Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/323830343a323264303a3a2f33322d3333203d3e20323634313234.roa
File: 323830343a323264303a3a2f33322d3333203d3e20323634313234.roa (raw, json)
Hash identifier: FETTlEMGQ03PA4x/D5aY/Fq+tidnjBnr6yZ7FCuYXUw=
Subject key identifier: 0D:67:8D:AF:46:5F:CB:F5:19:6A:3C:D4:6F:6C:8C:4D:5C:56:71:A9
Certificate issuer: /CN=8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E
Certificate serial: 72CDBAF0A9A35D569AF9F991F376B5BBA9253B81
Authority key identifier: 89:40:C5:0A:C5:63:1C:CD:F2:D0:D0:91:49:CB:C5:A2:FE:B6:4B:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/323830343a323264303a3a2f33322d3333203d3e20323634313234.roa
Signing time: Thu 01 May 2025 19:31:01 +0000
ROA not before: Thu 01 May 2025 19:26:01 +0000
ROA not after: Thu 30 Apr 2026 19:31:01 +0000
asID: 264124
IP address blocks: 2804:22d0::/32 maxlen: 33
Validation: Failed, certificate revoked on Tue 20 May 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:cd:ba:f0:a9:a3:5d:56:9a:f9:f9:91:f3:76:b5:bb:a9:25:3b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E
Validity
Not Before: May 1 19:26:01 2025 GMT
Not After : Apr 30 19:31:01 2026 GMT
Subject: CN=0D678DAF465FCBF5196A3CD46F6C8C4D5C5671A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4a:45:78:5d:7c:74:96:bf:42:a7:fa:ec:41:
bb:5a:ed:94:1b:00:9f:07:4b:04:82:ff:99:ae:0e:
89:f0:ce:7b:25:17:fe:f8:b1:4b:a2:d1:55:25:10:
e6:f7:61:17:68:20:1c:21:ef:1e:08:1c:58:7e:1d:
0e:a5:e5:05:cf:12:af:57:47:7b:11:4f:c8:d8:9b:
d6:8a:f1:a4:ad:c0:fa:d2:16:e8:c1:af:c8:4a:18:
05:c6:5c:47:b7:15:55:5f:fa:b6:5a:39:b4:c7:31:
08:2c:01:65:a0:35:24:69:48:b3:82:eb:9a:06:78:
32:cf:93:83:ea:7a:30:bd:61:ea:e0:2f:6f:87:f3:
b0:f1:2b:b9:e9:a5:70:a0:d7:09:58:87:5b:5f:9d:
50:c6:ac:b9:7e:dd:b2:6b:70:e5:30:a4:3a:e9:d1:
c5:ae:2f:d4:f0:34:ce:86:da:53:17:51:cb:e8:dc:
b7:f8:9b:44:78:27:39:d7:72:2b:01:17:c9:71:51:
25:79:b8:83:10:a0:82:a3:04:c6:a8:04:49:ed:a0:
42:3d:4b:e9:1f:f6:e9:1a:c8:9f:dd:fb:cf:5a:13:
7f:cb:75:4a:29:fa:b5:3b:14:05:93:c5:13:ea:07:
d6:81:7b:55:e4:20:e4:3d:77:85:b9:e3:91:65:f5:
7b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:67:8D:AF:46:5F:CB:F5:19:6A:3C:D4:6F:6C:8C:4D:5C:56:71:A9
X509v3 Authority Key Identifier:
keyid:89:40:C5:0A:C5:63:1C:CD:F2:D0:D0:91:49:CB:C5:A2:FE:B6:4B:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/323830343a323264303a3a2f33322d3333203d3e20323634313234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:22d0::/32
Signature Algorithm: sha256WithRSAEncryption
5f:33:68:ee:34:8c:e0:0c:e4:77:6d:87:bb:71:74:9f:2e:69:
d5:fc:c3:76:97:71:31:6f:0c:4c:bb:6c:07:5c:15:c6:aa:67:
11:40:81:f9:9c:75:34:39:8b:e4:8f:4e:67:94:2c:61:a5:3f:
65:05:48:eb:29:54:1f:9b:33:dc:76:56:58:51:15:aa:c4:c9:
c9:7a:8e:e0:d8:67:f5:d8:28:18:d1:21:b2:09:a2:30:08:ef:
fa:24:c5:8e:8c:ee:17:e6:60:c7:ab:9c:74:92:38:d4:21:f4:
df:76:6a:1a:51:24:62:8c:3b:56:ca:89:2c:81:49:03:3d:d0:
00:70:48:54:f8:2b:23:b7:4c:a2:fb:87:29:11:86:1b:44:7f:
81:7d:03:64:fb:26:7f:be:9e:83:ce:57:7d:81:f8:54:20:f7:
f4:8a:e6:2c:18:fa:02:9a:b1:60:81:3d:83:e2:83:ec:9f:ec:
3c:a2:40:95:fc:7b:e2:66:7b:56:4b:ae:07:34:b1:19:6d:51:
8b:99:4c:1f:3b:88:bd:0f:c2:6f:cb:a5:d8:3e:8d:77:9a:86:
e5:26:71:f9:95:31:d4:86:b6:e8:70:40:3d:eb:17:5c:cb:e9:
ba:2e:9c:d4:55:71:4d:75:1b:8f:0e:bc:26:df:fb:ba:f7:1b:
a1:cd:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:34:26 2025 by rpki-client