Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a336330303a3a2f34302d3430203d3e20323635353030.roa
File: 323830343a333531383a336330303a3a2f34302d3430203d3e20323635353030.roa (raw, json)
Hash identifier: R/0XQXYG+zRtZFQpJX8JwxNPOBfZpFz06lfHpwfJ3ao=
Subject key identifier: 0D:6C:5A:50:18:F9:19:3D:96:BD:5F:92:09:CA:B4:BB:C0:61:DB:AB
Certificate issuer: /CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
Certificate serial: 04E63F29B5367F7010A4AE63693D1376D8F5E74F
Authority key identifier: 11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a336330303a3a2f34302d3430203d3e20323635353030.roa
Signing time: Wed 25 Jun 2025 22:55:24 +0000
ROA not before: Wed 25 Jun 2025 22:50:24 +0000
ROA not after: Wed 24 Jun 2026 22:55:24 +0000
asID: 265500
IP address blocks: 2804:3518:3c00::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 26 Jun 2025 11:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e6:3f:29:b5:36:7f:70:10:a4:ae:63:69:3d:13:76:d8:f5:e7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
Validity
Not Before: Jun 25 22:50:24 2025 GMT
Not After : Jun 24 22:55:24 2026 GMT
Subject: CN=0D6C5A5018F9193D96BD5F9209CAB4BBC061DBAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:70:cc:2e:b1:fd:29:90:cb:f3:1e:b7:b6:
a4:b5:b4:5d:44:31:bd:8a:a5:5b:74:5b:d5:07:72:
bd:0f:a4:a4:91:0d:b3:04:84:64:57:71:11:ec:33:
bb:f9:bd:dc:e0:53:71:85:66:6f:a8:4f:86:4b:a0:
01:2e:20:e9:d2:94:ec:63:19:5a:1a:0e:ae:cd:2c:
77:82:51:76:86:06:e3:3a:d9:18:e1:79:11:1b:5f:
db:52:47:ae:76:94:12:4c:19:68:05:e5:6f:db:ba:
45:5f:b8:7f:cc:23:59:6a:dc:38:cf:b0:35:ac:3d:
98:7c:ac:56:0b:70:3f:1c:21:4a:82:6c:a9:7a:3c:
4c:32:a6:83:45:5a:b4:0e:8a:49:48:f6:df:18:48:
f4:1e:a0:0d:b3:68:75:9b:4d:07:25:fd:5c:32:8e:
a7:cd:1a:15:b1:a8:bb:a2:b0:84:33:e7:7c:d6:5d:
53:3f:08:a4:33:1b:98:a0:f9:e8:09:7f:2d:61:e1:
f8:8a:77:b7:b8:d3:83:32:94:56:f0:3f:40:ad:c9:
d3:91:6c:60:c6:66:a3:fc:47:11:95:4c:40:cf:47:
ab:01:f4:0e:13:b6:96:58:32:de:ea:9c:91:82:67:
7b:5f:91:c3:14:c8:e8:eb:93:7a:0a:53:38:31:82:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6C:5A:50:18:F9:19:3D:96:BD:5F:92:09:CA:B4:BB:C0:61:DB:AB
X509v3 Authority Key Identifier:
keyid:11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a336330303a3a2f34302d3430203d3e20323635353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3518:3c00::/40
Signature Algorithm: sha256WithRSAEncryption
84:78:b7:4c:a3:fc:2e:4d:85:d3:8d:4f:40:a7:7d:dd:c8:54:
35:23:60:4b:70:cc:ed:c3:f4:42:b2:5a:e5:2a:e8:df:ff:79:
93:46:69:83:78:dd:55:eb:11:f3:4d:54:b5:fb:a2:d5:76:21:
59:d7:d0:1b:c6:42:61:ec:a8:70:dd:1c:14:52:25:ae:fb:7b:
bc:d9:64:77:93:ec:cc:45:29:07:11:a8:74:6c:64:a3:8d:99:
8d:7c:0e:47:14:cc:d9:3f:92:ff:fd:f2:83:e7:d6:ee:df:a2:
fa:b5:f9:7e:ce:35:a3:4b:b2:74:3a:33:2a:f8:ac:91:22:36:
e7:f3:30:7b:8c:ad:62:f2:17:88:c4:bc:b4:96:12:db:3e:98:
dc:f2:14:9f:05:91:71:eb:61:9f:ba:58:e0:29:ab:9c:53:6f:
9d:c7:29:7a:6c:1e:27:44:82:00:ac:d9:af:2f:0e:44:ba:ec:
ea:21:3b:74:ce:02:fe:45:85:5b:0a:ec:ec:6e:53:b9:4f:ee:
62:5b:70:70:0a:b4:8f:16:3e:5d:ae:5c:a0:e7:de:9f:bb:ec:
2b:b7:c7:4b:39:b9:17:eb:a2:d2:c4:27:17:c2:07:9b:5e:fa:
c2:36:ea:74:5b:77:8e:57:bd:dc:fc:83:67:5a:f8:4f:2d:3e:
a3:d5:bb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:46:33 2025 by rpki-client