad:f8:73:
16:d4:5e:92:12:e8:b4:ae:7e:70:e0:55:f6:f8:64:5b:4c:fc:
2e:d3:50:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:19:47 2025 by rpki-client