Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa
File: 323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa (raw, json)
Hash identifier: Uhj7hEzVcjk8WgIVEa0Z/BNEl5voCkrxAc0L26tcHeE=
Subject key identifier: D2:ED:94:05:E3:68:B0:DB:F8:6F:AF:AD:16:4C:CD:B5:F1:F0:D1:C7
Certificate issuer: /CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
Certificate serial: 5F70C3B78C1B20170703101237590873A9921F22
Authority key identifier: DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa
Signing time: Mon 10 Feb 2025 18:03:52 +0000
ROA not before: Mon 10 Feb 2025 17:58:52 +0000
ROA not after: Mon 09 Feb 2026 18:03:52 +0000
asID: 269024
IP address blocks: 2804:5e4c:8000::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:70:c3:b7:8c:1b:20:17:07:03:10:12:37:59:08:73:a9:92:1f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
Validity
Not Before: Feb 10 17:58:52 2025 GMT
Not After : Feb 9 18:03:52 2026 GMT
Subject: CN=D2ED9405E368B0DBF86FAFAD164CCDB5F1F0D1C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:b0:ca:70:dc:ce:14:a5:31:2e:be:b8:2a:
22:d4:7b:3b:46:57:bf:57:60:e6:f8:fa:14:b8:9e:
97:36:5b:bb:d4:6f:fb:cb:d4:5a:eb:07:36:26:31:
96:e3:c7:85:c0:bf:79:9b:da:5f:33:a2:cd:31:cb:
e8:68:9b:8c:52:26:a1:97:be:a8:38:47:82:08:f0:
dd:9f:ee:bd:89:6c:c4:65:83:f8:c4:d9:e6:d0:76:
1f:59:53:35:18:e7:d8:84:02:14:34:5f:b4:91:53:
73:23:50:05:39:63:c0:eb:4d:e1:02:fc:b6:3e:a0:
47:6e:09:1d:6d:be:8d:78:31:64:04:00:4f:07:d5:
a9:41:3b:12:6a:d4:9b:34:5e:4a:12:6c:12:6d:88:
48:12:1c:82:fd:90:17:08:7c:40:09:af:53:15:b0:
34:bc:1a:1d:ca:5f:1c:dd:ed:08:ae:bf:16:46:35:
a5:60:ac:d5:9b:fa:bc:85:f5:a0:33:16:d5:8b:29:
0e:cf:21:f8:bb:fd:9d:69:f6:5f:b8:51:f7:fc:96:
01:9c:f4:91:18:80:54:0a:50:49:aa:0a:2e:f6:1b:
7b:3b:67:26:f0:47:bc:1b:a8:6d:73:d3:91:2e:1f:
fb:59:0a:4a:e4:ac:8b:bc:11:18:3d:50:7f:5b:d1:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:ED:94:05:E3:68:B0:DB:F8:6F:AF:AD:16:4C:CD:B5:F1:F0:D1:C7
X509v3 Authority Key Identifier:
keyid:DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/DDA22D6D75544BECC6E53486FED661DF02BAFC69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5e4c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
5a:74:56:70:bd:03:01:19:13:9f:b3:f5:ec:cb:1d:05:e3:6b:
2a:e2:bf:62:31:f0:8f:2f:f3:2e:fd:e5:14:ee:b3:91:35:f6:
18:ee:a9:4d:30:30:ed:60:38:09:f6:ec:56:57:bb:ac:7b:28:
0f:bd:f7:a3:51:d4:bf:41:ff:3a:30:6b:ba:d9:61:5b:61:81:
cf:1b:9f:6a:f2:56:08:7d:6e:a8:77:c2:01:f1:9e:4c:fa:54:
8d:7a:83:8d:79:7d:d1:50:ce:43:f5:a7:aa:2c:e4:79:f2:df:
dd:22:be:fd:b7:08:fc:9c:6b:02:ea:f0:8d:c3:b4:f3:cb:5e:
6f:03:6b:c7:14:5b:ff:dd:ce:ef:22:2c:b3:26:dc:ac:7f:02:
b2:bb:05:6e:6f:0b:d6:49:40:35:24:ba:52:49:6d:ed:c4:0b:
2f:00:da:23:69:d6:e6:56:d1:82:0c:26:bb:5c:22:e6:e5:b8:
e6:2c:12:ae:43:93:b1:88:c9:76:c3:97:04:70:82:43:54:c7:
fe:08:b7:dc:e8:57:d2:58:ba:e9:9f:c0:c4:30:45:05:c3:6e:
2b:84:06:4e:3c:e4:6d:90:97:13:ec:b2:af:f7:46:7e:19:e8:
51:41:7a:19:cf:e0:f9:82:07:cc:80:9b:2e:44:a2:80:7a:28:
ee:f0:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 07:59:23 2025 by rpki-client