Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a3a2f33332d3333203d3e20323632343434.roa
File: 323830343a6437383a3a2f33332d3333203d3e20323632343434.roa (raw, json)
Hash identifier: 96jFE6OHudMJEmySJigXFp+YBbN72Imbe71VEydp5V4=
Subject key identifier: 58:9F:BE:CD:B1:19:DA:92:6C:C2:9C:39:3D:7D:97:2A:3A:08:37:49
Certificate issuer: /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial: 32542062DF8266D1D8A7EC3B476B311453EC5001
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a3a2f33332d3333203d3e20323632343434.roa
Signing time: Wed 07 Aug 2024 13:14:46 +0000
ROA not before: Wed 07 Aug 2024 13:09:46 +0000
ROA not after: Wed 06 Aug 2025 13:14:46 +0000
asID: 262444
IP address blocks: 2804:d78::/33 maxlen: 33
Validation: Failed, certificate revoked on Tue 12 Nov 2024 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:54:20:62:df:82:66:d1:d8:a7:ec:3b:47:6b:31:14:53:ec:50:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
Validity
Not Before: Aug 7 13:09:46 2024 GMT
Not After : Aug 6 13:14:46 2025 GMT
Subject: CN=589FBECDB119DA926CC29C393D7D972A3A083749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:c4:77:e7:de:ad:f3:04:96:59:7e:a8:b9:
54:4e:de:ba:80:90:83:80:4c:4f:9b:b8:2f:10:0e:
15:1e:dc:ee:a4:e9:b1:73:32:03:31:66:1a:9d:92:
7a:ff:3f:cc:36:7d:f4:5e:ed:bf:be:e0:78:c7:e8:
2e:01:3b:59:98:ec:77:d5:bc:34:fc:80:c4:f5:5a:
da:18:e8:4f:c4:0a:7b:1e:38:23:8e:36:2c:23:55:
90:b2:b3:1a:82:b9:55:95:b7:22:a1:c4:ee:b5:cd:
bb:92:dd:d4:3e:0b:00:4f:7d:1e:df:7c:4b:40:c4:
50:c3:c5:ed:43:08:a9:53:2d:42:92:e3:c2:fc:f6:
4a:f1:7f:91:52:f3:60:92:d5:b0:87:1d:c2:d4:11:
c5:84:0f:26:54:be:42:ad:6b:82:d2:42:2e:c5:e3:
d0:69:1e:cb:62:d6:a6:80:db:85:c3:b9:67:50:9a:
c0:40:b7:0b:c6:d1:f3:5d:d4:74:01:f0:64:c2:a2:
1b:bd:0b:15:bc:8c:3d:f9:5f:18:8b:27:e8:f9:20:
9b:42:a8:fb:92:48:05:d2:80:35:91:ef:ea:02:bc:
46:a4:06:09:16:0f:66:73:41:8f:6f:d2:e3:a7:7b:
bf:37:dc:c4:58:39:4d:55:b6:5c:8b:0c:c6:02:6d:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9F:BE:CD:B1:19:DA:92:6C:C2:9C:39:3D:7D:97:2A:3A:08:37:49
X509v3 Authority Key Identifier:
keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a3a2f33332d3333203d3e20323632343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d78::/33
Signature Algorithm: sha256WithRSAEncryption
3d:62:1b:ec:e1:a0:f4:f8:6a:ab:0f:b5:bf:f9:6e:ba:5e:4f:
74:9a:da:c4:86:2c:8a:6c:a6:e6:7d:83:de:12:e2:63:8d:5e:
f5:ee:ba:a9:45:ef:f6:58:ef:8f:3a:65:47:63:77:3a:77:10:
59:42:13:74:69:57:d5:8b:47:4a:62:84:18:c3:ef:7b:bc:d9:
27:8d:d8:1b:f3:d4:f7:13:79:f4:13:db:97:4e:a3:d8:cd:c7:
98:4b:2b:47:2f:09:d6:44:f7:44:e9:30:17:00:35:08:52:66:
69:0c:16:fc:5b:a9:43:19:c7:7a:6f:47:31:bf:7b:0b:8a:ea:
ea:03:a2:ce:33:ec:66:9c:67:70:95:58:7f:5a:eb:01:b5:08:
7c:9a:1f:a0:2b:3a:55:9a:d4:0c:89:72:13:7f:cf:78:c1:9d:
6f:d3:56:83:25:da:85:f1:2b:73:d6:a5:4a:4f:d8:51:42:6f:
43:e4:ff:1d:cf:46:ac:23:35:b9:24:0d:c2:80:b6:81:b1:db:
0d:f5:16:e5:bd:65:90:9c:07:7d:f9:98:00:6f:c9:9e:01:e8:
bb:da:9e:2c:bf:e1:f7:f7:dd:56:bd:bd:8c:b5:29:56:7a:75:
18:04:2e:8c:39:79:dc:05:f1:ed:b6:24:4e:54:9f:14:49:98:
85:20:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 20:49:34 2024 by rpki-client on console-fra.rpki-client.org