Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/323830343a313732633a3a2f33322d3332203d3e20323633313239.roa
File: 323830343a313732633a3a2f33322d3332203d3e20323633313239.roa (raw, json)
Hash identifier: 0F9CucCL95CSkjywUZvLasOKY6zNzkyNLEsmseNot9s=
Subject key identifier: B9:EF:EB:D5:7E:C5:E5:6F:07:6A:E4:2A:F1:2F:6E:15:10:45:63:FA
Certificate issuer: /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
Certificate serial: 3040ADF67A0421713986E4A0699E9BE166A7B1C1
Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/323830343a313732633a3a2f33322d3332203d3e20323633313239.roa
Signing time: Thu 25 Apr 2024 13:11:37 +0000
ROA not before: Thu 25 Apr 2024 13:06:37 +0000
ROA not after: Thu 24 Apr 2025 13:11:37 +0000
asID: 263129
IP address blocks: 2804:172c::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:40:ad:f6:7a:04:21:71:39:86:e4:a0:69:9e:9b:e1:66:a7:b1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
Validity
Not Before: Apr 25 13:06:37 2024 GMT
Not After : Apr 24 13:11:37 2025 GMT
Subject: CN=B9EFEBD57EC5E56F076AE42AF12F6E15104563FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:44:d3:1d:58:a7:59:d5:43:c7:c9:56:9c:
69:7d:3c:ba:46:1c:da:5d:fd:93:6e:90:25:9b:a9:
30:57:e5:86:c6:e7:14:81:7a:52:bd:c0:cb:eb:47:
0a:4e:2a:2d:84:e3:13:70:25:80:a6:e4:28:38:51:
03:38:49:0f:ff:21:ea:a9:29:7c:75:d0:5e:1f:3e:
30:47:e6:1a:51:40:12:6d:3d:9f:a0:b7:25:55:d2:
ff:fb:f6:c8:0c:05:50:16:cc:23:c9:3f:e0:4c:65:
e9:1d:85:45:ad:25:b1:62:9f:fa:c8:9b:b1:a8:1a:
3d:fd:ae:5b:33:dc:a5:1b:9e:da:ea:2a:47:0f:0f:
0a:57:91:d8:2f:07:a8:cf:3c:78:b5:43:f8:32:9e:
a9:2c:92:8d:6d:45:4a:c8:f8:2f:4f:eb:36:ac:ba:
44:95:d6:f9:71:06:03:cb:79:03:d8:49:a9:35:6f:
09:ba:cb:c1:ff:37:75:4f:38:03:79:9e:52:8a:55:
98:07:d9:2d:56:45:c7:a2:f8:5b:ac:ae:a0:47:30:
08:1f:8d:28:07:19:0a:d5:20:56:bf:31:e3:ef:91:
06:64:ec:db:09:6c:1f:26:bc:d8:5f:6e:ef:c1:ad:
f0:c4:e3:f3:ef:98:fc:ae:cd:b8:1e:2e:7d:77:f8:
86:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EF:EB:D5:7E:C5:E5:6F:07:6A:E4:2A:F1:2F:6E:15:10:45:63:FA
X509v3 Authority Key Identifier:
keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/323830343a313732633a3a2f33322d3332203d3e20323633313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:172c::/32
Signature Algorithm: sha256WithRSAEncryption
8e:44:ef:e8:c9:f2:aa:2a:0f:cc:f0:f2:69:d9:99:8f:d1:5f:
10:f7:2b:66:b9:b0:6b:c8:c3:4f:ba:16:6c:27:66:a9:bd:ea:
d2:0d:f1:f3:2d:e9:d1:5e:40:2d:ab:cf:43:b1:24:b4:e2:55:
2c:a2:64:01:46:c1:68:21:ed:08:8f:c9:ff:b8:84:79:a0:34:
1f:1c:13:03:f1:c3:39:d0:3a:0a:18:12:a6:22:1f:b2:a3:13:
6e:b6:3c:37:52:fd:5c:5e:fb:67:c6:5f:33:e9:b2:2f:f8:0f:
d2:32:f6:b1:0a:ac:05:29:ba:6c:df:f7:ba:5a:57:cc:f8:21:
59:89:3b:a5:29:d4:1c:2c:e6:97:21:8e:a1:fd:61:73:35:d5:
c5:07:68:2e:23:92:dc:de:6e:df:d2:1b:be:79:42:cd:28:cc:
ae:b2:d7:e9:fb:10:82:3b:89:7a:25:e7:70:11:a0:4a:a3:b9:
7d:ba:dc:31:d3:96:57:d2:41:f8:2c:43:64:f3:18:64:64:8c:
34:93:cf:5c:2a:4f:28:45:18:9b:b4:d0:99:29:23:e8:1b:0e:
ef:7b:45:49:b5:b6:d2:2c:e5:42:44:ee:2d:74:2d:2f:c8:18:
57:86:cd:a7:c4:89:6d:c3:9c:79:85:81:60:34:84:1b:fc:d7:
5b:80:5b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org