Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d3332203d3e20323733343331.roa
File: 323830343a386538343a3a2f33322d3332203d3e20323733343331.roa (raw, json)
Hash identifier: zvZEaPb9pYgswMqxOImxheeS1HpGFg5/EXrz9/X0WM4=
Subject key identifier: A3:34:71:39:65:2F:61:45:6A:CE:21:B5:E3:B2:5B:D8:5C:33:13:61
Certificate issuer: /CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
Certificate serial: 37A74E20844D4157BB374EE78DF52D17E4604B80
Authority key identifier: 8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d3332203d3e20323733343331.roa
Signing time: Wed 17 Apr 2024 11:37:10 +0000
ROA not before: Wed 17 Apr 2024 11:32:10 +0000
ROA not after: Wed 16 Apr 2025 11:37:10 +0000
asID: 273431
IP address blocks: 2804:8e84::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a7:4e:20:84:4d:41:57:bb:37:4e:e7:8d:f5:2d:17:e4:60:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
Validity
Not Before: Apr 17 11:32:10 2024 GMT
Not After : Apr 16 11:37:10 2025 GMT
Subject: CN=A3347139652F61456ACE21B5E3B25BD85C331361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:9f:f4:00:09:54:1e:a2:0c:60:9d:24:4b:
b2:02:b0:cb:1d:ad:59:df:2c:38:fb:b1:df:a3:bf:
b9:e3:59:98:56:8e:b1:9d:13:1d:19:7f:e2:c0:31:
38:6e:67:2e:a2:4b:21:bf:43:a8:6d:4c:a2:29:87:
56:6b:27:3b:59:27:93:06:44:8f:00:47:11:c8:79:
50:02:b7:71:2f:0d:26:69:35:7c:47:a0:e0:1d:e9:
30:a0:dc:23:54:bd:37:6f:56:68:ae:0e:14:c4:12:
b3:0d:e8:84:62:18:cb:86:75:51:5b:ba:6e:fc:74:
56:b7:b6:91:72:7d:e4:4a:d5:a2:f0:75:a4:57:56:
3c:ca:47:fd:49:7f:c3:41:14:34:27:14:91:fb:a3:
c4:bf:2f:0b:c0:bd:36:02:d2:11:75:73:5b:f7:f6:
4f:e5:c1:87:cc:96:d1:fe:9f:01:55:7a:f6:a4:50:
e5:ae:e7:17:54:92:4b:dd:1e:8c:f3:42:3e:c2:22:
6e:05:a8:28:13:1f:c4:9a:70:d1:7f:23:7b:86:e3:
7e:3d:f9:71:a6:7a:9f:4b:2e:19:50:5d:f0:95:e9:
84:70:4b:f3:eb:33:0a:cc:41:7a:6f:a4:e0:08:5d:
c0:88:0e:69:9b:16:84:64:fb:6d:57:22:a8:e4:1d:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:34:71:39:65:2F:61:45:6A:CE:21:B5:E3:B2:5B:D8:5C:33:13:61
X509v3 Authority Key Identifier:
keyid:8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d3332203d3e20323733343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8e84::/32
Signature Algorithm: sha256WithRSAEncryption
37:59:6b:85:24:b8:bb:fc:01:f5:45:f0:65:52:a3:45:f7:92:
c8:08:f9:6f:bf:67:c6:e9:64:c6:d9:79:70:da:6f:0a:35:13:
ef:08:df:ce:02:4d:a4:6c:1c:13:75:fb:a2:56:99:79:5f:4a:
c2:a4:62:58:91:6c:5f:6b:91:11:b9:8b:75:62:c8:d0:41:ff:
db:56:cc:04:88:2c:4f:85:52:6c:c4:6d:77:f2:f7:4e:cb:41:
0c:0b:df:23:bb:44:28:c3:bd:a2:37:22:d2:22:02:7e:bc:2c:
ef:32:4e:ff:e7:9e:75:1e:22:c8:79:f9:cf:cb:44:0e:8a:91:
d1:1d:c1:ae:68:95:66:15:83:8b:0d:1a:c9:c2:4c:69:72:61:
7d:14:b5:d6:b7:37:15:90:d7:1f:75:7c:57:a2:9b:20:f3:5e:
fd:33:78:ae:d2:a1:96:e0:60:18:97:87:e5:40:58:aa:3b:8c:
c7:f4:92:c1:27:99:04:ae:92:63:e2:81:6b:18:68:de:d7:d6:
27:5f:19:83:70:38:7b:b1:64:38:f0:b5:72:07:9a:b4:ef:26:
10:bd:5f:29:98:9d:5d:b2:6b:9d:c8:8c:ef:a7:64:2c:5c:13:
e1:8a:0d:e1:54:a8:bc:60:1e:84:54:9c:65:82:c4:5c:78:8a:
c2:c4:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org