Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313465303a3a2f34332d3438203d3e203131303937.roa
File: 323830313a38303a313465303a3a2f34332d3438203d3e203131303937.roa (raw, json)
Hash identifier: aAHtpO1JaCajjRXop7GuWRBvmqg2/WHr/P6w63FsHio=
Subject key identifier: AE:AD:A3:57:3A:8C:6C:0E:BF:45:5E:41:9D:49:FA:99:FC:F8:2C:25
Certificate issuer: /CN=35121215105D7401F74741FEB8604A2A9FA7E6DF
Certificate serial: 3EA994C6ACBC1E0DEED7A6E6A4DBF26F3D897C78
Authority key identifier: 35:12:12:15:10:5D:74:01:F7:47:41:FE:B8:60:4A:2A:9F:A7:E6:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35121215105D7401F74741FEB8604A2A9FA7E6DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313465303a3a2f34332d3438203d3e203131303937.roa
Signing time: Fri 16 Aug 2024 14:37:27 +0000
ROA not before: Fri 16 Aug 2024 14:32:27 +0000
ROA not after: Fri 15 Aug 2025 14:37:27 +0000
asID: 11097
IP address blocks: 2801:80:14e0::/43 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Aug 2024 17:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a9:94:c6:ac:bc:1e:0d:ee:d7:a6:e6:a4:db:f2:6f:3d:89:7c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35121215105D7401F74741FEB8604A2A9FA7E6DF
Validity
Not Before: Aug 16 14:32:27 2024 GMT
Not After : Aug 15 14:37:27 2025 GMT
Subject: CN=AEADA3573A8C6C0EBF455E419D49FA99FCF82C25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:86:7d:6c:ba:5c:3d:63:74:1b:f1:08:48:
4d:40:4c:97:96:03:46:40:62:ee:7b:78:df:a8:37:
06:8d:8a:37:8e:eb:cd:19:d2:a4:18:0f:f3:28:d0:
6c:7c:3f:76:1a:55:73:9f:36:79:6c:e8:dd:17:e5:
61:31:57:02:dd:8f:1d:02:aa:a6:c9:30:1a:3d:57:
98:c3:ab:12:e6:84:c9:19:ff:e6:c9:16:5f:97:59:
c3:34:5a:60:6b:58:e9:3b:e3:69:45:ed:c3:f7:75:
75:58:be:07:d8:0c:83:2c:ed:c3:00:e9:57:6a:12:
86:b2:e7:5c:73:2c:32:15:b3:53:00:da:ec:ea:f1:
03:19:27:35:ce:1d:7c:d5:39:b5:1a:bf:2c:f8:2c:
04:ec:0d:be:51:0f:e8:c9:ee:b2:5b:0b:c5:85:ab:
7e:e4:46:06:3d:0c:a8:d2:dd:3d:f6:b7:99:d7:f3:
f1:13:9b:78:d8:ce:71:3d:92:1b:da:f7:10:5a:57:
f2:5d:46:3c:e7:75:97:b1:b9:c5:52:e9:4e:ff:2e:
dc:21:c8:48:7a:ae:61:29:69:34:59:49:2e:6a:29:
a0:e5:47:a8:69:2b:e3:db:17:85:9a:59:e6:87:0f:
72:2e:46:ba:aa:b0:26:ec:bf:5c:96:8f:2c:a6:7f:
d7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AD:A3:57:3A:8C:6C:0E:BF:45:5E:41:9D:49:FA:99:FC:F8:2C:25
X509v3 Authority Key Identifier:
keyid:35:12:12:15:10:5D:74:01:F7:47:41:FE:B8:60:4A:2A:9F:A7:E6:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/35121215105D7401F74741FEB8604A2A9FA7E6DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35121215105D7401F74741FEB8604A2A9FA7E6DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313465303a3a2f34332d3438203d3e203131303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:14e0::/43
Signature Algorithm: sha256WithRSAEncryption
44:e2:a5:d6:88:b5:c4:ce:be:69:65:3f:88:7c:e9:30:cc:de:
61:7f:69:0f:ed:39:5a:dc:89:9f:1a:47:2b:c1:6d:b5:98:13:
39:95:f9:25:84:88:c3:6c:48:4d:de:5a:b5:6f:c9:a5:79:16:
c3:07:d8:33:d6:6d:35:6c:d7:4c:b6:2c:71:3a:d4:1a:fa:e4:
ea:db:72:f8:c2:dd:4b:53:d2:af:9d:e5:47:13:31:82:2b:30:
59:60:eb:01:3f:15:ad:5c:f7:43:ab:f4:e4:d8:98:d9:c6:52:
cf:f6:a9:2a:79:dc:b0:86:30:5b:85:89:10:c0:4a:a8:3b:35:
7c:94:e7:19:37:3a:04:35:28:cd:07:40:5a:c3:94:0b:08:9a:
06:7e:2d:20:90:d7:04:81:0e:c2:5b:25:a9:23:8f:27:a2:55:
ad:9a:d8:24:32:1e:6f:0a:c2:9b:ed:58:74:89:57:a4:5e:0f:
c2:56:ad:90:9b:0b:55:52:43:c7:f8:52:f6:3a:b9:5d:37:e5:
8d:d6:8e:6f:ff:0e:44:9f:47:4c:28:a6:d2:c5:d1:f2:16:67:
e7:d4:f8:b5:83:0a:5c:93:9d:ae:82:51:e7:28:f0:df:63:bf:
59:af:3d:3a:b2:27:23:98:59:f2:f7:89:a3:2e:b8:f9:fe:be:
51:77:7c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 23:31:39 2024 by rpki-client on console-ams.rpki-client.org