Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a643830303a3a2f33372d3337203d3e20323637303237.roa
File: 323830343a343730383a643830303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier: iK0Cr2U0rTAc2eoALzP3BzrCWyCwRPF6SRSlB6riHew=
Subject key identifier: 3C:48:EC:7D:50:04:78:60:82:AD:9D:FA:FF:71:7A:15:8B:44:45:2E
Certificate issuer: /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial: 195EA7E67EB87DF71245404EBC0F8E8ED9E8F12F
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a643830303a3a2f33372d3337203d3e20323637303237.roa
Signing time: Mon 11 Aug 2025 13:19:38 +0000
ROA not before: Mon 11 Aug 2025 13:14:38 +0000
ROA not after: Mon 10 Aug 2026 13:19:38 +0000
asID: 267027
IP address blocks: 2804:4708:d800::/37 maxlen: 37
Validation: Failed, certificate revoked on Mon 11 Aug 2025 14:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:5e:a7:e6:7e:b8:7d:f7:12:45:40:4e:bc:0f:8e:8e:d9:e8:f1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Validity
Not Before: Aug 11 13:14:38 2025 GMT
Not After : Aug 10 13:19:38 2026 GMT
Subject: CN=3C48EC7D5004786082AD9DFAFF717A158B44452E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:4f:00:e1:6e:a6:0e:77:3b:31:11:77:c7:
a4:f1:bf:7f:5e:d6:2d:16:2c:c4:dc:1f:dd:f2:d4:
7d:0f:61:32:3e:08:61:c3:bd:43:b1:15:79:6c:ad:
0a:61:26:02:9b:a7:a4:f0:65:8f:63:55:23:df:06:
ad:e5:c6:6b:14:22:b1:00:b6:96:6e:23:18:22:fa:
33:70:6f:09:cb:1b:0b:d3:d2:fc:04:24:e3:61:01:
66:16:55:1c:6a:d5:3e:02:17:aa:f2:9a:8c:ed:92:
52:33:bf:10:c8:85:79:45:7f:dc:8e:6a:c2:1b:04:
b3:18:24:56:1c:c3:44:1f:40:9d:f8:9e:0b:fa:85:
ca:7c:5f:c0:23:92:24:5b:4a:f7:4b:8a:d7:00:93:
e0:cb:eb:95:ba:53:3b:98:8e:d1:ce:1d:cb:fd:15:
e6:49:3f:17:c4:10:40:5e:7f:2d:b1:79:56:52:79:
98:a7:45:ca:8d:6c:2b:28:8c:b2:e0:55:e7:ba:7c:
05:2b:5f:14:65:3a:28:5c:69:ab:39:85:42:41:49:
10:b9:fb:4b:b8:17:90:12:28:f8:12:1f:b7:07:36:
e3:12:0e:55:b7:32:81:9d:02:7a:76:71:e2:25:52:
30:0e:63:e3:f1:c2:7f:1f:0c:a7:4d:6f:22:ca:8c:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:EC:7D:50:04:78:60:82:AD:9D:FA:FF:71:7A:15:8B:44:45:2E
X509v3 Authority Key Identifier:
keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a643830303a3a2f33372d3337203d3e20323637303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4708:d800::/37
Signature Algorithm: sha256WithRSAEncryption
8c:98:bb:5b:44:3d:32:7f:37:43:9d:b7:ec:73:44:62:4a:87:
cf:51:bf:13:bd:45:4f:82:f0:bb:e9:f7:9b:c7:c9:09:b9:52:
dc:f4:e9:24:f9:c1:60:dc:90:7b:64:96:28:58:7e:fc:b7:88:
2c:1b:e5:3c:58:30:3a:72:31:60:f1:be:c2:6b:6e:b1:dc:cd:
ab:77:69:8a:e8:66:5a:53:33:28:ad:66:bf:17:db:f0:63:fe:
f5:b1:0a:a5:f6:ae:63:ce:47:03:45:10:46:55:57:bc:dd:56:
69:5b:e5:26:16:c1:b5:81:eb:45:34:43:52:94:58:6c:98:90:
b1:55:60:89:90:50:96:d6:ed:a6:f0:7e:b0:c7:56:be:0f:d0:
5d:31:4e:db:46:73:7a:10:e4:9f:00:0b:87:ad:0a:d9:b2:04:
22:28:2f:58:04:35:35:0f:19:1f:78:47:b0:cf:5e:33:3f:43:
9a:c9:67:5d:89:a0:05:96:38:38:b1:3b:cb:a4:d4:b2:33:e2:
ea:a7:d2:cb:1f:c6:94:13:8a:ff:e1:12:b7:d0:88:e9:63:49:
15:c1:d7:ba:6f:36:70:6f:35:26:87:af:fa:77:51:75:b3:94:
b5:e5:d1:a4:53:81:7c:90:ca:ea:43:44:79:f5:f3:4e:30:7b:
3d:b3:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:21:45 2025 by rpki-client