Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/323830343a3437633a3a2f33342d3334203d3e20323632343337.roa
File: 323830343a3437633a3a2f33342d3334203d3e20323632343337.roa (raw, json)
Hash identifier: TzChbz0ZDd2flqy1xLgYEpFD74Fjdc7oOSaynZl7L60=
Subject key identifier: 5B:CD:A5:E0:FD:77:43:E1:18:A8:23:38:04:F6:1B:AC:03:39:1D:3B
Certificate issuer: /CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Certificate serial: 29E77EF40FCA8B771C60865723E5304EDADC81C4
Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/323830343a3437633a3a2f33342d3334203d3e20323632343337.roa
Signing time: Wed 24 Apr 2024 13:03:20 +0000
ROA not before: Wed 24 Apr 2024 12:58:20 +0000
ROA not after: Wed 23 Apr 2025 13:03:20 +0000
asID: 262437
IP address blocks: 2804:47c::/34 maxlen: 34
Validation: Failed, certificate revoked on Wed 22 May 2024 11:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e7:7e:f4:0f:ca:8b:77:1c:60:86:57:23:e5:30:4e:da:dc:81:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Validity
Not Before: Apr 24 12:58:20 2024 GMT
Not After : Apr 23 13:03:20 2025 GMT
Subject: CN=5BCDA5E0FD7743E118A8233804F61BAC03391D3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:bd:ce:5f:2a:13:30:ad:eb:ee:41:8e:81:
36:f9:9d:75:61:f9:92:b6:18:57:ab:55:f4:97:d6:
09:43:53:14:90:37:36:26:c6:31:20:9b:82:9d:72:
8b:58:93:b3:28:cd:12:28:55:e9:02:5c:2d:da:0d:
ec:3a:3f:9b:d5:9e:a1:61:da:a5:15:9e:5b:58:75:
7e:ff:e8:1a:c7:1f:8f:7b:43:59:1f:76:af:20:b6:
91:88:d1:31:d5:a6:35:26:9f:2a:e0:73:bb:4e:ea:
e1:ef:18:f7:ba:ce:89:ef:37:39:03:96:d1:49:24:
46:3c:84:d4:5c:77:68:7b:08:fc:1b:e8:4e:96:cd:
e7:09:1b:d9:35:09:66:8e:cf:ea:a0:f0:12:9b:d2:
01:2c:24:5c:62:3b:5c:38:9e:c9:ed:19:39:23:31:
b0:c9:72:ae:80:5a:47:51:89:54:c7:12:34:85:f5:
69:59:a1:f8:50:b1:7e:58:cd:6f:3a:db:39:75:51:
a5:64:36:54:b6:2b:48:7b:0d:65:dc:42:a3:43:ef:
0d:9f:90:db:44:93:a2:63:42:4b:af:26:40:55:89:
11:05:62:08:1c:d3:ad:fc:2e:d6:e0:00:98:dc:26:
d2:18:28:91:e6:5a:bd:f6:4d:02:ea:49:ac:15:5e:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CD:A5:E0:FD:77:43:E1:18:A8:23:38:04:F6:1B:AC:03:39:1D:3B
X509v3 Authority Key Identifier:
keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/323830343a3437633a3a2f33342d3334203d3e20323632343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:47c::/34
Signature Algorithm: sha256WithRSAEncryption
15:f7:83:43:31:57:fb:1d:d4:4f:21:a5:9a:fe:00:42:0b:7c:
3b:df:cd:d3:8f:fe:24:41:ee:f7:bf:4b:ce:dc:59:a8:ab:9d:
8c:56:3b:b6:b0:51:ba:30:20:f4:a3:d3:9b:2b:be:4c:72:46:
55:d8:24:17:e5:ed:d6:b6:a0:59:25:c9:a0:e6:1e:02:87:58:
f0:87:5c:18:6a:02:39:1b:b3:d6:5c:98:42:bc:27:cb:05:0b:
5a:d1:5d:62:8c:b7:4f:7b:9e:30:2a:ae:e7:7c:0b:16:97:d2:
0e:1b:e1:f8:21:34:01:f0:a4:b4:7d:70:cc:5a:9f:3e:5b:43:
dd:0e:81:9f:7c:5a:e5:f8:07:91:e6:9b:9d:90:41:1f:a1:bc:
2f:60:7a:17:bf:3d:89:4a:fe:c9:ff:ff:25:50:0b:e2:20:c2:
2b:0f:71:b3:89:e0:69:c8:d7:62:a5:ab:18:d4:97:91:2f:fe:
59:e3:8a:e3:49:1c:2a:e5:5c:ce:de:97:df:00:84:61:e6:3a:
c2:f2:69:c1:d5:74:e4:78:8b:16:4b:03:f6:a1:c4:b7:b9:ae:
15:4e:bf:22:19:b5:f0:53:7c:47:b4:c8:59:50:76:a5:37:44:
78:85:d2:69:6d:e6:68:35:e4:7b:8e:ea:f3:1e:fd:9d:bb:82:
4f:82:c2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org