Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a643030303a3a2f33372d3337203d3e20323637303237.roa
File: 323830343a343730383a643030303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier: UkT5gOkqjkxXo3HJpBzRRujNdar3uLFlFHs3MVu9+ts=
Subject key identifier: F0:E2:DD:C1:3E:FE:81:A5:16:F0:D8:15:A0:D7:90:6D:F6:5B:6C:22
Certificate issuer: /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial: 7EC805CEA19A6C7F3120D9F1EC40D96497AED8E3
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a643030303a3a2f33372d3337203d3e20323637303237.roa
Signing time: Mon 11 Aug 2025 13:19:39 +0000
ROA not before: Mon 11 Aug 2025 13:14:39 +0000
ROA not after: Mon 10 Aug 2026 13:19:39 +0000
asID: 267027
IP address blocks: 2804:4708:d000::/37 maxlen: 37
Validation: Failed, certificate revoked on Mon 11 Aug 2025 14:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c8:05:ce:a1:9a:6c:7f:31:20:d9:f1:ec:40:d9:64:97:ae:d8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Validity
Not Before: Aug 11 13:14:39 2025 GMT
Not After : Aug 10 13:19:39 2026 GMT
Subject: CN=F0E2DDC13EFE81A516F0D815A0D7906DF65B6C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:a2:d6:3f:7c:63:33:96:66:5c:9f:e7:82:
08:cd:73:f4:40:d9:db:99:c9:11:77:a3:4f:4b:5b:
65:8d:0d:8a:b2:83:5a:8a:f7:fa:04:26:0b:18:06:
bc:79:5d:ed:09:70:5e:4b:1e:53:40:29:26:58:22:
b9:92:b2:0c:2e:11:23:f1:a7:6f:7b:0e:6a:02:a6:
e0:ee:12:9a:07:b0:a7:79:3b:d9:5e:9b:c8:2b:f1:
40:88:07:97:6f:05:57:4b:89:55:1c:ac:d5:0e:3a:
7d:d0:6e:f1:1e:2e:63:1f:6f:22:2b:92:4c:c2:c0:
cd:8d:6d:2d:55:9f:69:85:b0:eb:c3:49:13:5b:d9:
68:2c:e7:5b:67:29:72:5f:30:3b:9c:e6:9b:90:f4:
4c:71:3d:04:41:2e:db:d3:a1:23:33:7d:7b:cd:2d:
b0:5e:42:58:76:34:f2:63:7c:bf:3b:3c:b9:15:ec:
cb:dd:9d:28:c4:d3:a1:1a:d1:9b:9c:55:7b:d2:aa:
89:41:8f:6f:1e:80:20:25:cd:c7:f0:5a:fa:53:6f:
c0:2a:e7:60:62:dd:84:75:67:e4:73:76:38:05:41:
33:bf:cc:2f:f8:4e:6e:24:12:30:69:6c:35:f0:9e:
a9:b5:05:e6:09:96:d4:ae:53:53:76:43:84:a6:08:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E2:DD:C1:3E:FE:81:A5:16:F0:D8:15:A0:D7:90:6D:F6:5B:6C:22
X509v3 Authority Key Identifier:
keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a643030303a3a2f33372d3337203d3e20323637303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4708:d000::/37
Signature Algorithm: sha256WithRSAEncryption
24:e4:7e:9a:ea:19:cb:12:46:d0:8d:fc:1c:d6:75:8e:39:fe:
7f:23:d7:d5:7f:db:0a:0b:c9:58:e7:af:4f:c6:82:73:0b:73:
f6:ba:43:e9:6a:91:2d:d6:d4:42:0f:f3:84:6c:92:19:9a:00:
37:6e:dc:d9:fc:a6:cd:c2:25:01:ac:fb:55:53:79:b1:a6:4f:
37:4f:28:af:d2:1d:fe:e0:07:08:7b:30:23:9c:de:37:32:91:
8b:98:54:f3:32:e6:07:bc:fc:6a:32:63:66:bd:a1:5d:90:98:
5e:92:ed:65:15:e0:cf:70:36:ef:b3:34:3c:88:60:c9:83:a7:
8c:43:0a:07:97:e0:aa:b6:6d:1a:5f:08:2f:2c:5e:94:1a:d5:
dc:a0:94:00:21:e0:93:81:87:af:ee:fe:e2:33:99:b5:25:3f:
3c:a7:00:c6:9d:e6:83:ec:0c:42:2a:75:35:69:7a:b1:6d:48:
c6:6b:78:b7:dd:d9:04:3d:d2:fe:ab:02:77:36:b8:62:4c:2a:
97:29:0a:52:42:31:56:0d:7c:4b:ba:e4:4b:ec:89:c4:0a:6a:
ca:4e:8e:6d:90:8f:f3:86:d3:49:9a:c1:bc:d7:0c:e5:4a:3d:
f7:1e:3d:8e:b3:47:60:fe:2d:10:1b:dc:ab:5a:fa:a8:ae:6c:
21:2e:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:05:04 2025 by rpki-client