Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/323830343a3437633a3a2f33322d3332203d3e20323632343337.roa
File: 323830343a3437633a3a2f33322d3332203d3e20323632343337.roa (raw, json)
Hash identifier: Sni8R4aSMuS+3uQDmGyBKAR7vSxPJqg3JBB6aQTlRBE=
Subject key identifier: 8D:02:1F:58:46:DC:62:8A:AC:C0:49:C2:96:4E:4E:89:C4:AC:A5:F1
Certificate issuer: /CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Certificate serial: 3B6FCA89FB4115523DE2378F9367E9F6E1784D86
Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/323830343a3437633a3a2f33322d3332203d3e20323632343337.roa
Signing time: Wed 24 Apr 2024 13:03:13 +0000
ROA not before: Wed 24 Apr 2024 12:58:13 +0000
ROA not after: Wed 23 Apr 2025 13:03:13 +0000
asID: 262437
IP address blocks: 2804:47c::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 22 May 2024 11:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6f:ca:89:fb:41:15:52:3d:e2:37:8f:93:67:e9:f6:e1:78:4d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Validity
Not Before: Apr 24 12:58:13 2024 GMT
Not After : Apr 23 13:03:13 2025 GMT
Subject: CN=8D021F5846DC628AACC049C2964E4E89C4ACA5F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:4b:31:35:c3:fa:87:18:77:94:51:41:35:
90:93:9c:3d:c7:fa:f9:86:f6:d0:02:86:7f:ab:ca:
5f:46:5e:62:c1:4f:ea:64:81:82:4a:3f:a6:70:a1:
fd:0f:fe:3e:d8:7d:9c:54:1e:db:d5:5a:3d:ac:e7:
2f:a2:de:a2:3a:80:f6:5b:42:7a:97:b8:d9:e1:93:
6a:93:d6:c1:7e:dd:d9:01:3e:3e:57:dd:3f:8d:3b:
bf:aa:81:64:a1:6e:10:1a:10:d2:74:a5:10:8e:a3:
b3:7d:b4:c1:94:97:4e:83:46:93:8f:24:b7:ce:3e:
f3:08:c0:0c:b1:25:67:3e:a6:b1:de:27:92:30:a4:
82:a3:8e:b6:01:08:4e:f7:fc:da:5f:18:31:e5:4a:
86:c2:53:2e:bd:30:0a:9d:b2:83:38:af:ac:08:5a:
97:4e:05:88:5d:1a:42:90:a9:7e:a3:32:5a:3a:a0:
47:b8:9f:9b:0a:5c:ca:31:16:ca:fd:51:7d:f4:6b:
43:4e:a6:b6:05:d1:58:17:f7:9d:a9:4e:5e:52:79:
29:2c:20:b9:91:02:3e:5b:6a:f1:d4:d1:b5:5e:ca:
fd:18:73:bb:3a:2e:2c:25:4c:b9:f2:d0:6e:57:93:
6a:a3:eb:5f:10:ab:fc:e4:55:05:87:73:16:0b:cb:
66:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:1F:58:46:DC:62:8A:AC:C0:49:C2:96:4E:4E:89:C4:AC:A5:F1
X509v3 Authority Key Identifier:
keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/323830343a3437633a3a2f33322d3332203d3e20323632343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:47c::/32
Signature Algorithm: sha256WithRSAEncryption
41:8f:82:d5:68:e8:a7:ea:41:1e:f5:c1:a8:81:7f:f5:65:34:
50:50:ed:d1:ec:db:6b:27:49:2c:16:ac:54:a5:00:5f:4d:e6:
13:82:45:fe:be:58:0c:b4:d4:e0:cf:19:53:38:5f:e3:63:1c:
4f:db:19:8b:5c:66:24:0e:bd:08:c1:30:ac:cc:06:34:fb:2f:
43:ee:7c:10:1c:a6:a3:35:d1:51:fa:77:3b:23:94:62:de:1a:
ec:10:33:a9:32:26:82:62:21:f4:d0:51:2d:d5:31:b2:b2:e1:
ff:c7:25:05:37:c6:8d:df:46:6f:35:47:41:f2:fa:83:31:4a:
76:de:e1:d3:09:7c:fe:48:fd:b2:78:8a:a5:1e:b5:96:df:08:
ea:ba:b0:ea:f8:51:b4:9e:e9:d8:99:a6:84:4c:c6:45:76:11:
d2:ea:e7:ce:71:41:40:78:02:b7:a0:48:19:17:e8:69:5d:e8:
0d:27:89:07:be:f5:54:58:a5:67:39:1a:e9:3c:79:77:e2:d9:
a7:42:76:98:08:97:f5:3f:64:85:0b:cd:ea:e5:c7:8f:8a:25:
bd:71:49:9a:53:0f:b6:42:17:02:1d:8a:37:05:70:89:2e:9d:
39:85:1f:55:c8:ca:cd:f6:04:6f:49:98:4f:04:46:f8:e2:6f:
aa:fb:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 15:21:14 2024 by rpki-client on console-ams.rpki-client.org