Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a38303a3a2f34312d3431203d3e203533303139.roa
File: 323830343a3564633a38303a3a2f34312d3431203d3e203533303139.roa (raw, json)
Hash identifier: ujEj0frSp84/cwBlaBoZ5Ttjbt1UIDRbWmN5WGT839M=
Subject key identifier: D5:BA:7C:AB:99:F7:B2:28:C9:68:D2:7A:30:51:A5:D9:3B:77:94:34
Certificate issuer: /CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
Certificate serial: 1D53175323DED2CF5C790962C9A18D69D1084656
Authority key identifier: E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a38303a3a2f34312d3431203d3e203533303139.roa
Signing time: Wed 15 Jan 2025 10:28:21 +0000
ROA not before: Wed 15 Jan 2025 10:23:21 +0000
ROA not after: Wed 14 Jan 2026 10:28:21 +0000
asID: 53019
IP address blocks: 2804:5dc:80::/41 maxlen: 41
Validation: Failed, certificate revoked on Wed 15 Jan 2025 16:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:53:17:53:23:de:d2:cf:5c:79:09:62:c9:a1:8d:69:d1:08:46:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
Validity
Not Before: Jan 15 10:23:21 2025 GMT
Not After : Jan 14 10:28:21 2026 GMT
Subject: CN=D5BA7CAB99F7B228C968D27A3051A5D93B779434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:a5:cf:3b:a5:39:ee:2f:83:c1:80:fc:f2:
45:98:c9:ab:bc:5a:b8:90:d8:53:50:12:f8:07:1d:
19:f4:92:d2:32:81:0c:28:37:35:24:e5:d9:ac:0a:
14:8b:67:1c:eb:48:75:48:5f:b2:e9:d5:83:ea:c3:
2b:6f:1f:67:55:d8:08:c6:24:14:6a:dc:51:f6:02:
b0:f8:9a:6c:11:a8:08:e1:5f:e8:a1:03:10:28:c6:
3e:7b:1c:72:5b:0a:de:c2:7b:e1:64:eb:0f:5a:50:
ef:a8:c4:0a:8c:c0:0e:a8:6a:00:5c:39:ee:2c:c9:
24:86:83:14:bc:89:60:eb:d0:cc:24:51:4f:92:f3:
11:cb:28:8c:ed:e1:07:af:38:e4:f8:72:e0:e2:c3:
fb:88:2d:4f:6f:99:57:96:d3:da:27:73:40:20:3e:
d9:f0:c7:a0:32:0d:05:ee:6e:cf:59:7c:12:42:b5:
76:71:a8:a2:15:bd:78:9e:60:dd:8c:a7:22:ad:98:
49:e7:09:90:c9:f2:b3:1d:de:f3:78:e8:ed:fb:83:
88:aa:31:55:0b:d7:58:58:b8:d3:1a:65:37:b9:4c:
70:73:22:5f:b5:f6:6b:3e:cf:84:2d:93:03:cd:95:
62:83:e1:6a:44:5d:f7:a9:08:fd:58:56:62:35:c5:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BA:7C:AB:99:F7:B2:28:C9:68:D2:7A:30:51:A5:D9:3B:77:94:34
X509v3 Authority Key Identifier:
keyid:E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a38303a3a2f34312d3431203d3e203533303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5dc:80::/41
Signature Algorithm: sha256WithRSAEncryption
c3:da:1a:8c:b3:20:7c:b0:58:62:5e:ef:04:f8:41:64:c1:2c:
b9:05:8e:2b:5a:aa:04:e7:1c:61:48:65:8e:88:0a:bc:b1:78:
38:1b:52:40:f0:82:94:0d:10:63:5d:49:19:07:e8:b0:d1:d3:
8e:ef:01:40:54:42:b6:bc:16:bf:ce:a8:ea:e1:56:09:9c:5a:
0c:e5:d2:e5:9d:63:f7:78:0d:a3:d4:c8:79:4e:f8:ba:34:ea:
fe:0c:ea:3a:e6:57:48:6b:a6:69:8e:b1:1e:bd:13:59:1b:24:
6b:79:4b:71:5a:a5:4a:15:db:4c:8c:44:3a:9c:64:73:e2:57:
bb:3c:bb:11:08:a3:4e:24:d5:45:2e:e1:ad:c8:bf:21:b5:fe:
c0:65:3c:b6:63:5b:a2:6e:13:48:6b:69:ad:5b:4d:13:31:3d:
7b:9c:d5:cf:12:94:97:bd:00:62:67:b5:d4:c2:6d:0c:35:93:
ed:62:0c:be:d0:dc:40:1a:bd:15:6f:e4:65:cf:7e:66:f2:ce:
cc:f2:64:ad:2e:b3:42:9d:9d:75:9d:89:65:73:de:51:82:65:
0d:cf:57:a4:ef:af:fe:28:69:27:0c:82:7f:e4:bd:f8:72:ad:
91:06:82:5e:02:ee:d3:a2:f2:4e:80:bc:4f:43:29:fe:5d:dd:
04:fb:d8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:28:06 2025 by rpki-client