Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/323830343a313561343a3a2f33322d3333203d3e20323633343030.roa
File: 323830343a313561343a3a2f33322d3333203d3e20323633343030.roa (raw, json)
Hash identifier: HeZ00o1Z9aybi+zw0ar4SqjyzlI+hdM6UG9VlIF9MZk=
Subject key identifier: 2B:9F:98:A6:AC:39:8C:43:B9:D8:65:3A:BC:29:11:CE:0B:0A:F9:17
Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Certificate serial: 2AAAEDCCC3B52573D14D64FC2F6407AD36B6634A
Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/323830343a313561343a3a2f33322d3333203d3e20323633343030.roa
Signing time: Fri 03 Jan 2025 18:21:20 +0000
ROA not before: Fri 03 Jan 2025 18:16:20 +0000
ROA not after: Fri 02 Jan 2026 18:21:20 +0000
asID: 263400
IP address blocks: 2804:15a4::/32 maxlen: 33
Validation: Failed, certificate revoked on Fri 24 Jan 2025 17:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:aa:ed:cc:c3:b5:25:73:d1:4d:64:fc:2f:64:07:ad:36:b6:63:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Validity
Not Before: Jan 3 18:16:20 2025 GMT
Not After : Jan 2 18:21:20 2026 GMT
Subject: CN=2B9F98A6AC398C43B9D8653ABC2911CE0B0AF917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:28:12:f2:25:6e:35:2f:2f:30:9a:55:33:
d6:65:72:d9:61:5e:72:20:51:41:40:a7:e1:d4:8f:
17:9b:4f:b4:23:73:2f:45:cf:65:d0:bc:a9:33:97:
e6:30:94:f8:41:de:4d:5d:45:55:5c:42:05:ef:ea:
c3:16:6a:ab:6c:f7:74:e1:49:66:f4:a9:26:92:da:
75:ab:dd:97:28:d8:90:3d:07:08:fe:7d:13:97:af:
62:07:a0:65:a6:5b:fc:d8:f1:a9:82:3d:ae:82:de:
d1:05:ff:b4:42:71:3f:6b:44:b1:8b:96:fd:28:07:
63:df:65:e1:85:c3:c8:e6:cc:d6:e2:e6:7d:b4:48:
1f:69:96:4e:cf:9b:f0:34:59:5f:5c:d3:8a:c6:4b:
0f:c2:43:1e:25:f4:80:d7:a5:5f:2b:0c:9e:b8:72:
9b:c1:e9:ee:38:9e:93:97:92:65:ae:72:16:0f:7c:
b8:f3:df:fb:15:15:26:94:6f:54:53:c4:d1:3c:b2:
a0:e0:a8:58:2d:02:4f:38:81:49:eb:d2:95:07:15:
ff:83:42:0d:9b:78:50:6f:97:83:eb:4a:05:18:ff:
ae:23:79:e8:ac:4b:36:53:12:7a:b5:55:41:0f:bb:
15:9d:8f:04:db:73:ba:2d:e3:98:7d:6e:c4:5d:c5:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9F:98:A6:AC:39:8C:43:B9:D8:65:3A:BC:29:11:CE:0B:0A:F9:17
X509v3 Authority Key Identifier:
keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/323830343a313561343a3a2f33322d3333203d3e20323633343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:15a4::/32
Signature Algorithm: sha256WithRSAEncryption
b2:3d:ef:40:7a:90:d6:2b:a1:49:1d:e3:d1:83:76:34:bb:8a:
68:59:c1:9b:09:ec:44:a4:7b:8c:d7:3e:d8:31:00:60:45:42:
92:6b:91:5b:38:cd:23:1c:c8:b7:3a:59:aa:86:e4:9a:7a:49:
7c:9b:e0:91:29:67:56:24:c2:e2:1d:b4:bb:43:05:25:b1:85:
e1:58:6e:f7:1a:46:ea:b0:6f:06:c8:80:56:18:15:ab:bd:50:
4b:c4:ef:11:68:5e:15:74:73:6f:b9:97:e7:91:75:e1:c8:a2:
01:ea:ce:42:30:ad:d2:45:a4:e3:61:84:fc:02:c2:7a:47:b7:
d1:c6:cf:42:a4:3c:ec:9a:c5:22:2b:99:f7:d2:40:a1:dd:80:
a1:75:37:6c:e2:d4:65:84:ca:f1:5a:6d:7f:2c:90:76:71:c6:
1a:fc:42:d5:88:4c:68:f3:53:3d:35:d6:14:6e:37:16:85:7d:
99:cb:42:3f:65:03:90:15:30:07:19:5f:0d:cf:4a:35:41:3e:
68:98:41:01:9a:c3:e2:45:20:ff:dc:fa:c1:ab:0c:a2:3e:67:
93:9e:76:74:f3:ed:94:c8:5d:22:1d:ec:7a:2d:d5:c3:8c:a7:
7c:d6:7d:28:66:a8:8e:68:9e:dc:25:3a:68:e0:10:3e:ca:2a:
b5:7d:bb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:50:17 2025 by rpki-client