Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a633030303a3a2f33342d3334203d3e20323638333230.roa
File: 323830343a346635343a633030303a3a2f33342d3334203d3e20323638333230.roa (raw, json)
Hash identifier: Z6XQAM6mNkmXsJ9/jIwQAw3I7ZDjdRW6OipX14iXlJo=
Subject key identifier: 35:DD:83:BE:67:41:5C:D9:A1:D0:45:F1:C1:98:A8:B5:0D:E1:38:EB
Certificate issuer: /CN=D0436FEA91781D055687421CAEF481A6EC223F53
Certificate serial: 3DA7F265CECB3A88C44B4858BB10C1F9E7DA5B26
Authority key identifier: D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a633030303a3a2f33342d3334203d3e20323638333230.roa
Signing time: Thu 03 Aug 2023 17:02:47 +0000
ROA not before: Thu 03 Aug 2023 16:57:47 +0000
ROA not after: Thu 01 Aug 2024 17:02:47 +0000
asID: 268320
IP address blocks: 2804:4f54:c000::/34 maxlen: 34
Validation: Failed, certificate revoked on Mon 04 Mar 2024 15:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a7:f2:65:ce:cb:3a:88:c4:4b:48:58:bb:10:c1:f9:e7:da:5b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0436FEA91781D055687421CAEF481A6EC223F53
Validity
Not Before: Aug 3 16:57:47 2023 GMT
Not After : Aug 1 17:02:47 2024 GMT
Subject: CN=35DD83BE67415CD9A1D045F1C198A8B50DE138EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:a1:b7:9e:d5:16:8b:4f:a1:71:80:f3:59:
bd:a1:3f:4d:96:df:42:29:f6:34:67:ab:da:25:bb:
6f:02:09:cf:9d:cc:79:61:6c:23:c7:11:fd:42:a1:
7c:3f:a7:1b:11:1d:a1:15:d0:ec:4b:33:53:15:d3:
d8:07:77:d2:47:d9:84:cb:f4:a2:07:fa:39:80:fa:
ae:05:1f:c3:c0:44:b1:f6:54:d5:2e:33:02:26:99:
e1:28:76:02:90:bd:e6:68:3b:a8:f1:86:10:79:9c:
3b:25:0a:aa:a3:ea:d3:21:35:06:0b:56:ee:ec:a0:
04:ce:b3:ef:d1:a7:19:fd:40:cf:e3:3c:ca:c0:a1:
74:f1:4b:4d:86:71:79:9e:f0:20:db:11:27:89:e6:
1b:a0:b0:12:a2:04:6c:f2:f2:60:ae:d2:68:63:e9:
10:27:b8:36:7d:3e:5b:ff:78:7e:ed:72:00:ab:23:
dc:30:11:96:86:2f:41:6d:98:a7:15:2c:b7:9f:10:
aa:8a:98:67:49:97:f5:32:0e:9e:19:ec:62:e3:6d:
01:fe:e7:89:e4:53:f4:90:cd:48:70:92:d5:e3:c1:
28:88:76:9e:a1:35:f4:a9:b3:07:1a:90:47:82:a3:
45:6e:9d:8e:96:4f:3d:9c:4e:33:8b:92:5f:ed:3f:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DD:83:BE:67:41:5C:D9:A1:D0:45:F1:C1:98:A8:B5:0D:E1:38:EB
X509v3 Authority Key Identifier:
keyid:D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/D0436FEA91781D055687421CAEF481A6EC223F53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a633030303a3a2f33342d3334203d3e20323638333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4f54:c000::/34
Signature Algorithm: sha256WithRSAEncryption
ba:76:7a:1d:46:39:87:2a:e7:7e:ce:b1:fe:cd:02:b0:dd:a9:
67:1a:c7:7b:20:a7:4a:8f:5d:a9:45:7d:fe:e7:bd:6f:52:8b:
9a:1b:af:d9:d1:20:d5:4c:f9:58:f1:b2:91:43:2b:4d:15:bd:
70:2d:b7:10:cb:4d:ba:0f:ab:2b:e4:6d:cd:f4:3b:59:36:07:
9e:79:fb:da:c6:cd:f3:a1:4f:67:ee:b4:13:86:c2:8c:70:11:
c9:69:0b:4f:6f:74:19:75:cb:67:bc:b6:1c:b1:bb:87:74:a7:
1d:f5:4f:5b:07:3e:f6:49:89:00:4a:5d:2c:fe:a6:c1:8c:f7:
2a:b4:30:f1:de:a9:71:99:07:38:1b:6c:11:68:f7:48:9b:c9:
d9:f6:2c:30:7e:b2:b2:26:86:e4:79:2c:52:45:89:c7:58:48:
0d:a3:c1:c5:de:6a:34:36:5a:4a:01:f6:0f:7a:30:6a:cf:56:
61:9f:b4:79:e8:d9:2c:99:5a:c3:90:c0:2d:d6:50:74:96:3e:
24:9e:f9:4c:8f:20:20:76:ec:98:18:d2:62:eb:2a:c5:05:b8:
4a:3b:55:71:bc:ff:33:be:84:71:f8:1d:60:58:43:fe:91:b1:
34:bc:c9:00:43:7f:09:17:73:03:3b:cc:4f:4c:63:e6:b6:88:
d2:a1:20:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 19:43:25 2024 by rpki-client on console-fra.rpki-client.org