Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/323830343a346634343a3230303a3a2f34302d3430203d3e20323638333136.roa
File: 323830343a346634343a3230303a3a2f34302d3430203d3e20323638333136.roa (raw, json)
Hash identifier: Fm9Zt2WRXX9t9d/1Gv6Zh8nkb1fzhQyWOkYpoC+cifg=
Subject key identifier: 2E:B8:81:4D:88:D6:FA:56:D9:E8:70:AB:95:44:B3:54:25:97:C7:E2
Certificate issuer: /CN=6394333A258FBDBBD544DE363E2767998C64BB78
Certificate serial: 73E730CE35800F0CBF32C8A2D5B1A0FAD3FEA71A
Authority key identifier: 63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6394333A258FBDBBD544DE363E2767998C64BB78.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/323830343a346634343a3230303a3a2f34302d3430203d3e20323638333136.roa
Signing time: Wed 29 May 2024 11:34:24 +0000
ROA not before: Wed 29 May 2024 11:29:24 +0000
ROA not after: Wed 28 May 2025 11:34:24 +0000
asID: 268316
IP address blocks: 2804:4f44:200::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 31 May 2024 18:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e7:30:ce:35:80:0f:0c:bf:32:c8:a2:d5:b1:a0:fa:d3:fe:a7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6394333A258FBDBBD544DE363E2767998C64BB78
Validity
Not Before: May 29 11:29:24 2024 GMT
Not After : May 28 11:34:24 2025 GMT
Subject: CN=2EB8814D88D6FA56D9E870AB9544B3542597C7E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:3d:65:85:0e:fd:8a:3f:cb:31:bb:db:2f:
f7:f2:c7:30:a3:fb:d8:4f:c4:fd:6f:b1:a3:07:d5:
cd:92:36:12:6e:33:8d:23:ab:7a:55:fb:0b:fd:21:
67:30:61:0f:f0:56:70:c7:d4:29:77:79:81:a4:88:
ae:22:3e:2b:bf:68:a3:4d:9d:f6:30:12:c5:fd:9c:
ba:7f:fc:ea:34:ad:71:ee:4f:50:1d:24:c2:60:4f:
0d:1d:5d:55:40:83:64:81:ae:48:1e:34:ad:88:bb:
69:31:75:44:0b:fa:08:0d:10:ae:45:7e:bc:17:b8:
5d:2b:9a:76:52:9a:13:18:e7:c0:88:3f:29:f6:04:
bc:ab:9d:9b:87:c9:c3:bb:69:79:5f:79:ae:ce:a4:
58:4d:35:03:f4:4c:fd:fb:b7:a5:4f:d8:69:94:0d:
04:9b:1e:d8:8f:5d:05:6e:b2:d8:80:2e:da:e8:0d:
92:7f:04:cf:90:fb:6b:42:5c:98:7d:9c:f0:f5:90:
66:b9:6f:10:ea:47:b4:af:53:ed:e7:b4:3a:b7:8a:
28:ae:5f:b6:32:95:49:ef:c8:e6:f5:d8:7c:d8:c8:
c1:3c:ed:0d:c9:0a:cd:6f:0f:56:23:82:b7:18:a8:
ec:e2:aa:c6:13:d4:11:c0:0f:87:51:55:8e:cf:04:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B8:81:4D:88:D6:FA:56:D9:E8:70:AB:95:44:B3:54:25:97:C7:E2
X509v3 Authority Key Identifier:
keyid:63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/6394333A258FBDBBD544DE363E2767998C64BB78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6394333A258FBDBBD544DE363E2767998C64BB78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/323830343a346634343a3230303a3a2f34302d3430203d3e20323638333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4f44:200::/40
Signature Algorithm: sha256WithRSAEncryption
97:46:b9:7e:55:d1:3b:d1:ca:31:a1:a9:c0:bc:fc:de:d0:77:
39:e2:11:71:df:c3:6f:38:68:6d:f2:dc:ad:b7:bd:81:ac:1b:
ac:9f:94:43:14:0c:87:81:4b:f4:41:b6:ae:73:32:e9:bc:bf:
d6:d8:2a:be:e5:6e:48:0e:fd:8f:94:e1:b5:d8:9c:a9:d5:34:
64:bf:0e:86:77:61:e2:4b:b6:f4:4a:48:ae:44:7f:9e:d5:63:
19:4f:76:d4:db:cb:51:38:11:95:81:b3:cd:4f:d1:08:93:bd:
53:35:de:7b:21:72:46:95:07:3b:3d:02:5c:06:fb:fe:77:8f:
67:49:3e:f9:a0:42:1d:c6:da:ca:5a:f6:81:2e:d7:86:e4:91:
43:05:37:8a:35:2f:59:38:f8:cb:e3:13:20:86:a3:e0:ac:a0:
1d:66:47:27:ca:79:d7:1c:fa:d6:44:48:19:d5:34:b4:3d:20:
14:4c:5e:61:1c:e5:35:f1:14:4e:96:5e:81:b4:0e:f9:b9:5c:
cd:d1:f7:3e:2c:b1:78:64:b9:64:c2:fa:dd:81:2a:bc:9f:83:
19:34:d4:8b:af:13:73:5e:75:58:cb:14:4c:0c:54:35:76:f9:
d6:4e:fe:b7:6e:53:3d:bf:4c:a1:06:81:b2:2b:e6:f4:a9:06:
e5:c0:78:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org