Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3a2f33322d3333203d3e20323635343732.roa
File: 323830343a333461633a3a2f33322d3333203d3e20323635343732.roa (raw, json)
Hash identifier: GqKI0gy8Gb4WaSHCi3U9tFyg//swA8yt6RbW0yjDmf8=
Subject key identifier: 25:B6:87:95:D8:26:AB:4D:65:4F:3D:52:0D:F3:84:BD:8F:0A:60:B5
Certificate issuer: /CN=F9571F71D3A1F065220B153C7C0B22D2A2862123
Certificate serial: 1BE390DB3324061C805D28ED22718F4DD6E2E85E
Authority key identifier: F9:57:1F:71:D3:A1:F0:65:22:0B:15:3C:7C:0B:22:D2:A2:86:21:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9571F71D3A1F065220B153C7C0B22D2A2862123.cer
Subject info access: rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3a2f33322d3333203d3e20323635343732.roa
Signing time: Thu 28 Nov 2024 14:59:06 +0000
ROA not before: Thu 28 Nov 2024 14:54:06 +0000
ROA not after: Thu 27 Nov 2025 14:59:06 +0000
asID: 265472
IP address blocks: 2804:34ac::/32 maxlen: 33
Validation: Failed, certificate revoked on Thu 28 Nov 2024 16:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:e3:90:db:33:24:06:1c:80:5d:28:ed:22:71:8f:4d:d6:e2:e8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9571F71D3A1F065220B153C7C0B22D2A2862123
Validity
Not Before: Nov 28 14:54:06 2024 GMT
Not After : Nov 27 14:59:06 2025 GMT
Subject: CN=25B68795D826AB4D654F3D520DF384BD8F0A60B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:5d:b8:4a:4e:e3:6a:fa:36:e9:0b:51:32:
dc:c3:55:dc:d9:40:d8:56:df:db:9a:d9:06:00:dd:
51:f7:ac:95:19:60:8f:50:f7:e4:b4:18:76:60:75:
ff:ef:7c:4f:93:95:1e:d0:f4:a9:cd:47:52:3f:8a:
d7:d8:3f:a1:14:9f:ce:9c:f3:e2:4e:ae:74:7b:ed:
fc:5c:6c:a3:0d:69:2e:a1:b8:4c:02:f0:bc:32:04:
2e:bf:5d:54:0c:78:a7:12:97:ce:d2:47:2b:f4:ea:
ea:b7:fc:72:60:b1:f7:20:0b:01:3c:ea:13:e8:67:
4f:6f:eb:b7:60:8c:dd:80:0f:a5:52:05:13:99:41:
a3:7d:0c:0e:b8:10:03:45:2d:f2:00:d4:77:d2:04:
60:a8:f6:7b:d3:7c:2d:7a:76:c3:42:21:37:d5:ed:
6c:f1:bd:3b:0f:03:34:32:a9:a4:f9:15:29:5b:88:
8b:79:27:6c:a0:ac:46:cd:de:dd:98:01:3c:7e:af:
63:16:8b:c5:ab:f4:f0:fd:7d:8a:bc:ad:ff:f3:3d:
aa:8f:11:30:1a:9a:52:84:f0:b3:68:db:62:39:e3:
e9:b7:c0:f3:de:5d:fb:19:cf:f8:56:0e:39:d6:c2:
7e:84:4a:87:71:7b:d5:42:80:37:6f:40:4b:89:b7:
14:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B6:87:95:D8:26:AB:4D:65:4F:3D:52:0D:F3:84:BD:8F:0A:60:B5
X509v3 Authority Key Identifier:
keyid:F9:57:1F:71:D3:A1:F0:65:22:0B:15:3C:7C:0B:22:D2:A2:86:21:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/F9571F71D3A1F065220B153C7C0B22D2A2862123.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9571F71D3A1F065220B153C7C0B22D2A2862123.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3a2f33322d3333203d3e20323635343732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34ac::/32
Signature Algorithm: sha256WithRSAEncryption
68:61:29:1d:93:c5:e2:ca:dc:dd:a9:66:00:b1:12:a6:19:61:
81:b7:10:01:c7:f5:25:15:70:31:7e:9e:ee:32:ee:4d:f2:b0:
fe:95:69:ac:06:dc:50:13:c8:4c:87:f8:c6:5c:df:10:6d:40:
79:cf:bf:5c:83:ef:c7:2c:d8:d6:c8:7a:c3:9d:fd:0f:90:d0:
d0:f7:8a:9c:aa:96:21:44:72:62:c8:9a:48:42:5d:e3:be:2a:
7a:16:60:79:a6:15:54:14:5e:00:fd:41:72:46:17:0c:27:12:
7e:09:f6:ac:f7:f1:af:75:03:e5:b8:77:1c:19:79:92:c6:fd:
aa:74:8f:ba:10:76:eb:41:66:80:5b:f7:25:98:ab:0c:27:5b:
31:07:93:28:91:58:0d:ec:b0:95:d7:8f:3e:a6:d1:e6:34:5d:
3b:f5:f9:cf:9f:c0:09:ba:cb:86:16:8c:11:a7:7d:46:47:c9:
6d:96:54:9e:ad:a8:e4:c2:fe:72:08:5b:fd:f5:55:0e:e5:a6:
df:d1:ee:8d:5b:4e:d5:98:4a:5c:03:0e:61:fc:82:98:d3:d3:
f0:38:7c:16:dd:55:1f:36:fc:b0:dd:2e:88:02:95:ea:2b:68:
3b:a6:ae:5e:d2:e1:02:a7:d3:9f:92:1e:86:db:ed:88:26:06:
0e:63:f1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:12:04 2025 by rpki-client