Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/323830343a373531633a3a2f33322d3332203d3e20323731303234.roa
File: 323830343a373531633a3a2f33322d3332203d3e20323731303234.roa (raw, json)
Hash identifier: HSngkjq6PSaoOjSH16r1G7YHYqrrLYNZxK+GKDm5TVU=
Subject key identifier: 5A:AE:73:13:74:22:53:08:3C:71:78:82:40:04:03:86:42:E6:72:F8
Certificate issuer: /CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
Certificate serial: 41EBC9002B2C0C62910A9DF76E6C8941DDBD4103
Authority key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/323830343a373531633a3a2f33322d3332203d3e20323731303234.roa
Signing time: Sat 07 Sep 2024 14:37:28 +0000
ROA not before: Sat 07 Sep 2024 14:32:28 +0000
ROA not after: Sat 06 Sep 2025 14:37:28 +0000
asID: 271024
IP address blocks: 2804:751c::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 07 Sep 2024 14:40:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:eb:c9:00:2b:2c:0c:62:91:0a:9d:f7:6e:6c:89:41:dd:bd:41:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
Validity
Not Before: Sep 7 14:32:28 2024 GMT
Not After : Sep 6 14:37:28 2025 GMT
Subject: CN=5AAE7313742253083C7178824004038642E672F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:c4:05:1b:ba:8e:90:81:4d:d7:6c:2a:8d:
62:60:90:93:32:64:62:f1:24:dd:03:80:2d:08:11:
b4:ac:87:32:53:cd:80:04:74:1a:42:e1:b2:53:04:
86:1b:53:cc:45:ff:d0:f7:4a:42:5e:bd:ef:53:65:
e3:69:45:bb:5d:ef:b8:c2:55:eb:a6:6c:d8:16:f3:
e9:06:ea:63:46:92:a5:55:9f:4e:df:f0:3a:d7:a7:
b4:34:eb:a6:fa:a1:cb:87:11:ba:0c:a1:cc:56:e4:
13:c7:d4:0e:57:cc:9d:28:54:26:9d:82:a2:f2:83:
e1:f8:94:cc:45:77:58:2c:12:2f:a0:7b:6e:c9:6a:
75:21:9e:f9:f8:9f:2b:66:e1:59:98:71:56:d5:c2:
34:57:40:a9:f3:7d:93:8a:6e:c0:dd:73:bb:36:c4:
1e:4e:41:a9:0c:c5:51:79:e0:3b:61:a0:1b:d3:30:
90:1e:41:af:80:85:aa:d5:bf:69:40:c3:8c:a9:8c:
91:d3:74:04:0f:66:f0:3d:a9:df:72:22:63:21:49:
57:f9:1b:39:b4:d4:01:25:af:2f:b4:34:1c:99:45:
09:48:c7:01:fb:ba:ab:4d:17:2f:51:ec:71:7e:cc:
71:e9:8a:75:f5:e2:08:fd:51:48:e6:cf:96:07:9e:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AE:73:13:74:22:53:08:3C:71:78:82:40:04:03:86:42:E6:72:F8
X509v3 Authority Key Identifier:
keyid:66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/323830343a373531633a3a2f33322d3332203d3e20323731303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:751c::/32
Signature Algorithm: sha256WithRSAEncryption
30:84:f1:f3:70:fa:ce:36:31:93:ff:82:ec:7c:99:9a:8c:76:
90:cc:1c:c6:d2:a7:0d:72:15:93:a3:01:51:8c:58:90:b6:a1:
e0:40:2b:7d:a2:b9:83:b7:23:e3:f6:c6:d8:78:b1:b6:8e:74:
23:a0:e2:a7:c6:ee:c8:3b:a1:7a:7b:68:c4:1d:56:59:4b:a0:
12:e0:55:4d:ca:b0:54:45:f4:66:22:08:72:5f:c4:3a:03:46:
dd:65:fc:b9:bb:e2:0b:f5:20:59:e7:41:51:8d:af:dd:22:75:
1d:c2:19:be:67:8a:ce:7b:aa:27:1a:fd:6d:70:0b:57:07:d6:
5a:0b:67:a8:b3:37:65:7a:02:66:ef:4f:6d:16:2e:c7:e3:1c:
ae:6c:83:32:74:8b:11:ea:41:fa:74:88:f5:37:b7:d8:dc:d8:
f2:10:29:a2:dc:b4:38:38:44:4b:b8:d2:39:22:d5:06:fb:79:
59:3e:e2:20:83:6e:5c:77:17:04:d1:c1:02:01:7e:e6:3e:35:
93:9a:fb:d8:b8:73:fd:92:a0:6e:32:30:68:43:e1:18:ad:43:
a5:3a:94:87:1d:c3:31:f1:a6:65:93:a5:a9:f6:86:44:87:8e:
1a:85:7a:a3:05:c8:5c:0c:f8:13:c5:27:c7:06:e4:be:82:38:
be:0c:a5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:12 2025 by rpki-client