Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/323830343a356166383a3a2f34382d3438203d3e20323638383130.roa
File: 323830343a356166383a3a2f34382d3438203d3e20323638383130.roa (raw, json)
Hash identifier: 8JwsKzR0aqtkU9zmZbuVtVwsZ+E51cQ4fvK8ecUcqgQ=
Subject key identifier: C6:21:FB:24:7F:54:1D:9D:A5:E5:AF:9D:8C:3F:AF:CA:BB:C6:B0:F1
Certificate issuer: /CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
Certificate serial: 1ECEBDEE5AEA28C32460A37B3F36A4D222A355BA
Authority key identifier: 98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/323830343a356166383a3a2f34382d3438203d3e20323638383130.roa
Signing time: Mon 16 Dec 2024 17:23:38 +0000
ROA not before: Mon 16 Dec 2024 17:18:38 +0000
ROA not after: Mon 15 Dec 2025 17:23:38 +0000
asID: 268810
IP address blocks: 2804:5af8::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 17 Dec 2024 14:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ce:bd:ee:5a:ea:28:c3:24:60:a3:7b:3f:36:a4:d2:22:a3:55:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
Validity
Not Before: Dec 16 17:18:38 2024 GMT
Not After : Dec 15 17:23:38 2025 GMT
Subject: CN=C621FB247F541D9DA5E5AF9D8C3FAFCABBC6B0F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:11:18:45:eb:a1:f5:37:4e:05:8b:ec:53:b3:
83:73:b6:17:9a:11:74:f9:6a:f3:aa:d5:db:38:e0:
8a:0d:85:95:fa:4c:09:bf:62:02:e9:fd:cf:62:7d:
4e:72:3c:98:a8:d4:33:9a:1d:40:1e:af:dd:88:70:
f0:b1:25:b2:6f:c5:76:fa:50:97:b0:0f:61:78:e2:
fc:4c:c3:e1:21:89:31:d9:aa:70:bf:08:62:58:7d:
a1:85:7e:af:05:30:65:a3:db:9e:96:b2:67:cc:2f:
8e:1a:b1:f8:04:3f:a6:33:2e:75:8a:b2:a8:64:7f:
82:a5:e5:58:0a:79:25:80:8b:72:ba:9b:03:70:e1:
62:c3:9f:8b:20:91:19:64:c1:c2:a3:57:39:1d:20:
8e:9b:74:9a:8e:64:69:a9:08:1e:c9:a0:02:e0:43:
1c:07:31:76:4b:fe:99:81:50:74:c7:90:74:af:c9:
9a:fc:d6:8f:2a:30:9a:1f:f7:ff:9a:fa:5d:7b:0f:
09:f5:bb:8b:64:99:34:ee:e5:dc:87:75:fd:90:5d:
29:5a:93:e8:0f:8f:8f:a2:02:67:e7:17:48:80:3c:
4a:37:fc:48:b7:0b:41:59:8e:95:5c:30:e4:bc:2d:
23:d9:ca:bb:3e:a4:f6:45:9c:39:c9:4f:85:b0:ec:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:21:FB:24:7F:54:1D:9D:A5:E5:AF:9D:8C:3F:AF:CA:BB:C6:B0:F1
X509v3 Authority Key Identifier:
keyid:98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/323830343a356166383a3a2f34382d3438203d3e20323638383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5af8::/48
Signature Algorithm: sha256WithRSAEncryption
b1:39:cf:35:31:36:23:a7:bc:87:c4:09:1f:f1:2f:e0:c6:46:
d7:2e:41:7a:53:8c:72:cf:6c:70:fc:19:9a:60:d1:47:1b:01:
f5:00:1e:98:0b:97:c0:02:09:60:9a:cb:62:b5:ae:6c:30:cf:
f7:cc:87:62:1b:c1:38:e4:b7:d9:10:ce:75:8d:4d:5f:e3:a8:
13:03:54:eb:55:d5:10:d0:5b:39:56:96:17:cf:a6:fe:17:a2:
86:da:af:ba:5f:d5:9a:70:0a:4c:b0:81:e0:ab:f7:9b:9d:61:
85:3a:bf:17:8d:30:b2:54:db:6c:bd:d2:b8:f1:a0:9b:96:42:
79:79:51:29:f2:e6:37:bd:97:0b:17:d4:9f:d5:3b:01:3e:9d:
7a:11:8a:25:11:18:2a:f5:7e:e9:38:b2:36:f5:ca:92:ae:1c:
f1:62:08:11:b7:80:c4:6e:77:02:b2:38:77:7d:46:db:37:36:
4e:9d:4f:35:52:87:2b:14:32:52:0b:b5:bc:44:98:9e:e3:48:
32:07:40:23:93:63:6b:6c:3c:d2:eb:f7:ba:0b:3e:7e:3e:db:
2f:3f:f1:d8:47:9b:f1:1f:9c:3f:61:ce:2e:66:f2:fa:d4:e8:
de:ee:44:5d:97:0a:90:c3:37:f0:98:5a:bc:b4:e3:7d:64:93:
bd:2c:c1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:21 2025 by rpki-client