Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3338303a3a2f34392d3439203d3e203533303139.roa
File: 323830343a3564633a3338303a3a2f34392d3439203d3e203533303139.roa (raw, json)
Hash identifier: 9hYHlGIr5ewMA4PACEUBauYKnqej4Pis92MsyDI0x+s=
Subject key identifier: 7A:E0:48:9F:EA:17:DF:92:26:B5:15:D3:50:E2:CF:EC:AB:E0:F5:0E
Certificate issuer: /CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
Certificate serial: 66A5D3514F2763A04AE5DD1C9036074C605139F7
Authority key identifier: E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3338303a3a2f34392d3439203d3e203533303139.roa
Signing time: Wed 15 Jan 2025 10:30:54 +0000
ROA not before: Wed 15 Jan 2025 10:25:54 +0000
ROA not after: Wed 14 Jan 2026 10:30:54 +0000
asID: 53019
IP address blocks: 2804:5dc:380::/49 maxlen: 49
Validation: Failed, certificate revoked on Wed 15 Jan 2025 16:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a5:d3:51:4f:27:63:a0:4a:e5:dd:1c:90:36:07:4c:60:51:39:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
Validity
Not Before: Jan 15 10:25:54 2025 GMT
Not After : Jan 14 10:30:54 2026 GMT
Subject: CN=7AE0489FEA17DF9226B515D350E2CFECABE0F50E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d8:20:59:4f:3e:d8:76:ab:14:b0:ec:e7:26:
07:70:fd:10:c9:15:59:5d:c6:02:7a:6e:50:55:0e:
06:ef:f2:7a:0f:c5:38:7c:54:57:70:4b:63:18:55:
2d:9c:54:7f:9c:d9:01:2b:98:28:46:8f:b8:60:cc:
fc:c7:a6:c9:0a:87:30:be:e2:5b:bb:42:40:a9:01:
f9:4c:7f:7e:4e:8f:93:f3:95:73:7b:cd:39:9b:aa:
21:54:64:6e:a0:89:2f:74:4d:8d:d4:09:42:1b:0c:
55:dc:65:bb:6c:cc:f5:bf:f1:e2:70:46:e3:f9:cd:
ef:11:19:53:5a:bc:d0:05:50:e0:16:da:25:cc:25:
23:9b:58:25:17:7d:a6:58:ac:bc:5d:72:4a:ca:4c:
84:f4:9f:3c:11:aa:5a:f0:b4:37:ff:10:97:ad:da:
70:70:a0:85:73:df:ae:d5:18:6e:5a:0b:a9:f3:a6:
37:27:0a:5f:38:54:d1:3e:bf:36:cb:6c:a3:10:8b:
e7:3a:6c:f2:d6:41:b6:4e:36:a9:08:a0:46:7f:46:
5a:0e:8e:f7:70:a9:16:44:09:2e:5a:89:13:4d:b5:
87:55:ca:4d:31:9a:6b:92:48:1f:3c:cc:d8:0a:4f:
56:b5:ab:a7:75:7b:e9:d8:2c:73:80:68:f6:63:8f:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E0:48:9F:EA:17:DF:92:26:B5:15:D3:50:E2:CF:EC:AB:E0:F5:0E
X509v3 Authority Key Identifier:
keyid:E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3338303a3a2f34392d3439203d3e203533303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5dc:380::/49
Signature Algorithm: sha256WithRSAEncryption
d9:7d:24:2e:6f:03:3e:e5:f4:49:f4:4f:ea:d8:be:8a:31:65:
95:82:b7:71:00:2e:9d:f7:a9:7b:9c:43:69:18:23:9e:32:b0:
dd:a4:ea:ca:bc:54:07:fa:46:95:c0:6e:0d:7f:9f:f1:10:5c:
17:bc:f9:ed:4c:c4:e6:4d:65:cf:44:4c:c0:56:14:27:41:e5:
d1:3f:69:fb:a9:dd:22:50:ad:f4:4d:5d:e6:5f:2f:b3:aa:f2:
b4:4a:ae:32:51:bd:c4:cb:14:f8:e2:f2:4d:bb:5e:82:a7:cd:
4a:ef:04:fd:53:f0:31:67:23:b0:35:32:15:c8:8f:0a:59:e8:
3b:b3:ef:0d:78:5e:82:d7:5b:88:48:1c:ca:ef:0a:bc:be:9e:
36:11:62:ca:9c:29:ce:7f:c7:08:c4:01:32:3b:21:4f:a6:ab:
26:5c:82:41:18:47:39:93:30:3d:e1:56:21:48:5e:c9:24:bf:
9b:98:35:53:39:35:65:64:48:57:38:5f:98:77:02:88:c1:b5:
16:23:9c:85:4e:cd:c1:5a:bd:e5:69:20:9b:83:1f:a1:7b:5c:
43:33:b1:d4:14:2d:48:57:30:e2:53:1e:65:98:3c:b4:a4:9f:
1e:63:c6:e2:5e:3b:01:3f:5a:44:1c:16:50:53:66:22:48:3d:
fe:40:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:33:56 2025 by rpki-client