Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/323830343a3232303a3a2f33322d3332203d3e20323632373931.roa
File: 323830343a3232303a3a2f33322d3332203d3e20323632373931.roa (raw, json)
Hash identifier: Hc2hSBT+aCTNdpOF7OfbXAv72AVw0qGqrDZVmybYEPc=
Subject key identifier: 01:78:EF:66:A4:EA:B6:F3:96:DD:57:A8:9D:7F:51:7C:50:E2:AD:43
Certificate issuer: /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial: 0BF3D011A5BD0E43D715E5B3DC1299A1E039AD49
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/323830343a3232303a3a2f33322d3332203d3e20323632373931.roa
Signing time: Wed 24 Apr 2024 17:31:15 +0000
ROA not before: Wed 24 Apr 2024 17:26:15 +0000
ROA not after: Wed 23 Apr 2025 17:31:15 +0000
asID: 262791
IP address blocks: 2804:220::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f3:d0:11:a5:bd:0e:43:d7:15:e5:b3:dc:12:99:a1:e0:39:ad:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Validity
Not Before: Apr 24 17:26:15 2024 GMT
Not After : Apr 23 17:31:15 2025 GMT
Subject: CN=0178EF66A4EAB6F396DD57A89D7F517C50E2AD43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:36:81:06:1e:34:bd:24:32:7c:b6:64:e7:
43:96:4e:4a:3b:20:06:74:39:48:2a:26:27:69:f6:
2f:65:5e:71:11:69:63:0d:4a:c3:7d:cb:b6:2b:e5:
82:79:86:0a:15:a5:89:18:b3:72:f8:1b:1c:7a:73:
38:71:f2:04:ed:28:c7:6a:b6:10:91:e1:07:e3:c3:
a6:5c:75:c5:52:56:45:5d:6d:0f:bb:92:42:95:1c:
45:79:32:b6:11:3b:91:4f:b7:11:e6:a1:c7:53:93:
a2:c0:3c:01:69:ce:82:f2:d9:dd:9d:2f:a2:06:7b:
09:fe:c8:97:76:e5:f0:d6:3d:24:cc:b3:2d:0a:1c:
8d:3a:39:cf:75:c8:3f:53:a4:54:42:e6:b3:50:79:
af:73:a1:da:87:91:67:1d:99:68:9a:82:17:08:88:
9e:95:d5:96:96:cc:ab:c2:fd:39:8a:e2:c8:2b:70:
a1:62:c9:3e:ae:a1:eb:36:51:e8:34:69:15:ed:ae:
d1:1d:85:bc:6f:d5:e0:f0:7f:c2:a4:f3:14:55:d8:
22:fe:54:13:8a:de:1f:06:8e:8e:b6:15:ad:0f:92:
5d:83:b7:b7:3a:7a:60:41:fc:a2:67:7e:ea:b1:91:
68:6a:1f:d0:be:4f:9a:4d:6c:ad:ab:76:58:39:12:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:78:EF:66:A4:EA:B6:F3:96:DD:57:A8:9D:7F:51:7C:50:E2:AD:43
X509v3 Authority Key Identifier:
keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/323830343a3232303a3a2f33322d3332203d3e20323632373931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:220::/32
Signature Algorithm: sha256WithRSAEncryption
5d:87:09:9b:f8:93:01:5d:e4:fc:0a:f2:14:b1:1d:8d:d3:0e:
f3:07:52:c0:04:04:8a:a4:46:52:a7:75:0c:4b:52:2c:39:47:
03:9d:d6:9e:99:50:82:64:3e:63:b5:1a:af:6f:b9:80:1b:14:
bd:02:a6:a1:fe:67:ff:40:fb:fe:f7:a6:11:25:c6:f8:25:37:
88:85:7a:d0:a2:0f:9b:98:6a:0a:25:f1:e4:4c:6f:86:42:d9:
12:11:5a:4a:f2:18:43:6b:9b:68:d0:44:d7:a4:bd:68:ac:d9:
89:b1:bb:e0:52:b1:d1:25:41:0d:f0:c7:ae:c1:6a:db:11:8e:
a5:78:6c:5a:36:61:f8:3e:7a:4e:0f:ab:ed:b1:92:ca:56:69:
b1:f5:07:ae:8e:3d:0e:fd:ba:51:c3:e7:28:e0:2e:15:07:22:
05:1f:36:59:9d:a7:bf:c9:e1:03:8a:d2:0f:ed:65:40:df:eb:
0d:69:36:29:93:82:51:a5:23:f9:62:e7:ee:a3:9d:a4:32:6b:
ca:4b:82:20:ed:6d:92:a4:6d:67:f2:d3:08:df:60:4f:a6:5b:
51:a2:da:7a:7f:fd:e7:8c:69:e3:34:45:56:a6:cc:f0:5e:47:
8c:89:3d:8d:b8:fe:4f:d0:b8:41:aa:2a:1b:c3:b9:c8:f5:45:
68:fd:e6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org