Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/323830343a346464343a3a2f33322d3333203d3e20323638323232.roa
File: 323830343a346464343a3a2f33322d3333203d3e20323638323232.roa (raw, json)
Hash identifier: sOTZNFKQbGL/X75k+5dNrVKw2ypZ9yn0SGv7j9ppyYA=
Subject key identifier: 6F:7C:CB:CF:27:86:BD:12:03:4F:A8:0E:BE:B3:09:DC:7E:CB:79:5D
Certificate issuer: /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Certificate serial: 38A96B0A3FBD25D549748DD7DFC6DC0E284C293C
Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/323830343a346464343a3a2f33322d3333203d3e20323638323232.roa
Signing time: Mon 20 May 2024 19:04:13 +0000
ROA not before: Mon 20 May 2024 18:59:13 +0000
ROA not after: Mon 19 May 2025 19:04:13 +0000
asID: 268222
IP address blocks: 2804:4dd4::/32 maxlen: 33
Validation: Failed, certificate revoked on Tue 21 May 2024 12:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a9:6b:0a:3f:bd:25:d5:49:74:8d:d7:df:c6:dc:0e:28:4c:29:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Validity
Not Before: May 20 18:59:13 2024 GMT
Not After : May 19 19:04:13 2025 GMT
Subject: CN=6F7CCBCF2786BD12034FA80EBEB309DC7ECB795D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:bd:af:44:1d:01:32:55:64:6b:7f:75:f4:
a0:20:99:22:d6:2c:22:3f:65:53:12:1d:37:b7:9b:
35:af:75:73:31:9f:d1:be:e8:ee:49:92:af:c8:d2:
b5:8f:69:da:81:d7:4d:78:82:95:ec:c5:9a:41:ba:
12:53:fb:37:76:32:00:e8:94:a8:73:2c:4d:a7:b4:
66:54:35:01:a7:04:28:e4:d5:19:e5:01:58:6d:e5:
8e:09:29:d8:88:42:40:3a:e7:d4:74:df:68:0a:d5:
69:5c:60:6b:11:04:c3:2a:e3:df:79:8a:bc:82:6a:
8e:c7:d3:a7:bb:84:44:40:c7:1d:ce:6f:32:bb:8c:
ca:de:b9:29:00:04:3c:4f:ae:14:05:0e:52:7c:03:
48:da:65:92:19:4f:3d:26:21:8f:ad:9b:7c:60:7a:
8f:ef:85:76:a3:01:b1:83:12:de:a9:64:6d:db:6f:
a6:28:48:77:0c:e1:78:17:2a:ae:df:9b:76:de:87:
01:c2:ec:46:22:5f:19:69:f6:23:79:39:33:e1:0d:
fe:c4:c6:ab:27:73:16:22:b7:42:b1:0d:64:76:4b:
49:42:4e:8b:2d:71:ba:2f:49:8f:79:67:46:55:d0:
ad:50:9d:94:4b:e3:be:4a:74:5e:b9:b5:c4:bb:3e:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7C:CB:CF:27:86:BD:12:03:4F:A8:0E:BE:B3:09:DC:7E:CB:79:5D
X509v3 Authority Key Identifier:
keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/323830343a346464343a3a2f33322d3333203d3e20323638323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4dd4::/32
Signature Algorithm: sha256WithRSAEncryption
ab:c0:3f:b6:37:7f:84:33:f6:20:ab:48:7f:c9:18:00:c8:92:
e7:e4:f7:2c:5c:19:98:a8:5d:e9:ad:23:9b:cf:c2:5d:88:54:
77:2b:82:de:75:e6:0a:62:9f:71:b2:80:de:f1:4b:5b:b6:7b:
42:62:a6:be:bb:27:90:ef:5d:90:97:8e:f9:5b:f2:5c:ca:c5:
af:b1:9a:f9:08:c5:8e:2f:e9:0b:3a:e6:72:c6:71:5b:a1:92:
62:27:5b:29:8e:59:c6:0b:15:d5:b1:91:a6:8e:43:d8:fe:2a:
2d:98:d9:cd:ac:ac:fc:18:97:98:0a:51:3b:d2:a9:68:7b:eb:
90:02:2d:c4:74:16:6d:e5:ae:b5:47:05:30:4a:98:4b:0d:5c:
17:f2:7e:c4:b8:f1:d5:43:5e:d3:1d:d2:de:4e:e9:c1:09:95:
1b:66:71:48:76:4d:78:c3:b6:f5:bf:87:6a:b7:a4:cf:49:bd:
41:0c:a6:c4:16:a1:19:10:7c:a7:34:bc:97:cc:58:48:b1:ea:
ad:6e:60:59:3a:17:0b:b7:72:72:a0:65:e8:a9:47:b5:b8:c2:
96:f5:2f:96:b7:42:78:aa:ae:80:f1:89:11:f6:1a:05:ef:51:
09:5f:f7:ad:16:b7:70:6c:cf:fc:08:20:75:0c:51:0f:39:e9:
3f:e3:41:6b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOKlrCj+9JdVJdI3X38bcDihMKTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERBMUVDNEEwRTQ4QjVDMDlGQjc0NjMyN0YwNUY1MUVC
NUY4RTU3MDAeFw0yNDA1MjAxODU5MTNaFw0yNTA1MTkxOTA0MTNaMDMxMTAvBgNV
BAMTKDZGN0NDQkNGMjc4NkJEMTIwMzRGQTgwRUJFQjMwOURDN0VDQjc5NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ172vRB0BMlVka3919KAgmSLW
LCI/ZVMSHTe3mzWvdXMxn9G+6O5Jkq/I0rWPadqB1014gpXsxZpBuhJT+zd2MgDo
lKhzLE2ntGZUNQGnBCjk1RnlAVht5Y4JKdiIQkA659R032gK1WlcYGsRBMMq4995
iryCao7H06e7hERAxx3ObzK7jMreuSkABDxPrhQFDlJ8A0jaZZIZTz0mIY+tm3xg
eo/vhXajAbGDEt6pZG3bb6YoSHcM4XgXKq7fm3behwHC7EYiXxlp9iN5OTPhDf7E
xqsncxYit0KxDWR2S0lCTostcbovSY95Z0ZV0K1QnZRL475KdF65tcS7PvBNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUb3zLzyeGvRIDT6gOvrMJ3H7LeV0wHwYDVR0j
BBgwFoAU3aHsSg5ItcCft0YyfwX1HrX45XAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERq
UksvMC9EREExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQTFFQzRBMEU0OEI1QzA5
RkI3NDYzMjdGMDVGNTFFQjVGOEU1NzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN4RXpIaG5BWmVhZHpSOGtZZlZzR21WWnRmWEtWcEdRUmROWWRUN1hEalJLLzAv
MzIzODMwMzQzYTM0NjQ2NDM0M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM4
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARN1DANBgkqhkiG9w0BAQsFAAOCAQEAq8A/tjd/
hDP2IKtIf8kYAMiS5+T3LFwZmKhd6a0jm8/CXYhUdyuC3nXmCmKfcbKA3vFLW7Z7
QmKmvrsnkO9dkJeO+VvyXMrFr7Ga+QjFji/pCzrmcsZxW6GSYidbKY5ZxgsV1bGR
po5D2P4qLZjZzays/BiXmApRO9KpaHvrkAItxHQWbeWutUcFMEqYSw1cF/J+xLjx
1UNe0x3S3k7pwQmVG2ZxSHZNeMO29b+Harekz0m9QQymxBahGRB8pzS8l8xYSLHq
rW5gWToXC7dycqBl6KlHtbjClvUvlrdCeKqugPGJEfYaBe9RCV/3rRa3cGzP/Agg
dQxRDznpP+NBaw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:19 2025 by rpki-client