Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33322d3332203d3e20323637303738.roa
File: 323830343a343764303a3a2f33322d3332203d3e20323637303738.roa (raw, json)
Hash identifier: VLNPpE9TnUOfx8XcuVMoGvLWNR/2NCJfO5PDnzwQEow=
Subject key identifier: F4:24:7C:BD:F6:E1:A5:54:C6:E6:68:3C:AC:A0:D7:A2:77:9C:9A:3C
Certificate issuer: /CN=289C0FA8F74E8A496A1CF040353916504C4E789F
Certificate serial: 2898CFA587ADE08B5787392EA4898EC885DAE953
Authority key identifier: 28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33322d3332203d3e20323637303738.roa
Signing time: Tue 30 Apr 2024 14:00:29 +0000
ROA not before: Tue 30 Apr 2024 13:55:29 +0000
ROA not after: Tue 29 Apr 2025 14:00:29 +0000
asID: 267078
IP address blocks: 2804:47d0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:98:cf:a5:87:ad:e0:8b:57:87:39:2e:a4:89:8e:c8:85:da:e9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=289C0FA8F74E8A496A1CF040353916504C4E789F
Validity
Not Before: Apr 30 13:55:29 2024 GMT
Not After : Apr 29 14:00:29 2025 GMT
Subject: CN=F4247CBDF6E1A554C6E6683CACA0D7A2779C9A3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:d3:fc:aa:f7:c5:ad:4b:a1:16:3f:6d:00:
c6:65:ff:b1:9a:b4:4b:e6:d5:75:fc:4a:4c:00:ca:
8c:fa:0b:3c:0a:1d:33:bd:cb:91:9a:c1:44:8d:c9:
37:9f:b3:bc:9e:39:20:98:91:10:fa:2b:c1:42:df:
31:b3:97:4f:71:13:9c:05:aa:fe:65:04:40:d7:1f:
a4:f3:91:7f:7a:db:f7:22:cf:b9:06:a1:8c:49:67:
72:4b:3f:53:b4:1e:52:7e:89:ce:99:fa:05:5c:a5:
6e:7c:fa:a3:43:bb:01:7c:c6:5d:a6:53:04:f6:34:
52:20:af:92:25:29:ab:c0:a1:e0:77:57:6e:a9:b2:
33:97:fd:35:39:e7:04:fb:46:8c:50:ed:20:f7:bf:
3b:cf:8f:0a:4d:c4:b3:67:68:fe:df:ef:63:06:40:
a2:b3:11:f9:1b:8e:a8:62:ed:65:59:fe:2d:7b:cb:
20:3a:44:1b:e0:2b:5e:56:02:a0:c4:37:11:51:60:
63:23:9f:ce:d6:c7:30:73:a1:f1:e1:67:0a:e0:67:
45:bb:e9:b9:a3:03:97:22:58:46:10:1e:3b:e7:e8:
02:3d:38:95:3f:63:49:3d:17:5c:a3:93:74:da:b7:
e5:4b:39:09:5d:85:c6:d6:a2:27:74:ce:7b:db:db:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:24:7C:BD:F6:E1:A5:54:C6:E6:68:3C:AC:A0:D7:A2:77:9C:9A:3C
X509v3 Authority Key Identifier:
keyid:28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33322d3332203d3e20323637303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:47d0::/32
Signature Algorithm: sha256WithRSAEncryption
bd:3b:8a:d1:36:dc:58:23:01:3e:7d:ab:98:01:60:fc:84:53:
be:40:67:36:c8:d7:a1:23:ac:9a:6c:f5:83:1c:5a:30:aa:54:
2d:10:f7:7f:61:4b:0a:04:5a:f7:f5:c5:9c:ce:f4:d8:fe:13:
b8:4b:3d:cd:f5:5b:9a:6e:4d:3e:34:e6:22:a4:5a:ce:54:f0:
9e:ec:5a:bd:0f:d7:b2:81:ca:11:d1:a5:5b:e8:87:ac:a5:a3:
14:95:c2:d2:84:cf:10:fa:d8:6a:8f:28:d2:0b:70:da:6b:98:
4b:cc:8c:cf:d3:af:14:e0:00:22:01:a8:2c:bf:59:73:fc:48:
56:79:91:2b:7d:fb:b1:26:18:e0:3f:bb:4c:09:8b:de:a5:27:
9e:fe:74:af:b7:12:39:d0:a3:3d:88:c8:33:2c:25:fc:c0:bb:
93:dd:55:73:83:df:31:3d:2b:e0:0d:87:4f:25:b1:7c:ea:55:
54:6d:e4:37:fb:ac:4f:c6:8a:8a:24:26:33:a4:c9:1b:a5:7b:
97:b7:c4:41:f1:0c:ee:7e:12:1f:8a:1d:3b:93:3d:02:dd:f5:
da:eb:ef:3e:83:5f:18:c8:76:9b:46:a8:ab:5f:0d:bf:b4:09:
17:3c:cd:30:62:85:f9:72:17:6d:66:6b:0d:8c:bb:89:08:3f:
d1:ce:4d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org