Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/323830343a356166383a3a2f33322d3332203d3e20323638383130.roa
File: 323830343a356166383a3a2f33322d3332203d3e20323638383130.roa (raw, json)
Hash identifier: dRpXM7ZnJMRmHJgUKwTb7iR5Mu3SOL/PYrnjZMRTypw=
Subject key identifier: A3:09:D1:AB:F2:5E:B4:45:B6:97:52:CE:31:6E:2E:97:7B:B4:14:CC
Certificate issuer: /CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
Certificate serial: 3924409011FBA55AECA743F44DE075A7AC76014A
Authority key identifier: 98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/323830343a356166383a3a2f33322d3332203d3e20323638383130.roa
Signing time: Mon 16 Dec 2024 17:18:04 +0000
ROA not before: Mon 16 Dec 2024 17:13:04 +0000
ROA not after: Mon 15 Dec 2025 17:18:04 +0000
asID: 268810
IP address blocks: 2804:5af8::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 17 Dec 2024 14:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:24:40:90:11:fb:a5:5a:ec:a7:43:f4:4d:e0:75:a7:ac:76:01:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
Validity
Not Before: Dec 16 17:13:04 2024 GMT
Not After : Dec 15 17:18:04 2025 GMT
Subject: CN=A309D1ABF25EB445B69752CE316E2E977BB414CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:c3:17:c7:ee:46:d1:b9:b3:4f:cc:1f:55:
68:ab:42:d4:6b:db:d6:e5:c1:2d:33:c5:09:44:95:
87:c9:bb:25:93:f1:a3:2e:e8:71:50:dc:f9:c1:cc:
62:24:65:cf:e9:3f:29:c7:9b:bf:cb:f2:71:34:9f:
40:93:8d:e3:e2:c2:71:0c:de:1f:39:da:33:42:f5:
dc:c1:e3:1a:84:4f:13:f2:9f:e7:0c:15:0c:a5:73:
1e:de:50:a9:97:29:5d:39:9a:53:a0:57:96:38:52:
f5:e2:60:57:86:fb:8a:d2:f9:52:98:1f:5f:0c:7e:
4c:ed:58:6f:88:a0:17:8c:18:4e:d0:34:dd:65:d0:
71:d5:4d:36:b1:cc:ef:62:14:98:c5:7d:ad:4b:df:
1a:15:30:15:e6:28:fa:87:eb:fb:d4:40:a9:3d:74:
2b:df:79:ba:42:83:71:d7:e2:9e:49:ce:53:85:93:
f5:c8:c1:65:f9:c4:c0:e2:f6:a1:5a:ea:36:33:62:
e7:e1:0b:79:51:c6:a2:d5:f9:b5:bb:e8:0b:a4:79:
22:32:a2:48:ea:91:ec:46:af:c4:ea:c8:a2:02:01:
66:59:ba:28:78:dc:6a:d1:68:bc:8d:9d:8f:24:dd:
b1:4e:68:36:d5:a0:c3:ff:7c:09:a5:1a:24:f2:d3:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:09:D1:AB:F2:5E:B4:45:B6:97:52:CE:31:6E:2E:97:7B:B4:14:CC
X509v3 Authority Key Identifier:
keyid:98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/323830343a356166383a3a2f33322d3332203d3e20323638383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5af8::/32
Signature Algorithm: sha256WithRSAEncryption
11:38:8e:e7:11:94:21:2d:b3:c9:1d:01:87:df:93:7f:7e:37:
3b:ac:ed:88:bf:4c:d0:27:97:ce:17:e3:98:3c:12:d7:7a:c1:
15:58:f0:e3:96:8e:f5:c8:44:ab:50:26:91:49:96:27:bf:cf:
bb:65:98:e1:c2:6c:16:0b:09:5b:52:27:6b:51:52:bd:00:30:
eb:7b:18:ca:90:9f:fa:40:b5:f0:4a:9a:ff:cf:78:90:88:1f:
eb:c4:d3:c8:bb:37:fa:24:9c:07:45:e8:15:c7:21:23:0a:bb:
47:3e:f6:79:67:ca:5f:fc:a9:a5:75:45:94:92:1c:e2:6f:a9:
ca:69:58:d5:ce:6a:b4:44:70:2f:f3:19:54:9c:87:f4:19:90:
61:35:f7:ab:e7:81:4e:1d:58:42:46:16:b6:02:cf:72:ce:97:
d3:b9:89:97:86:af:94:0c:e6:1e:5f:b5:00:c6:af:e4:4d:9b:
97:3d:45:25:40:8d:a1:cc:39:21:b0:f8:71:58:1a:85:66:c2:
9d:9e:2c:3b:73:63:be:15:ca:22:ec:a9:b6:64:71:3b:d8:d5:
74:83:1c:3b:25:b0:83:78:e6:e5:35:58:e9:75:c7:ec:cd:b5:
5a:1d:a5:bd:c9:48:98:cb:f4:e1:2d:5f:f1:5a:de:d7:34:62:
56:65:ed:b2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOSRAkBH7pVrsp0P0TeB1p6x2AUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThFMzE2NEVGQTZFQTlBQTlEODhCNzJFQUZGQTBDQ0ZF
OTNDNDRFMjAeFw0yNDEyMTYxNzEzMDRaFw0yNTEyMTUxNzE4MDRaMDMxMTAvBgNV
BAMTKEEzMDlEMUFCRjI1RUI0NDVCNjk3NTJDRTMxNkUyRTk3N0JCNDE0Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijMMXx+5G0bmzT8wfVWirQtRr
29blwS0zxQlElYfJuyWT8aMu6HFQ3PnBzGIkZc/pPynHm7/L8nE0n0CTjePiwnEM
3h852jNC9dzB4xqETxPyn+cMFQylcx7eUKmXKV05mlOgV5Y4UvXiYFeG+4rS+VKY
H18MfkztWG+IoBeMGE7QNN1l0HHVTTaxzO9iFJjFfa1L3xoVMBXmKPqH6/vUQKk9
dCvfebpCg3HX4p5JzlOFk/XIwWX5xMDi9qFa6jYzYufhC3lRxqLV+bW76AukeSIy
okjqkexGr8TqyKICAWZZuih43GrRaLyNnY8k3bFOaDbVoMP/fAmlGiTy04IFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUownRq/JetEW2l1LOMW4ul3u0FMwwHwYDVR0j
BBgwFoAUmOMWTvpuqaqdiLcur/oMz+k8ROIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFQ2N1Z3YzRTVnpCWEVHdlh3ZmJ6QVdZUFdxcjJIeE40UnpCZTdvN1o5
dDIvMC85OEUzMTY0RUZBNkVBOUFBOUQ4OEI3MkVBRkZBMENDRkU5M0M0NEUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RTMxNjRFRkE2RUE5QUE5
RDg4QjcyRUFGRkEwQ0NGRTkzQzQ0RTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUNjdWd2M0U1Z6QlhFR3ZYd2ZiekFXWVBXcXIySHhONFJ6QmU3bzdaOXQyLzAv
MzIzODMwMzQzYTM1NjE2NjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzgzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARa+DANBgkqhkiG9w0BAQsFAAOCAQEAETiO5xGU
IS2zyR0Bh9+Tf343O6ztiL9M0CeXzhfjmDwS13rBFVjw45aO9chEq1AmkUmWJ7/P
u2WY4cJsFgsJW1Ina1FSvQAw63sYypCf+kC18Eqa/894kIgf68TTyLs3+iScB0Xo
FcchIwq7Rz72eWfKX/yppXVFlJIc4m+pymlY1c5qtERwL/MZVJyH9BmQYTX3q+eB
Th1YQkYWtgLPcs6X07mJl4avlAzmHl+1AMav5E2blz1FJUCNocw5IbD4cVgahWbC
nZ4sO3NjvhXKIuyptmRxO9jVdIMcOyWwg3jm5TVY6XXH7M21Wh2lvclImMv04S1f
8Vre1zRiVmXtsg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 04:00:01 2025 by rpki-client