Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33322d3335203d3e20323632333933.roa
File: 323830343a3863383a3a2f33322d3335203d3e20323632333933.roa (raw, json)
Hash identifier: 1XA3/OGlVLBN4zij/2GCkAOA6H23CXXbxe5iqN9Iy1Q=
Subject key identifier: 3D:9B:87:55:64:18:2F:F0:36:88:CD:81:FC:6C:9C:11:D2:25:BB:C9
Certificate issuer: /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial: 3D385D6629C2C2B7DF1E50401264EFF8EC3F1467
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33322d3335203d3e20323632333933.roa
Signing time: Thu 04 Apr 2024 18:32:48 +0000
ROA not before: Thu 04 Apr 2024 18:27:48 +0000
ROA not after: Thu 03 Apr 2025 18:32:48 +0000
asID: 262393
IP address blocks: 2804:8c8::/32 maxlen: 35
Validation: Failed, certificate revoked on Thu 02 May 2024 20:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:38:5d:66:29:c2:c2:b7:df:1e:50:40:12:64:ef:f8:ec:3f:14:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Validity
Not Before: Apr 4 18:27:48 2024 GMT
Not After : Apr 3 18:32:48 2025 GMT
Subject: CN=3D9B875564182FF03688CD81FC6C9C11D225BBC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:32:01:df:19:ac:e4:2b:70:b3:79:1d:89:
06:f8:2e:ec:29:74:2c:3c:f2:d4:c9:99:ff:c0:82:
fc:a5:c6:c9:c0:cf:88:a9:aa:93:24:de:39:2b:8c:
18:3d:f7:91:8a:07:ce:a1:2d:c9:06:4f:9f:7e:62:
4b:1f:04:06:9e:f0:7a:c6:9a:dc:59:fe:73:3b:66:
ba:b4:98:3b:ae:bb:cd:55:1f:36:d9:e3:99:04:47:
0b:45:af:5a:d5:26:08:22:f8:76:ae:1c:b1:9d:ee:
33:24:33:d0:ab:09:ef:f4:d9:de:42:aa:e7:bf:ff:
97:52:61:4b:a6:54:4a:8e:82:9e:f6:0f:46:74:e9:
68:b8:65:1e:ec:2b:42:1f:71:25:2a:57:b5:99:70:
33:3e:29:3b:8d:f3:cf:41:64:b2:d8:bf:d4:d4:68:
71:08:47:e7:6a:dd:4a:75:88:62:39:c8:70:b7:a1:
94:61:1f:70:a4:5e:2e:bd:0a:6a:de:5e:30:2e:bf:
4f:f3:b5:dd:16:47:6a:87:88:44:d6:64:d4:1d:16:
a5:25:f4:c8:1c:00:8e:95:41:d3:61:85:7d:c5:19:
0d:7b:d2:36:6b:df:75:d9:4d:9c:b3:d9:52:97:1f:
ce:09:3c:28:b2:cd:ca:ab:0f:94:d9:f0:23:73:b2:
5e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9B:87:55:64:18:2F:F0:36:88:CD:81:FC:6C:9C:11:D2:25:BB:C9
X509v3 Authority Key Identifier:
keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33322d3335203d3e20323632333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8c8::/32
Signature Algorithm: sha256WithRSAEncryption
b2:f3:f0:26:86:20:93:5b:0a:5c:a5:7b:c5:b2:bb:44:e6:ac:
40:83:36:27:ba:f8:74:33:ac:42:17:33:dd:92:53:05:62:1d:
0b:44:90:8d:96:d1:75:45:ef:ec:ad:e8:9d:fe:c4:97:0a:e1:
90:60:f1:70:f9:9a:ea:51:87:6e:0d:ad:36:be:dd:5e:00:68:
62:39:62:89:df:02:bc:32:f5:85:7a:24:c3:3c:37:ac:79:41:
92:03:34:33:61:71:fe:71:29:21:d4:d6:a9:7d:5b:2b:67:4e:
1a:f8:a9:44:b9:01:d8:75:d1:b0:77:a0:bd:ba:ad:ab:83:41:
a0:fe:63:ea:f5:d8:ee:0e:f1:0e:73:ba:2f:31:9c:cc:15:83:
14:d6:38:84:1e:b0:31:f0:68:7d:9e:b6:db:5a:e5:ee:78:2a:
d2:04:9f:73:3a:47:b5:df:db:6c:77:d3:5a:2f:b2:dd:a4:32:
5b:2f:7c:5b:5f:f6:27:53:19:d6:a3:de:e4:c2:c2:f4:39:cd:
f1:cc:2a:34:2c:ae:67:ce:fc:74:0a:80:07:55:27:c2:63:97:
0e:64:44:3d:ce:1f:2b:46:0a:0e:a6:97:91:a2:9d:8b:ab:23:
46:e3:10:f4:cc:5b:cb:b2:89:32:98:07:22:0f:fa:21:00:ac:
98:f4:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:20 2025 by rpki-client