Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3838303a3a2f34312d3431203d3e203533303139.roa
File: 323830343a3564633a3838303a3a2f34312d3431203d3e203533303139.roa (raw, json)
Hash identifier: rfvwqN3ve6lFJZLx/liCSIHs2j+OHinANRBEaH1hdu0=
Subject key identifier: 08:22:8E:D4:79:F8:11:1D:C3:49:43:EC:DC:7C:C0:1B:B8:DF:68:46
Certificate issuer: /CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
Certificate serial: 0D60D84F38813A61D936CA9B99CE24ED3DBDBC50
Authority key identifier: E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3838303a3a2f34312d3431203d3e203533303139.roa
Signing time: Wed 15 Jan 2025 10:31:05 +0000
ROA not before: Wed 15 Jan 2025 10:26:05 +0000
ROA not after: Wed 14 Jan 2026 10:31:05 +0000
asID: 53019
IP address blocks: 2804:5dc:880::/41 maxlen: 41
Validation: Failed, certificate revoked on Wed 15 Jan 2025 16:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:60:d8:4f:38:81:3a:61:d9:36:ca:9b:99:ce:24:ed:3d:bd:bc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
Validity
Not Before: Jan 15 10:26:05 2025 GMT
Not After : Jan 14 10:31:05 2026 GMT
Subject: CN=08228ED479F8111DC34943ECDC7CC01BB8DF6846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:e1:67:84:fd:70:79:d6:d3:94:08:c1:a0:
0e:bd:eb:24:7e:ef:60:3c:93:96:e1:06:06:e7:c9:
d4:6f:5e:10:ea:c4:9e:86:44:b6:a8:26:18:ae:64:
99:d3:34:fd:89:70:4b:9d:f2:5c:25:b1:f3:fb:9b:
ce:67:b0:d3:d3:fa:99:20:c7:f6:ff:0d:4b:a8:7e:
bd:74:53:36:77:f2:31:ea:40:9a:93:ce:4e:56:ff:
8d:5e:19:5a:26:e7:8e:e4:1a:32:6a:29:04:71:67:
5f:68:77:75:d7:d5:0a:f9:94:a0:9c:d9:72:08:d8:
45:4c:7c:27:47:6b:23:46:ab:c3:83:16:87:d6:07:
1e:a5:f9:56:9c:5e:d0:b4:9e:cf:c4:a8:c8:30:b8:
dd:49:75:ee:94:f7:62:6f:6b:68:80:9a:2a:ec:33:
44:75:1d:cd:d2:2f:df:c7:77:f2:b4:fa:2e:67:de:
2f:cd:62:d9:06:e6:78:29:0c:aa:dd:8d:cc:9c:6c:
44:06:75:8d:93:32:f0:37:ef:85:17:48:81:de:be:
dc:f0:b5:cc:a2:4b:36:3e:34:b5:da:eb:6f:8a:f5:
6b:2e:04:81:28:fb:45:3a:c5:99:85:ae:d7:21:80:
2b:25:83:5c:3d:29:a6:35:fc:ac:d4:2b:26:c1:6d:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:22:8E:D4:79:F8:11:1D:C3:49:43:EC:DC:7C:C0:1B:B8:DF:68:46
X509v3 Authority Key Identifier:
keyid:E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3838303a3a2f34312d3431203d3e203533303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5dc:880::/41
Signature Algorithm: sha256WithRSAEncryption
46:26:60:e4:b2:19:36:37:54:b2:7d:14:24:00:a8:14:42:74:
96:f4:d1:72:38:37:98:31:fa:80:6a:a3:76:94:95:de:80:0d:
9d:1f:ed:2f:09:9f:78:f1:4f:ed:ac:c2:ec:97:86:4d:d7:70:
50:d3:eb:c9:53:c0:cc:f4:e8:c7:91:bd:8a:00:8b:4c:c8:4e:
83:88:0d:7e:28:33:4f:fa:e5:90:39:8a:d2:8a:31:16:7d:1c:
df:18:d0:fe:a6:5d:18:06:68:bc:e5:7e:c2:fc:34:45:79:16:
b2:25:6a:af:f9:7e:a3:ee:95:53:41:0d:80:ca:f8:a5:ad:3b:
2a:97:4b:ec:11:eb:62:99:a1:af:94:ab:7d:74:5f:69:f3:91:
db:6c:32:bf:b0:66:e9:5b:0e:76:aa:df:fc:9f:51:3b:6a:34:
03:bb:0f:c6:f1:65:8d:b1:93:7d:06:8a:b6:a8:3a:b2:e4:ba:
40:ee:64:ec:0f:d1:a1:10:dd:fe:d8:fd:8b:2a:9d:43:ed:11:
b9:4a:3a:c7:2e:dd:a4:75:f7:50:b5:ff:e7:9f:bb:fd:7b:80:
80:af:70:31:da:3c:38:df:3b:23:f9:77:d2:ca:9a:15:35:fc:
7a:31:32:d5:42:41:69:9a:31:df:b7:f0:34:5c:51:49:19:05:
43:61:43:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:28:06 2025 by rpki-client