Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a633030303a3a2f33342d3334203d3e20323632343434.roa
File: 323830343a6437383a633030303a3a2f33342d3334203d3e20323632343434.roa (raw, json)
Hash identifier: Xw7p0cSC4Re8+q5q4rFHLkfJN4FGByY7+iBRSiOcdgo=
Subject key identifier: 39:B6:6C:47:B1:A7:4B:E2:BE:95:84:17:0E:45:BA:78:56:43:F7:ED
Certificate issuer: /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial: 2817EE4B5B03D66560D58815CAAC25EEB7145562
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a633030303a3a2f33342d3334203d3e20323632343434.roa
Signing time: Wed 07 Aug 2024 13:14:35 +0000
ROA not before: Wed 07 Aug 2024 13:09:35 +0000
ROA not after: Wed 06 Aug 2025 13:14:35 +0000
asID: 262444
IP address blocks: 2804:d78:c000::/34 maxlen: 34
Validation: Failed, certificate revoked on Tue 12 Nov 2024 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:17:ee:4b:5b:03:d6:65:60:d5:88:15:ca:ac:25:ee:b7:14:55:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
Validity
Not Before: Aug 7 13:09:35 2024 GMT
Not After : Aug 6 13:14:35 2025 GMT
Subject: CN=39B66C47B1A74BE2BE9584170E45BA785643F7ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:4a:b5:d7:32:e9:a5:ed:b4:7f:4f:d9:a1:
29:07:ed:0a:d0:1a:72:3f:d9:57:32:23:29:4f:56:
b7:17:60:5d:76:82:fa:b2:68:b2:1b:91:eb:b8:5b:
d1:82:46:67:5a:6b:d1:80:86:3f:a6:80:c5:6e:36:
0e:e4:74:57:00:17:ad:fd:24:14:87:aa:04:5c:de:
22:45:a3:9f:b7:a7:89:05:99:de:c0:0b:14:32:0c:
4c:1f:7a:50:83:51:98:ca:99:e8:48:ee:7f:4b:48:
1b:f7:8a:65:1a:ae:72:e0:7a:7a:1d:51:49:77:8c:
9e:72:dd:26:74:a2:74:fc:b3:e7:66:26:02:07:2f:
d8:ac:7b:46:f6:b3:bb:34:f3:33:e6:a3:06:66:ac:
0c:41:f6:5f:be:0f:f2:42:8a:2b:cf:a9:7f:01:aa:
7c:7d:fa:56:95:85:41:23:e8:db:f2:c8:a5:6d:a8:
a3:f7:85:f8:2c:45:45:a9:19:80:bf:62:70:ec:e4:
30:0d:ad:70:f5:18:ee:a4:ff:c3:7b:8e:a5:95:f7:
f9:65:ee:79:8b:98:a1:eb:d3:3e:d2:41:f3:13:96:
1f:13:56:42:4d:3f:79:4d:fd:4a:26:19:f5:d2:d8:
3b:19:cf:6a:39:7b:66:b5:4d:d6:3d:1a:76:87:73:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B6:6C:47:B1:A7:4B:E2:BE:95:84:17:0E:45:BA:78:56:43:F7:ED
X509v3 Authority Key Identifier:
keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a633030303a3a2f33342d3334203d3e20323632343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d78:c000::/34
Signature Algorithm: sha256WithRSAEncryption
2e:d0:64:3b:6e:a2:eb:a3:59:96:50:31:a9:53:9e:5a:11:04:
22:32:c4:19:86:1d:b4:3e:59:3e:91:67:36:ee:ee:8a:65:0c:
67:21:f6:93:4c:48:6d:38:a0:c3:70:a9:6d:36:e3:c9:85:9f:
1d:45:32:58:28:20:79:a5:19:92:4c:7b:78:1b:c7:e7:f8:d8:
49:60:ef:50:77:9d:1d:c0:46:a4:50:3a:f1:16:e1:bf:5e:04:
c6:c2:74:1a:74:52:b0:e9:fb:2e:c2:07:47:21:74:67:3e:ba:
24:35:1c:91:cc:ed:67:f1:ce:02:73:2c:79:b6:f5:a5:49:99:
90:34:5b:c1:52:ac:91:67:d8:1c:44:a0:f7:39:ce:9f:b4:11:
f1:2c:0c:af:4a:d7:11:e4:b8:18:7b:0f:0f:6e:7a:d8:8e:84:
dc:71:c4:32:7d:71:53:57:5a:6e:30:78:3d:b8:61:c6:bf:4d:
33:04:1f:96:8b:2d:1b:60:27:3e:32:0f:98:03:36:e4:73:8b:
9e:6f:d6:6e:c4:d7:f9:9b:86:dc:6d:2b:40:05:58:a2:38:48:
44:ce:94:80:39:7c:66:87:8b:14:f4:13:03:a5:7a:11:5e:87:
4b:d6:c5:f6:4f:2b:40:86:aa:d2:1b:5c:bc:62:5a:c5:13:e3:
0c:3c:fd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 20:49:34 2024 by rpki-client on console-fra.rpki-client.org