Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a333030303a3a2f33362d3336203d3e20323633393830.roa
File: 323830343a323863383a333030303a3a2f33362d3336203d3e20323633393830.roa (raw, json)
Hash identifier: OHWEnSZdseereVpn88YqILBExg4k4KYBORJM/q4zXUA=
Subject key identifier: DD:19:34:0D:B5:46:BA:73:9C:8E:FB:91:40:53:40:25:1C:01:85:FF
Certificate issuer: /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial: 287083D6639BD52AA1D188EFA5ADA07308C8D288
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a333030303a3a2f33362d3336203d3e20323633393830.roa
Signing time: Tue 23 Apr 2024 12:57:04 +0000
ROA not before: Tue 23 Apr 2024 12:52:04 +0000
ROA not after: Tue 22 Apr 2025 12:57:04 +0000
asID: 263980
IP address blocks: 2804:28c8:3000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 05 Jun 2024 18:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:70:83:d6:63:9b:d5:2a:a1:d1:88:ef:a5:ad:a0:73:08:c8:d2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Validity
Not Before: Apr 23 12:52:04 2024 GMT
Not After : Apr 22 12:57:04 2025 GMT
Subject: CN=DD19340DB546BA739C8EFB91405340251C0185FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:18:2e:2c:e9:e8:e7:ad:6a:96:33:bc:41:
62:89:4c:06:45:4e:7c:84:55:fa:2a:44:3b:c0:11:
a6:a7:5d:33:54:de:1e:a5:5a:5f:29:01:44:75:3c:
23:2c:e9:20:11:61:0a:15:77:9e:9b:1f:c0:32:e8:
de:68:0a:50:94:00:f6:8d:f8:b3:9f:b8:4f:5c:4f:
4c:46:30:d4:0d:78:62:dd:34:7d:8c:f7:3b:87:3f:
81:fc:9f:64:75:ce:28:ec:e9:ef:9a:2a:bc:9c:be:
bf:09:39:35:ac:5a:17:96:3a:9c:38:df:9b:4c:01:
0b:0c:08:e2:96:54:75:70:aa:5d:80:5e:0a:d4:91:
84:15:e8:90:59:c2:9b:17:c9:a3:be:de:e4:4a:b1:
d7:15:92:05:8b:18:d3:0a:05:19:d9:bb:d7:d3:99:
d3:03:c4:e5:a0:c7:7c:b4:ee:f3:ae:cf:f9:99:7e:
35:80:9e:68:bd:01:71:71:c3:81:51:ba:a5:98:76:
34:15:db:e4:7b:8d:0b:dd:54:da:a2:af:13:d2:f3:
b1:b9:d4:ea:0c:5a:14:46:75:6e:87:a2:3d:97:67:
92:19:d9:50:b2:76:08:06:31:7a:20:8b:a2:3d:5c:
5c:73:ec:e3:7d:b1:94:91:07:7d:c5:58:c4:48:b4:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:19:34:0D:B5:46:BA:73:9C:8E:FB:91:40:53:40:25:1C:01:85:FF
X509v3 Authority Key Identifier:
keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a333030303a3a2f33362d3336203d3e20323633393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:28c8:3000::/36
Signature Algorithm: sha256WithRSAEncryption
af:cc:c7:95:a2:f6:81:3b:5d:1a:68:b7:db:3a:f2:26:94:08:
68:df:88:dc:8a:f4:a7:10:72:d0:6c:ba:b5:38:c8:25:f2:c9:
e1:c8:a3:b4:15:81:e6:0f:5f:9a:45:86:8e:f0:ba:9a:2f:00:
6a:12:42:1c:40:07:29:8c:7c:c2:b9:4c:5f:9a:7d:6b:70:1d:
fa:5a:9c:d5:60:1e:2c:09:b2:55:89:52:6d:6a:e8:3c:c3:c2:
dc:c5:6c:16:cc:c6:75:ad:3e:f6:09:97:60:1a:b2:08:a3:f1:
62:b7:9f:ba:83:86:f4:ea:4e:ba:b9:77:7e:da:fe:4d:3f:5a:
87:6a:70:b5:cb:eb:22:f9:9c:a7:26:13:e4:4e:9a:10:1c:08:
53:c8:db:e9:59:a6:d7:5a:f1:b3:7f:b6:96:a8:38:0e:5f:10:
d5:c5:2e:a1:ca:a0:92:6b:d1:07:35:68:af:16:12:eb:d9:89:
8b:25:d7:88:8d:47:02:61:2d:e7:22:6a:95:0a:9a:e8:83:01:
88:b7:23:9f:ff:cf:62:87:90:65:ff:a3:b2:63:31:1a:59:4b:
d4:61:32:6d:8d:57:41:4d:21:58:3d:b9:34:b3:2e:7a:02:8a:
48:06:53:aa:db:4e:bc:b1:5c:b9:29:5a:a4:95:35:ec:2f:94:
e0:ff:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:51 2025 by rpki-client