Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/323830313a38303a323830303a3a2f34302d3430203d3e20323632343431.roa
File: 323830313a38303a323830303a3a2f34302d3430203d3e20323632343431.roa (raw, json)
Hash identifier: G/jlrEoILen3aJMUorijJMbHvDehXEMFoNcH06Rgoo4=
Subject key identifier: 1A:50:56:3B:5E:6A:FA:D8:E7:8E:49:7F:23:B2:9E:74:92:9A:E6:AA
Certificate issuer: /CN=678F46772FCBBCB74F32E1F308389D268F55A45F
Certificate serial: 77435B7A06B5AF901365AB610C292800164D6D98
Authority key identifier: 67:8F:46:77:2F:CB:BC:B7:4F:32:E1:F3:08:38:9D:26:8F:55:A4:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/678F46772FCBBCB74F32E1F308389D268F55A45F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/323830313a38303a323830303a3a2f34302d3430203d3e20323632343431.roa
Signing time: Wed 28 Feb 2024 13:17:23 +0000
ROA not before: Wed 28 Feb 2024 13:12:23 +0000
ROA not after: Wed 26 Feb 2025 13:17:23 +0000
asID: 262441
IP address blocks: 2801:80:2800::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 11 Mar 2024 19:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:43:5b:7a:06:b5:af:90:13:65:ab:61:0c:29:28:00:16:4d:6d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678F46772FCBBCB74F32E1F308389D268F55A45F
Validity
Not Before: Feb 28 13:12:23 2024 GMT
Not After : Feb 26 13:17:23 2025 GMT
Subject: CN=1A50563B5E6AFAD8E78E497F23B29E74929AE6AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:a3:ed:55:cc:f2:6a:71:e0:98:af:6b:36:
e6:cf:cc:be:42:8f:02:09:a2:7d:72:f2:be:9b:f1:
fd:91:82:b2:c3:36:14:19:f1:00:0a:c3:b9:2e:65:
97:c0:55:e2:8a:df:c4:cc:5d:d4:cb:77:44:a7:6c:
ae:ac:c3:64:28:64:bc:d6:f2:f5:04:d4:ce:6b:a8:
67:fb:3e:e6:db:c8:eb:52:cb:e2:34:1b:b0:fd:d1:
3e:4c:dc:c0:4c:93:fe:04:c0:03:76:8c:68:df:c4:
6d:d5:3a:9f:e7:b3:a5:0e:39:b6:0e:91:77:97:61:
b5:66:60:9b:81:16:0d:b0:e3:4f:74:79:47:d1:f4:
48:ae:7c:72:39:ca:c2:41:1e:e9:9a:21:74:ce:1d:
0b:6e:88:67:82:d9:6c:71:e2:e5:d5:15:bc:66:b1:
4c:43:6a:f9:7d:4f:74:dc:94:cf:ec:11:bf:68:77:
b8:c2:4b:b3:45:66:6a:d8:b0:43:fd:64:c2:54:9e:
dd:5f:4e:13:3a:f7:91:1b:dc:1e:42:3a:52:02:08:
9c:bb:b4:dd:a7:26:b4:e3:73:cd:d8:cf:45:d4:c5:
de:5c:5d:4e:6d:de:06:24:52:45:b2:f7:41:15:81:
74:d2:29:0a:a4:a1:7d:de:50:d0:68:21:0d:fa:59:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:50:56:3B:5E:6A:FA:D8:E7:8E:49:7F:23:B2:9E:74:92:9A:E6:AA
X509v3 Authority Key Identifier:
keyid:67:8F:46:77:2F:CB:BC:B7:4F:32:E1:F3:08:38:9D:26:8F:55:A4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/678F46772FCBBCB74F32E1F308389D268F55A45F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/678F46772FCBBCB74F32E1F308389D268F55A45F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/323830313a38303a323830303a3a2f34302d3430203d3e20323632343431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:2800::/40
Signature Algorithm: sha256WithRSAEncryption
82:c8:82:fd:83:5c:64:88:e0:45:f0:bf:ee:5c:ab:32:7b:d6:
3d:be:e0:86:6b:13:92:65:83:13:9d:dd:0d:e8:1c:f4:72:47:
aa:d8:72:f1:b7:2b:d5:e8:5b:9f:90:57:11:3e:e0:a4:99:d9:
9f:6d:e7:6b:4a:55:ce:76:c1:65:92:0a:d7:80:3f:6b:37:1a:
b6:56:ac:e4:4e:f9:33:a9:14:49:08:a6:14:4e:88:eb:46:9c:
96:ee:7c:92:3f:3d:3b:68:9c:2e:35:6d:16:92:d1:3c:fe:63:
9f:11:38:42:6e:e6:a9:fc:4c:16:9d:e1:55:74:b1:d5:2e:3e:
b4:f4:67:0b:c1:5c:a7:41:93:ed:6b:62:49:8e:c2:1d:d6:50:
83:cd:ae:a1:99:db:ae:0b:d7:35:76:62:23:52:5d:66:1c:e5:
a1:4f:c1:7a:eb:22:ff:86:d2:63:12:74:a3:f6:fe:b7:68:bd:
58:53:86:48:cc:95:42:39:d4:a5:8b:c2:53:47:88:9a:f4:e2:
c4:d5:41:b1:83:21:2a:85:58:fc:97:d1:84:f0:17:35:f6:ff:
94:7e:55:4e:cd:4d:07:04:65:d9:03:ca:a8:7d:22:a3:e1:95:
10:42:99:f0:67:3c:70:65:ea:ef:c2:b6:91:39:8a:f3:6a:bc:
0d:4d:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 23:22:36 2024 by rpki-client on console-ams.rpki-client.org