Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/323830343a343239303a3a2f33332d3333203d3e20323637353038.roa
File: 323830343a343239303a3a2f33332d3333203d3e20323637353038.roa (raw, json)
Hash identifier: 4+BV4cCZ8xTWVqyDc9glebrykcd7v/CAb1nSyiBvISA=
Subject key identifier: 42:AB:EC:AB:B4:19:88:C8:1F:DF:6A:F9:B8:4D:18:93:BD:C8:AD:DB
Certificate issuer: /CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
Certificate serial: 4780D7ECC130B5640D4AC59C8E3C5AE1DB12DAE7
Authority key identifier: 2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/323830343a343239303a3a2f33332d3333203d3e20323637353038.roa
Signing time: Sun 28 Jul 2024 19:41:46 +0000
ROA not before: Sun 28 Jul 2024 19:36:46 +0000
ROA not after: Sun 27 Jul 2025 19:41:46 +0000
asID: 267508
IP address blocks: 2804:4290::/33 maxlen: 33
Validation: Failed, certificate revoked on Sun 28 Jul 2024 19:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:80:d7:ec:c1:30:b5:64:0d:4a:c5:9c:8e:3c:5a:e1:db:12:da:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
Validity
Not Before: Jul 28 19:36:46 2024 GMT
Not After : Jul 27 19:41:46 2025 GMT
Subject: CN=42ABECABB41988C81FDF6AF9B84D1893BDC8ADDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:55:6a:06:e2:06:b9:f5:d5:73:11:63:bc:
0f:64:4b:c6:58:ac:a2:77:f6:70:32:29:31:97:c9:
77:49:f9:97:f6:cc:de:15:c8:4f:2c:d1:0b:3b:c2:
d6:40:d2:36:a9:bc:a8:26:94:90:be:ab:09:6e:1d:
29:23:05:a4:68:08:03:2d:6c:4b:77:65:1b:95:a9:
2d:c3:1d:8c:ad:6f:54:1d:c5:f4:50:75:b1:92:32:
67:64:8f:d7:86:2e:b2:1f:e6:43:14:7c:05:9d:38:
b9:dd:eb:a5:82:ef:0c:f9:1a:ef:06:ee:72:9c:06:
b5:1b:e1:14:8c:20:da:96:96:4c:80:13:c8:ee:e4:
18:28:0a:a7:13:cc:27:45:ad:1c:3d:31:d1:41:f4:
91:e1:29:4a:08:24:22:af:a9:0b:66:1a:9e:86:53:
a9:4d:01:d4:55:33:77:b9:5b:93:fe:23:de:36:2d:
b3:55:4d:b7:8f:28:ec:81:94:42:2d:5f:4a:3a:d8:
e4:41:b0:26:46:85:7e:f4:89:39:69:a6:ac:43:1b:
f6:e6:f0:e7:8a:be:9c:b3:ca:1d:31:ca:d3:13:ee:
88:76:00:a0:11:ca:81:a4:36:d0:70:7c:31:74:9f:
d0:c9:8e:90:14:68:f7:db:55:47:a1:ab:f7:24:31:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AB:EC:AB:B4:19:88:C8:1F:DF:6A:F9:B8:4D:18:93:BD:C8:AD:DB
X509v3 Authority Key Identifier:
keyid:2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/323830343a343239303a3a2f33332d3333203d3e20323637353038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4290::/33
Signature Algorithm: sha256WithRSAEncryption
45:2c:e6:db:c6:1a:90:01:6b:3d:0f:c5:5f:84:9a:09:5a:89:
88:a3:b3:da:57:d3:28:3e:e1:64:e5:8c:40:8e:a5:db:b7:04:
2f:a8:dd:7e:94:c1:4b:74:43:9f:15:2e:d6:86:4c:ec:a6:72:
85:43:74:3f:9b:2f:17:87:03:5a:11:aa:df:77:46:ff:71:25:
78:a9:e7:99:2c:b8:f7:97:4a:91:ef:ac:e7:a9:f5:34:c7:c9:
8a:16:3d:74:b5:83:b6:4c:13:8a:33:ef:98:72:48:01:e2:82:
8d:9f:ea:9b:f1:3d:5c:07:cf:f4:78:0f:29:2c:09:13:cc:a8:
34:ae:06:50:90:7e:a0:03:3a:26:ba:06:40:e0:a9:1c:1a:29:
07:0f:8e:ef:ee:5f:b4:64:b0:58:93:4b:6b:6b:13:13:87:4d:
03:7b:68:3c:71:2f:81:32:26:e8:a3:c4:81:9f:ef:1b:29:ba:
66:c1:4b:81:38:a6:04:e5:cd:8b:1b:3b:55:be:9a:16:48:54:
8b:25:4e:18:d6:c6:46:fc:33:ce:eb:b0:83:c0:66:3d:fc:63:
d7:92:38:84:ca:fc:75:ba:a6:65:f5:63:bd:d0:1f:81:49:6a:
5f:c3:75:f4:76:e6:fc:4a:55:83:84:11:3e:94:03:d1:cc:7b:
4d:59:2a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 22:00:02 2024 by rpki-client on console-fra.rpki-client.org