Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/323830343a346335633a663738303a3a2f34322d3432203d3e20323637333636.roa
File: 323830343a346335633a663738303a3a2f34322d3432203d3e20323637333636.roa (raw, json)
Hash identifier: LoH+7XrB8/kfqYEdl2BrdFHCQf6A2Xofw7T3h8/E3yY=
Subject key identifier: 5B:8F:F1:FF:F2:D4:8A:03:3C:A7:6A:B8:7D:B6:1C:D4:AF:10:E7:9B
Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial: 4313B13DED82A408BFF81CB47FFC2A1957893E42
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/323830343a346335633a663738303a3a2f34322d3432203d3e20323637333636.roa
Signing time: Tue 23 Apr 2024 13:51:02 +0000
ROA not before: Tue 23 Apr 2024 13:46:02 +0000
ROA not after: Tue 22 Apr 2025 13:51:02 +0000
asID: 267366
IP address blocks: 2804:4c5c:f780::/42 maxlen: 42
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:11:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:13:b1:3d:ed:82:a4:08:bf:f8:1c:b4:7f:fc:2a:19:57:89:3e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Validity
Not Before: Apr 23 13:46:02 2024 GMT
Not After : Apr 22 13:51:02 2025 GMT
Subject: CN=5B8FF1FFF2D48A033CA76AB87DB61CD4AF10E79B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:d4:d9:a3:b9:48:53:dc:7e:d8:f2:2c:2e:
63:65:b2:3a:00:13:05:e3:8a:d8:b3:ae:f5:ee:b7:
be:29:3c:63:0e:06:22:bc:6f:f9:00:82:fb:26:fe:
0b:4c:04:f8:b5:3c:4d:c5:0e:de:26:4e:0a:13:93:
59:24:81:8b:52:43:ba:d0:c3:39:22:1a:eb:d9:56:
49:d3:82:0d:ab:c5:43:e0:12:d3:ba:1b:a7:92:f3:
71:b6:a6:f0:71:f1:2c:2e:19:20:cb:b3:4e:dd:c0:
57:24:d8:92:9c:78:95:bb:19:ae:11:53:de:bb:8a:
5c:cf:d9:86:64:14:0d:d9:39:4d:1f:4b:d2:ea:61:
25:d1:72:63:93:45:51:58:8a:41:48:2c:80:b4:d5:
2a:11:40:05:a4:99:83:87:ed:d4:94:cf:a9:97:1d:
a1:76:f1:c8:fc:bd:a3:f6:c9:c5:32:a0:97:9f:2e:
80:d1:c3:21:63:61:4b:cb:cb:c4:de:25:dd:2d:89:
b2:76:b0:1f:c0:be:73:90:24:5a:13:7a:c4:1c:a8:
5d:cc:e6:05:e1:ca:b9:4e:7e:d3:e2:07:c5:a7:35:
61:bf:d5:3c:ac:b4:7f:41:66:9d:fb:46:55:e1:d2:
ac:0c:c9:e0:69:b7:f6:58:2a:83:30:71:2c:10:ae:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8F:F1:FF:F2:D4:8A:03:3C:A7:6A:B8:7D:B6:1C:D4:AF:10:E7:9B
X509v3 Authority Key Identifier:
keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/323830343a346335633a663738303a3a2f34322d3432203d3e20323637333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c5c:f780::/42
Signature Algorithm: sha256WithRSAEncryption
35:9c:da:7c:e7:5d:bf:b9:65:25:53:56:2d:e9:b2:d6:71:79:
d5:42:ff:12:ad:83:a2:87:64:aa:68:8f:48:3c:b5:e6:2d:cf:
56:5f:7f:09:e3:f3:61:1a:11:74:0e:42:4f:14:d5:db:58:09:
f2:cd:ac:66:76:87:16:c0:7e:e4:38:ea:2e:5d:81:65:24:09:
58:18:6a:d3:94:e6:23:f6:be:cd:55:55:b5:a7:e8:dd:51:f4:
81:5e:37:03:40:25:ea:33:22:cc:7e:67:e0:77:e9:37:89:dd:
e9:bd:62:ef:8a:6e:f9:d4:4e:b1:80:b1:8b:f5:7e:6f:43:ca:
0d:7f:38:a8:cd:1a:29:4d:66:8e:1e:44:73:ac:54:4e:c9:72:
5f:47:ac:94:1a:e8:8a:7e:72:07:0f:50:17:05:a9:e9:d4:98:
86:01:41:c4:0e:ff:b7:db:f6:60:70:c9:1a:94:f7:b8:28:e6:
06:de:39:a7:1f:98:10:c9:f0:17:44:c0:b4:53:6c:e3:0a:f3:
b8:be:af:04:a6:a4:a3:39:14:9b:65:a4:ed:3d:d5:a7:bb:2e:
c3:2d:84:b3:0b:8c:0f:f0:28:4f:0d:a4:ac:56:ae:a7:29:9f:
92:fc:07:bf:c6:1e:50:78:b6:df:99:f0:db:04:7c:0b:3b:ae:
f8:0b:ad:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org