Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/323830343a323264633a3a2f33322d313238203d3e20323634313237.roa
File: 323830343a323264633a3a2f33322d313238203d3e20323634313237.roa (raw, json)
Hash identifier: iYDnpcMHkaGzNO7gIY/DrPZv1ulWPd1Nlh+aVYROuAo=
Subject key identifier: 88:5C:E8:8E:24:63:79:7B:8F:FB:71:4B:93:D7:8D:48:68:CD:00:5A
Certificate issuer: /CN=154E883FCB52E91706C17788E2199491DC6E45F7
Certificate serial: 16C2221CC03067FD139E11ED0CEC86298CF24F0A
Authority key identifier: 15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/323830343a323264633a3a2f33322d313238203d3e20323634313237.roa
Signing time: Thu 26 Dec 2024 23:12:57 +0000
ROA not before: Thu 26 Dec 2024 23:07:57 +0000
ROA not after: Thu 25 Dec 2025 23:12:57 +0000
asID: 264127
IP address blocks: 2804:22dc::/32 maxlen: 128
Validation: Failed, certificate revoked on Sat 08 Mar 2025 20:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c2:22:1c:c0:30:67:fd:13:9e:11:ed:0c:ec:86:29:8c:f2:4f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154E883FCB52E91706C17788E2199491DC6E45F7
Validity
Not Before: Dec 26 23:07:57 2024 GMT
Not After : Dec 25 23:12:57 2025 GMT
Subject: CN=885CE88E2463797B8FFB714B93D78D4868CD005A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:29:f9:b7:a7:65:bb:f7:8b:9a:25:cf:3a:
f5:8c:89:94:b8:e0:3d:aa:e4:39:71:7c:c1:14:91:
61:a7:17:a9:fc:93:11:ec:52:8e:f4:59:e7:5e:b4:
2d:4f:4a:dc:d2:47:47:6f:6e:1c:e0:df:f5:1b:75:
e2:95:5c:69:49:5c:65:e2:17:18:b6:21:c5:a3:8a:
ce:51:c0:c3:b7:08:8e:60:7e:cf:79:31:44:47:3f:
19:61:cc:cb:8b:fa:81:e1:4b:12:cf:73:af:e6:88:
c1:14:c3:50:10:3e:4d:d9:f2:54:d7:80:80:b3:e2:
93:0a:dd:f0:5e:b5:ec:15:f7:2c:32:2c:f8:75:4f:
96:76:91:2b:b2:4d:9d:06:74:ac:46:e8:40:22:96:
fa:86:08:62:45:d8:41:95:23:28:8f:9b:4e:70:57:
8f:62:7f:ec:b3:cb:dd:4b:89:c9:4d:c5:b6:7a:3b:
52:24:9f:05:46:5c:33:41:74:32:82:08:2e:ea:ab:
f5:74:49:28:0e:cb:65:74:c6:3b:3b:ad:bc:65:61:
08:e3:5a:ef:18:8f:87:7d:3c:3e:fc:36:50:4e:e3:
94:62:fa:a1:02:d5:f9:c1:2a:ca:cb:84:c7:c3:42:
bc:09:6d:d9:48:0f:fd:a7:e1:3a:ae:c2:5d:df:90:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5C:E8:8E:24:63:79:7B:8F:FB:71:4B:93:D7:8D:48:68:CD:00:5A
X509v3 Authority Key Identifier:
keyid:15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/323830343a323264633a3a2f33322d313238203d3e20323634313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:22dc::/32
Signature Algorithm: sha256WithRSAEncryption
57:16:e7:3a:49:18:ba:72:a8:8c:b6:c6:fe:b9:02:e2:67:34:
b5:45:62:f1:74:29:61:57:5f:e8:39:04:26:64:6e:e4:2e:fa:
21:39:4a:1d:a0:3c:f7:2d:31:86:1e:24:d4:e4:f7:a9:af:5d:
e6:72:07:17:cb:c3:8b:6a:56:d2:f1:54:f7:23:3f:ee:4d:c2:
93:02:af:b9:86:11:84:ed:df:48:98:df:3f:ed:bc:38:67:d4:
7a:f4:56:82:43:3b:1e:d9:19:c3:8f:74:5c:f9:42:72:a3:5b:
27:35:a2:40:ee:49:57:d6:c4:b1:32:5f:ca:e9:11:df:ba:8b:
98:0e:a5:2a:11:0c:c7:a4:1a:a7:7f:37:ca:21:70:4a:6f:c6:
ca:a4:eb:13:2b:e9:f2:2a:0c:02:9d:c6:d4:26:3f:4c:0a:5d:
6f:fe:c1:9f:71:1a:ad:ea:49:74:08:9a:0e:b2:65:ee:ab:b4:
db:0c:95:c6:7a:1a:86:8f:8f:43:b5:bf:c4:90:b7:2f:5a:42:
84:90:29:a3:05:a0:d4:4d:ff:e8:17:13:6c:30:21:e2:a4:d8:
be:3d:4f:fa:02:f3:5e:b8:19:f0:da:a0:77:1e:3e:4a:84:c3:
c7:9e:61:ca:9d:22:9f:99:d8:cb:ef:2e:e9:60:a8:a6:b8:c4:
45:3e:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:24:40 2025 by rpki-client