Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa
File: 323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier: tRCnkrsCgucUkmXl8QbdxvtT1jjZsuGNDriWCpA6M4w=
Subject key identifier: E3:73:C3:91:AF:2A:0D:1F:EE:E1:88:F6:4C:BD:0B:28:4E:1C:F5:58
Certificate issuer: /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial: 32F978DE9065D46565F6EB0DD5E47E5006EB1ACD
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa
Signing time: Mon 11 Aug 2025 13:19:36 +0000
ROA not before: Mon 11 Aug 2025 13:14:36 +0000
ROA not after: Mon 10 Aug 2026 13:19:36 +0000
asID: 267027
IP address blocks: 2804:4708:c000::/37 maxlen: 37
Validation: Failed, certificate revoked on Mon 11 Aug 2025 14:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f9:78:de:90:65:d4:65:65:f6:eb:0d:d5:e4:7e:50:06:eb:1a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Validity
Not Before: Aug 11 13:14:36 2025 GMT
Not After : Aug 10 13:19:36 2026 GMT
Subject: CN=E373C391AF2A0D1FEEE188F64CBD0B284E1CF558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:5e:cc:36:01:38:3d:79:de:e6:59:e2:fd:
8c:1b:96:16:af:db:67:f4:c5:d1:0d:1c:02:6a:68:
8f:9c:10:01:78:6b:f6:05:32:ed:4a:1f:fe:c7:15:
e4:e2:ae:83:31:22:60:c6:ed:cd:7e:e4:e5:5a:c3:
22:b2:61:9a:2b:3f:c6:1e:2b:50:97:27:ac:14:40:
f5:cd:5c:6d:a7:5a:35:4b:74:72:1c:53:88:ce:f4:
02:a5:f0:4b:c3:4d:12:12:4b:b4:8a:18:d8:5a:21:
b3:48:c6:28:8e:fb:27:6e:2d:4d:a6:ae:d0:cc:46:
dc:1d:3b:c7:bf:cf:a6:08:89:2c:95:3f:de:14:2d:
b5:a0:b1:60:82:7f:7e:6a:86:ac:a9:9f:8c:44:94:
0d:9a:c7:3b:c6:f6:65:e7:44:3c:b5:c7:34:dd:3a:
4b:91:1b:08:21:66:ac:b8:84:95:0b:ad:67:ea:c1:
b5:be:63:7e:af:a5:b7:9a:9c:b8:57:5a:f4:e2:49:
3d:a2:15:76:b6:85:11:9b:64:30:76:cf:75:04:7f:
47:c1:f3:94:50:b1:d6:d0:4b:84:41:3f:c2:8e:e6:
d5:94:b8:90:5f:90:57:85:a1:7a:78:90:5f:89:b4:
b3:69:96:71:c0:2f:82:b5:d9:10:b3:cc:46:90:c9:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:73:C3:91:AF:2A:0D:1F:EE:E1:88:F6:4C:BD:0B:28:4E:1C:F5:58
X509v3 Authority Key Identifier:
keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4708:c000::/37
Signature Algorithm: sha256WithRSAEncryption
68:6e:a3:0f:9b:77:3c:51:8a:aa:f4:93:ad:b2:01:d9:60:ce:
58:0b:97:c8:01:50:f5:87:54:51:b4:63:aa:f0:11:f8:a7:f5:
41:23:1e:c7:9b:84:e6:4f:83:72:99:e4:49:b8:48:4c:e5:c5:
c7:8b:6e:24:5a:e5:ee:82:7b:81:0c:1d:d8:e7:a0:61:86:fb:
3c:82:da:91:63:0a:53:b5:1f:00:b3:9a:17:59:ee:60:7b:6b:
a3:4a:04:5d:c0:18:32:b2:e2:ba:9b:a7:35:58:f5:03:2f:bc:
5c:2d:11:8a:3e:da:59:ba:ab:87:6d:e2:5b:c0:e8:4d:d0:49:
83:33:3e:5c:90:e9:c3:a2:8b:b5:b1:85:3a:dc:2d:ee:e0:25:
03:30:6d:3d:d8:c3:5d:1b:70:4f:79:77:af:28:9a:6e:0b:92:
77:57:e8:28:56:da:72:47:c3:7b:21:81:59:68:0f:50:60:07:
03:8d:72:79:fd:d0:98:6c:5c:b9:de:8b:18:63:33:5e:24:36:
fd:14:71:ad:0c:8d:0f:5e:1b:e4:f4:46:30:07:b2:df:2b:ba:
20:ca:09:19:92:e8:76:c5:8d:0f:1d:74:e4:82:66:83:9b:0a:
2e:39:e0:fa:4d:65:05:dc:af:65:bb:9f:5a:e1:80:c8:96:18:
ca:41:f2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:04:44 2025 by rpki-client