Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a666630303a3a2f34302d3430203d3e20323731363536.roa
File: 323830343a376566303a666630303a3a2f34302d3430203d3e20323731363536.roa (raw, json)
Hash identifier: Wu9WV4ma5CnkaR783kgpdJu0lrNzKZ1CKTl3FVQb6yA=
Subject key identifier: 0C:2A:EC:4D:B6:ED:51:C9:C8:4B:43:19:31:D2:44:E9:3E:6A:11:D1
Certificate issuer: /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial: 21C7F8E6B04A16C19BC18941FF50E509606A6FBF
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a666630303a3a2f34302d3430203d3e20323731363536.roa
Signing time: Wed 24 Apr 2024 19:15:18 +0000
ROA not before: Wed 24 Apr 2024 19:10:18 +0000
ROA not after: Wed 23 Apr 2025 19:15:18 +0000
asID: 271656
IP address blocks: 2804:7ef0:ff00::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c7:f8:e6:b0:4a:16:c1:9b:c1:89:41:ff:50:e5:09:60:6a:6f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Validity
Not Before: Apr 24 19:10:18 2024 GMT
Not After : Apr 23 19:15:18 2025 GMT
Subject: CN=0C2AEC4DB6ED51C9C84B431931D244E93E6A11D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:62:6b:f5:47:42:8b:4d:e7:c3:dc:3d:eb:
3d:62:f8:4b:6f:12:8a:82:b7:4f:10:6e:63:91:37:
67:df:64:61:a0:9f:1b:b3:c8:ff:cd:4b:be:80:3b:
4e:12:c7:63:8b:3c:c8:63:ff:06:04:e5:64:b9:94:
6d:10:29:18:b4:dc:88:21:65:92:dd:1f:2a:70:29:
85:a9:b6:82:53:3f:c6:a5:f8:a4:d0:2f:a9:52:74:
b0:63:85:fc:9d:af:c1:83:ba:5b:c4:37:79:0f:03:
7a:36:8f:ec:24:aa:4e:1d:1f:e6:43:23:69:d0:28:
8a:28:4a:0c:bf:5b:4a:13:91:a1:fc:a5:a6:ae:dc:
6b:dd:bb:9b:f9:83:37:f3:83:f2:de:af:c0:42:dd:
0d:16:8c:2c:17:ab:e3:96:9d:9a:73:ea:37:6d:e3:
f8:d3:a5:0e:cf:b5:7d:86:51:2e:ef:f5:1c:f6:85:
0c:b4:dc:c4:b1:02:3a:5e:ab:4f:33:6b:df:b7:a4:
a5:f9:7c:79:6c:bf:97:fd:e9:db:05:4f:87:bb:c2:
41:2b:bc:f6:da:ae:a2:30:58:a7:4c:ef:81:2e:4b:
5c:fd:23:aa:f6:10:6b:62:82:91:50:e9:ed:f8:40:
fc:82:fd:79:f0:df:90:fd:2b:d6:cf:d9:2f:bc:d5:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2A:EC:4D:B6:ED:51:C9:C8:4B:43:19:31:D2:44:E9:3E:6A:11:D1
X509v3 Authority Key Identifier:
keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a666630303a3a2f34302d3430203d3e20323731363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7ef0:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
41:6f:82:5d:62:81:d0:3e:8b:0d:1e:2f:a8:78:c8:f9:ea:1e:
f2:f9:9f:f6:33:6d:08:b4:e5:d2:bb:cf:89:ea:b1:6a:2d:be:
1c:a3:9a:35:90:7d:67:98:b0:49:91:bd:08:2e:0e:f3:d2:02:
93:73:67:ea:fd:39:28:f9:b5:0b:64:5d:03:38:0f:26:49:92:
43:84:fb:11:91:98:76:c6:54:63:a6:9a:0f:11:2e:04:d8:d9:
2a:31:9e:5d:0a:47:a2:1c:eb:88:6f:17:a4:08:30:cd:ad:2c:
fc:11:11:39:d6:97:01:0b:cb:ce:51:d0:8a:dc:10:56:d1:e1:
2d:2f:9e:8f:e2:f3:28:86:51:99:32:d5:bc:e5:c5:5c:e6:83:
26:eb:de:e6:12:3a:59:4b:ae:63:e4:58:d9:8b:57:2c:81:6a:
d4:53:7e:d8:5a:5e:98:51:93:fb:4b:d0:46:85:e0:f8:bd:c6:
2d:cd:fc:d6:59:96:b1:ad:22:60:7d:10:d7:0f:ad:1b:ed:f2:
33:a8:bd:ec:35:2d:ca:a2:04:44:10:30:23:c5:20:92:85:13:
63:9c:fb:2d:93:6d:d3:4b:1f:61:00:0a:8a:d3:17:fe:3f:d4:
b5:f6:d2:95:11:86:d6:2b:5a:6e:ee:d7:7e:d1:34:9d:82:7f:
7a:d1:43:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:39:29 2025 by rpki-client