Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/323830343a3232303a3a2f33322d3438203d3e20323632373931.roa
File: 323830343a3232303a3a2f33322d3438203d3e20323632373931.roa (raw, json)
Hash identifier: JXblUrQMut8lyX83dHQUE2hylj1n0aFkLkzKiMKXKKg=
Subject key identifier: C8:A4:4E:FB:7B:7D:9E:DF:35:9B:1F:37:D7:FA:A4:A8:39:37:D4:CB
Certificate issuer: /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial: 5318D45173D10A21A2BE7D627C1E59FC1214BB37
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/323830343a3232303a3a2f33322d3438203d3e20323632373931.roa
Signing time: Wed 05 Jun 2024 19:24:03 +0000
ROA not before: Wed 05 Jun 2024 19:19:03 +0000
ROA not after: Wed 04 Jun 2025 19:24:03 +0000
asID: 262791
IP address blocks: 2804:220::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 07 Nov 2024 14:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:18:d4:51:73:d1:0a:21:a2:be:7d:62:7c:1e:59:fc:12:14:bb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Validity
Not Before: Jun 5 19:19:03 2024 GMT
Not After : Jun 4 19:24:03 2025 GMT
Subject: CN=C8A44EFB7B7D9EDF359B1F37D7FAA4A83937D4CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:92:5e:85:65:55:cd:c6:2b:9d:05:76:fa:
39:67:97:ab:81:08:2a:82:95:96:f3:08:f5:5b:d0:
23:ea:b5:2e:a1:a9:e8:07:aa:59:1b:d0:ee:c3:76:
21:49:40:9e:06:46:8d:3d:51:87:3c:34:5b:8b:f4:
4a:6c:f7:87:dd:73:c7:b3:08:04:f7:93:44:a2:c8:
80:e8:89:67:d7:c9:61:7c:1a:3f:c7:36:4e:f7:dd:
95:71:a4:20:5d:8a:83:32:3b:3f:48:a5:2c:71:60:
91:50:53:a5:c9:ef:67:52:92:55:7b:31:76:bc:ca:
ed:c1:2b:83:50:ca:d0:5f:2a:df:23:ea:04:96:ec:
44:3f:0f:89:98:d2:a9:54:cd:76:f9:87:8d:98:27:
56:b7:ba:c8:57:ee:5a:8d:b2:20:04:0e:56:72:bc:
9a:8f:e4:6e:11:0a:ab:40:74:5a:ff:2b:96:23:2b:
f9:11:0b:1a:31:6e:1a:8a:39:3a:be:c9:17:a1:bf:
e9:62:d1:97:a2:65:f6:78:16:c6:45:3a:33:b1:4d:
0d:91:2e:64:b5:94:e1:39:95:aa:03:19:b8:77:f9:
0c:44:07:0b:75:0f:99:2b:ba:f9:df:29:88:9d:10:
8a:60:31:66:95:0e:ff:af:30:49:cb:94:65:ea:cf:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A4:4E:FB:7B:7D:9E:DF:35:9B:1F:37:D7:FA:A4:A8:39:37:D4:CB
X509v3 Authority Key Identifier:
keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/323830343a3232303a3a2f33322d3438203d3e20323632373931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:220::/32
Signature Algorithm: sha256WithRSAEncryption
38:cb:df:9b:62:a1:2d:cc:e3:6b:38:79:7a:f6:15:f9:ce:57:
1a:c0:1a:bd:cc:3c:6c:78:8e:83:42:05:4f:ae:93:61:b3:da:
09:b5:da:25:0d:73:02:f8:b2:c7:f6:59:1d:38:9b:a5:15:8f:
ac:44:2a:2b:01:db:8c:57:30:bc:29:fa:f7:09:59:bf:97:02:
34:cc:75:62:f7:67:b6:db:48:1e:51:aa:ab:df:11:e7:90:56:
51:ac:dd:21:56:15:67:19:be:4d:1d:ab:34:a5:88:03:cd:77:
00:23:1c:43:32:f7:30:81:1b:33:34:ca:d7:3e:63:b3:ce:52:
5a:e2:37:95:d8:45:c5:6a:58:50:4f:f6:a5:a2:58:fb:4a:1d:
d9:c7:90:4b:ad:73:7b:61:15:78:73:11:1d:23:cc:30:91:e7:
19:22:bf:95:6a:b9:a5:ae:ce:5c:37:43:98:1d:c8:df:ac:3f:
4d:a4:ca:37:c0:fd:8d:7b:ca:7e:26:88:fd:b7:47:5b:34:a4:
bb:61:6c:eb:0e:06:47:58:61:1f:fe:d3:f2:e0:83:58:e3:55:
c8:7a:c1:c7:fb:1a:76:17:61:8e:a8:14:13:0b:07:e6:d9:f2:
7e:83:49:6f:54:a5:f0:20:0e:d9:fe:6a:48:ee:5e:ee:2b:cc:
d9:a7:f1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 17:43:08 2024 by rpki-client on console-ams.rpki-client.org