Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a3a2f33342d3334203d3e20323637343236.roa
File: 323830343a343135303a3a2f33342d3334203d3e20323637343236.roa (raw, json)
Hash identifier: DqgyDlRMYRYX3nuMkjmSrY2hw13ndydRWsq+mivRigo=
Subject key identifier: 67:8D:C5:E7:2E:24:35:6A:EB:E4:50:1C:58:89:9B:A5:D7:D3:68:BB
Certificate issuer: /CN=474B51CEB662EF010C6B1DDD845BC89A81122C37
Certificate serial: 5D0B044B31E139A9D3B7A8FD7E2471940E670EEA
Authority key identifier: 47:4B:51:CE:B6:62:EF:01:0C:6B:1D:DD:84:5B:C8:9A:81:12:2C:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a3a2f33342d3334203d3e20323637343236.roa
Signing time: Fri 14 Mar 2025 17:24:26 +0000
ROA not before: Fri 14 Mar 2025 17:19:26 +0000
ROA not after: Fri 13 Mar 2026 17:24:26 +0000
asID: 267426
IP address blocks: 2804:4150::/34 maxlen: 34
Validation: Failed, certificate revoked on Fri 14 Mar 2025 18:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0b:04:4b:31:e1:39:a9:d3:b7:a8:fd:7e:24:71:94:0e:67:0e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474B51CEB662EF010C6B1DDD845BC89A81122C37
Validity
Not Before: Mar 14 17:19:26 2025 GMT
Not After : Mar 13 17:24:26 2026 GMT
Subject: CN=678DC5E72E24356AEBE4501C58899BA5D7D368BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:db:16:ff:2b:d2:df:cf:2f:a3:04:e8:22:
09:f6:86:ab:07:32:da:73:79:7e:84:fc:10:15:c8:
41:c8:96:b6:af:04:fc:f7:1b:3e:ac:35:bf:b8:02:
49:a7:e4:83:70:14:a8:3f:3e:01:eb:6a:fc:d7:56:
62:ea:15:fd:9d:6e:6c:3f:98:73:b0:e8:ff:b3:57:
b5:fd:d4:40:cc:6d:27:ac:88:d6:5e:a1:c7:b9:0e:
80:0e:a4:3f:96:b5:95:b5:0b:3e:ac:8d:93:f0:bf:
48:4a:2d:12:42:18:60:88:33:1b:50:f3:3a:f2:97:
0b:53:a6:f0:27:ff:a6:39:68:33:0a:d3:75:90:b5:
1e:37:b2:81:f5:56:e2:6d:69:c1:05:6e:84:be:d1:
b5:b6:58:0c:f1:f0:56:9d:a8:fa:ee:45:a8:49:86:
0b:dd:ec:54:4a:6d:7b:4f:2b:bf:af:59:c7:f8:f2:
23:e4:1a:50:43:d1:de:18:9b:77:ce:e7:99:90:8b:
a4:16:a5:fb:a5:f0:f3:31:54:53:3a:a6:dd:19:87:
d3:91:b1:3b:58:31:4d:01:ea:8e:dd:62:32:a7:5d:
22:dd:cf:58:2a:33:92:5c:34:58:d3:b9:f6:b1:e4:
82:1a:5e:04:b9:ff:ea:00:89:f4:b0:27:0a:95:f4:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8D:C5:E7:2E:24:35:6A:EB:E4:50:1C:58:89:9B:A5:D7:D3:68:BB
X509v3 Authority Key Identifier:
keyid:47:4B:51:CE:B6:62:EF:01:0C:6B:1D:DD:84:5B:C8:9A:81:12:2C:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a3a2f33342d3334203d3e20323637343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4150::/34
Signature Algorithm: sha256WithRSAEncryption
a4:9b:55:94:e8:ab:b6:70:f6:b0:9d:87:82:60:a0:42:aa:6c:
ba:f1:91:d5:ee:7b:de:7f:f2:47:96:1a:1e:b1:82:b3:92:69:
6d:c3:c2:b6:6b:f0:13:5f:8a:b2:36:1c:e1:c5:7a:f4:f8:03:
43:23:b1:b9:f1:c4:a4:17:2e:1c:5a:44:21:06:64:0e:54:3f:
4e:37:d3:26:39:e3:f7:82:82:fb:3f:c0:4b:d3:b5:ea:46:3a:
60:f8:8b:9d:c2:87:b5:85:2f:4b:9d:2e:dc:3f:f4:d0:75:f9:
c6:c3:a6:4c:7d:68:59:e7:6e:27:10:cb:da:26:3b:e5:e6:63:
0f:3e:4b:ca:73:92:65:19:de:a3:80:56:d6:63:4f:f7:70:df:
37:23:0a:01:44:64:98:8d:b8:97:d7:a1:f0:2d:c1:63:06:cb:
01:1d:0f:2e:ec:f7:07:25:d2:c4:67:ec:42:c8:d2:69:35:3a:
3a:71:14:84:75:7d:76:2d:d5:1a:5e:45:56:13:e9:01:2f:93:
cb:7a:5b:1c:31:24:ac:b2:c6:8f:05:83:9e:8d:84:29:ad:01:
50:1f:6f:d0:e6:f0:51:51:03:4e:ba:c7:cb:e9:1c:9c:d4:20:
bb:ad:76:26:7e:19:11:2d:04:2b:5e:62:de:b2:d1:bb:e4:6d:
ed:d8:36:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:39:45 2025 by rpki-client