Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/323830343a346335633a666636303a3a2f34342d3434203d3e20323637333636.roa
File: 323830343a346335633a666636303a3a2f34342d3434203d3e20323637333636.roa (raw, json)
Hash identifier: fQ1YA1HvDYVG1UGyh9Bxk7S/CEDGk7XbxIIywZ4YsKw=
Subject key identifier: 77:09:78:45:0E:58:6F:8F:89:77:8C:87:AD:E9:12:69:4D:C4:93:7A
Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial: 2E4C888B1DE5C314A319B1990BEECBDE4D8148CD
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/323830343a346335633a666636303a3a2f34342d3434203d3e20323637333636.roa
Signing time: Tue 23 Apr 2024 13:51:04 +0000
ROA not before: Tue 23 Apr 2024 13:46:04 +0000
ROA not after: Tue 22 Apr 2025 13:51:04 +0000
asID: 267366
IP address blocks: 2804:4c5c:ff60::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4c:88:8b:1d:e5:c3:14:a3:19:b1:99:0b:ee:cb:de:4d:81:48:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Validity
Not Before: Apr 23 13:46:04 2024 GMT
Not After : Apr 22 13:51:04 2025 GMT
Subject: CN=770978450E586F8F89778C87ADE912694DC4937A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:88:0b:31:10:57:42:54:bb:d8:54:95:5c:
47:20:1a:ce:0d:b3:db:bc:f0:84:18:18:da:5d:0c:
c0:fb:74:77:5e:05:36:b6:f1:0b:b1:c6:b1:bd:d3:
ea:aa:cc:3f:3b:52:4f:a3:2c:a6:c5:c1:05:e4:76:
3e:3b:17:82:97:91:85:31:1f:fd:3a:77:38:db:f7:
14:f4:11:d6:f2:bd:28:87:75:f2:e5:87:c1:ce:fd:
12:89:07:55:ba:a5:14:7b:9c:14:ec:78:67:ad:43:
af:42:ee:3c:7a:80:de:9d:97:f3:4c:88:f7:f8:e8:
86:e9:b7:f9:5f:ca:d7:b5:47:ba:66:4d:66:fc:7f:
ed:08:12:ba:2c:91:80:12:06:9d:8b:ed:71:80:95:
92:97:83:de:42:d3:d3:24:8d:8d:bd:3f:b0:3e:b8:
ab:6d:d4:0f:47:85:2c:51:26:b8:ed:0f:eb:a5:4c:
da:cb:a3:7c:0a:3c:55:7e:4c:a5:22:c6:af:50:9c:
ee:b6:c8:ff:0e:61:20:ac:e9:1e:f7:9f:ec:73:55:
83:78:bb:0a:a8:14:c2:cb:23:1d:1d:f9:d2:8c:e5:
bd:89:89:00:eb:4a:7c:ee:4e:1d:0c:c0:5d:6b:74:
8d:4e:75:07:44:c6:ee:e4:07:fc:0d:d6:ef:0d:00:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:09:78:45:0E:58:6F:8F:89:77:8C:87:AD:E9:12:69:4D:C4:93:7A
X509v3 Authority Key Identifier:
keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/323830343a346335633a666636303a3a2f34342d3434203d3e20323637333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c5c:ff60::/44
Signature Algorithm: sha256WithRSAEncryption
32:3d:4b:c8:5e:94:aa:46:8a:a0:b1:ce:51:11:78:65:f3:64:
f0:94:68:d0:17:8c:d5:4c:3f:85:f8:ae:cd:32:4c:a0:03:58:
5d:45:4a:a1:3d:a8:3e:35:eb:a4:e3:fb:7c:84:14:89:69:2d:
bc:99:05:08:9f:88:02:be:8c:9b:81:bb:ec:1a:75:23:1a:eb:
ea:ad:e7:3c:3d:87:19:08:c7:aa:ac:ee:b0:67:bc:79:62:a7:
b4:c5:f5:fe:9e:7c:b9:55:64:b3:bf:ca:f9:7d:8b:be:71:20:
31:ce:81:31:67:e3:56:90:d8:21:06:37:6d:97:1a:2d:e9:79:
24:41:e6:ce:54:11:6e:f3:a0:7c:35:d3:86:00:f1:65:40:c5:
7e:38:c6:66:35:13:7d:ad:4f:6e:75:68:ca:3f:00:c8:38:a6:
a4:fe:5c:b1:15:24:0e:68:86:34:dd:a8:3a:21:03:20:43:96:
0d:5d:33:e3:65:e3:09:5f:51:04:f8:07:f0:49:8b:3a:77:d5:
34:9b:7c:81:26:84:4e:9c:3c:ae:ea:02:f7:c8:ca:c9:ca:fd:
21:4e:15:6b:02:22:92:4a:07:58:3e:35:00:d1:e3:1f:15:bb:
b1:5a:f2:95:f6:55:d8:78:ab:85:59:d7:6e:a8:10:87:b4:e1:
01:b6:ff:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:06 2025 by rpki-client