![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/323830343a343264343a666530313a3a2f34382d3438203d3e20323637353330.roa
File: 323830343a343264343a666530313a3a2f34382d3438203d3e20323637353330.roa (raw, json)
Hash identifier: 5FSqt78+UqInZamj6coTzeuXFivoS5e8yI2TYtXvpaI=
Subject key identifier: 4C:97:D4:B0:B0:1D:EB:55:98:DA:CE:14:34:0A:77:28:6F:1D:9E:F3
Certificate issuer: /CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
Certificate serial: 5BBDE62B2815DCB1F4C9EF4F79CA4F3B084237AA
Authority key identifier: EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
Subject info access: rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/323830343a343264343a666530313a3a2f34382d3438203d3e20323637353330.roa
Signing time: Wed 24 Apr 2024 12:14:03 +0000
ROA not before: Wed 24 Apr 2024 12:09:03 +0000
ROA not after: Wed 23 Apr 2025 12:14:03 +0000
asID: 267530
IP address blocks: 2804:42d4:fe01::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:bd:e6:2b:28:15:dc:b1:f4:c9:ef:4f:79:ca:4f:3b:08:42:37:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
Validity
Not Before: Apr 24 12:09:03 2024 GMT
Not After : Apr 23 12:14:03 2025 GMT
Subject: CN=4C97D4B0B01DEB5598DACE14340A77286F1D9EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:a1:21:81:4e:25:b0:25:f6:ff:34:62:91:
33:d9:ef:40:8e:15:5a:36:5b:17:e1:c7:c9:31:8c:
47:89:8f:79:15:23:85:e8:b1:e8:ff:bb:ec:21:0c:
cf:e5:8e:5b:4e:5d:b8:93:aa:66:9b:86:a0:27:c8:
34:06:dd:c2:47:4e:26:62:2a:7b:a4:aa:0c:68:eb:
13:85:32:5a:d0:b9:18:ef:a0:55:26:c9:67:48:02:
0a:04:21:fd:87:62:c8:8f:f4:e5:60:e1:58:e4:a9:
75:69:0e:4b:d4:8b:14:5e:53:90:1c:c0:d7:4b:50:
3d:65:79:f4:f5:7a:3d:17:5a:aa:f0:87:90:81:ee:
8a:32:5e:ad:03:76:e1:d7:2f:da:5e:d3:4f:3d:79:
d8:2a:53:e2:30:78:90:af:5c:10:52:25:8a:27:0e:
42:53:53:21:0c:a6:26:17:fd:47:47:28:f3:d8:62:
c5:27:1b:6c:4f:8d:76:ca:98:9f:66:3a:13:65:50:
5e:a0:20:e4:70:8a:5e:d3:c0:06:dc:61:bc:24:62:
9a:6b:90:3e:66:be:a3:64:8e:ab:3b:72:e0:b7:bf:
91:d5:f7:4e:22:ed:dd:2d:02:17:5d:51:0b:b8:a3:
a1:51:59:db:90:50:2a:7b:3c:de:1e:c7:c5:ce:f0:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:97:D4:B0:B0:1D:EB:55:98:DA:CE:14:34:0A:77:28:6F:1D:9E:F3
X509v3 Authority Key Identifier:
keyid:EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/323830343a343264343a666530313a3a2f34382d3438203d3e20323637353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:42d4:fe01::/48
Signature Algorithm: sha256WithRSAEncryption
4c:5f:b9:ff:af:7e:59:51:9d:99:0c:37:ae:25:c4:2a:19:d6:
38:71:f0:98:6e:2c:bb:51:bd:88:cd:c6:53:88:6d:6b:d1:70:
b0:2d:9c:ec:94:c4:9a:af:f1:3a:28:6b:d8:fb:f6:71:0d:50:
65:40:bb:f3:b4:f2:41:5a:fa:61:ff:b0:b9:d8:c3:6a:ed:af:
f7:a2:f9:d3:ab:10:8b:82:b6:37:5f:02:f4:51:9d:d2:c0:ba:
5a:c1:42:35:c1:4a:d2:e0:34:75:79:8b:99:c9:28:f9:98:d3:
4b:3f:56:fc:5a:78:04:d3:36:dd:d6:5b:72:5f:e9:32:e3:6e:
89:1b:77:21:4d:af:9a:41:7e:81:64:0a:d9:21:25:48:80:3e:
f3:87:b5:d7:43:93:31:c0:58:be:5b:35:3c:5d:39:13:72:87:
98:ff:2a:5c:b1:91:25:94:d5:f8:40:df:e6:d7:86:43:81:72:
2b:e0:96:e7:9b:c4:be:1e:36:5d:dc:82:64:0a:f7:ab:53:4f:
9c:ae:a4:3d:b6:8f:03:a8:f5:b3:64:72:09:91:e1:cf:4b:aa:
85:3a:a4:21:95:22:5f:c2:e0:f4:0e:e5:7a:9d:10:a7:a5:30:
12:72:65:c5:21:d4:4d:41:7e:1d:09:d4:70:56:4d:d1:f6:8b:
e3:d1:6e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:23 2025 by rpki-client