Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/323830343a343239303a3a2f33322d3332203d3e20323637353038.roa
File: 323830343a343239303a3a2f33322d3332203d3e20323637353038.roa (raw, json)
Hash identifier: 8x4c3S04COY2VIbhGQROsZGUAhEzwtOnD8S3Z6K2Ue4=
Subject key identifier: E4:3E:46:9D:61:CE:FE:3E:F2:B5:7F:79:D9:2F:A5:95:3C:D3:2A:5B
Certificate issuer: /CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
Certificate serial: 55CF3E9C6E2A72B516CD56B622BFFA23903B2422
Authority key identifier: 2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/323830343a343239303a3a2f33322d3332203d3e20323637353038.roa
Signing time: Sun 28 Jul 2024 19:41:46 +0000
ROA not before: Sun 28 Jul 2024 19:36:46 +0000
ROA not after: Sun 27 Jul 2025 19:41:46 +0000
asID: 267508
IP address blocks: 2804:4290::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 28 Jul 2024 19:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:cf:3e:9c:6e:2a:72:b5:16:cd:56:b6:22:bf:fa:23:90:3b:24:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
Validity
Not Before: Jul 28 19:36:46 2024 GMT
Not After : Jul 27 19:41:46 2025 GMT
Subject: CN=E43E469D61CEFE3EF2B57F79D92FA5953CD32A5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:8b:2d:c3:bb:fe:9a:9c:f7:75:81:82:c2:
1c:59:e5:51:bf:62:3b:6d:68:db:36:89:37:62:8d:
2e:e1:b1:bc:bc:38:23:e7:2b:6d:ae:84:bd:26:c5:
78:21:4e:1c:b4:70:cc:fb:f1:b4:c3:c6:d4:f9:c9:
b4:36:f4:68:56:b1:49:d4:3f:dd:f9:95:d7:63:10:
bc:40:86:23:ed:db:40:d8:8f:34:2a:a1:4b:d1:17:
59:a2:95:c0:59:a5:80:a4:61:de:98:bf:dd:20:79:
38:32:1d:f4:17:c9:1f:62:c1:ff:b6:f7:72:fb:d2:
c7:db:3b:78:dc:d3:60:25:ba:6b:6a:40:08:fb:f3:
fe:59:df:e7:b7:54:5c:a9:b9:71:ac:25:0e:64:c3:
e0:26:38:3b:1b:ce:52:52:75:cf:ac:db:f0:5b:54:
b6:f4:84:fd:07:ed:5e:52:e2:3b:2b:9c:05:75:2c:
b3:be:52:8f:71:b4:41:51:3f:cd:ef:ef:3c:2e:0c:
db:70:7f:6a:0d:68:0c:ce:55:85:79:00:c8:2b:65:
e1:df:52:78:86:41:0c:f3:77:d4:b4:90:45:fb:b9:
c9:ab:6e:e1:21:a8:da:65:53:1c:72:eb:4f:91:19:
5c:34:2e:73:e9:38:da:30:0a:53:d9:c2:7f:80:f0:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3E:46:9D:61:CE:FE:3E:F2:B5:7F:79:D9:2F:A5:95:3C:D3:2A:5B
X509v3 Authority Key Identifier:
keyid:2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/323830343a343239303a3a2f33322d3332203d3e20323637353038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4290::/32
Signature Algorithm: sha256WithRSAEncryption
1e:2e:5f:d2:09:fd:a1:20:98:a5:51:b8:00:91:7f:7d:1c:a8:
34:3a:ad:11:92:0b:78:31:55:76:7c:9a:f5:1b:9e:13:1f:c8:
68:35:e4:16:71:ac:b3:ce:c6:83:75:9f:1d:64:22:1d:74:ca:
86:3a:24:29:ff:45:08:18:9a:96:55:50:8a:9d:e7:5d:82:15:
3b:f1:1c:8e:ac:30:c9:de:67:ae:bd:69:1a:1c:27:83:9c:b5:
62:44:56:69:b4:08:13:fe:c6:bf:cb:2e:41:05:6e:6a:da:cc:
56:78:15:21:d1:52:e5:07:f0:5f:82:cd:65:ab:c1:d3:dc:1e:
da:26:14:d6:af:bb:a2:36:58:e1:d2:1a:2e:6c:3f:d5:32:22:
9c:19:53:cf:a5:78:bd:7b:09:89:ce:ef:ec:1a:05:13:04:35:
34:35:34:6c:b4:38:2a:ea:69:f0:a3:0e:61:7a:32:7b:e7:09:
ea:63:70:70:a0:24:4d:ef:87:af:93:55:24:d9:8a:91:a0:83:
73:6b:26:5d:87:a9:95:93:63:9e:22:9f:79:57:ae:a9:71:c3:
41:30:dc:b4:01:f4:53:4c:3f:1d:e7:44:03:89:a4:4c:1c:4a:
de:a3:02:0d:0c:df:79:21:74:86:52:bd:3c:b3:fd:f3:2d:eb:
fb:89:90:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 22:00:02 2024 by rpki-client on console-fra.rpki-client.org