Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3131303a3a2f34352d3435203d3e20323633333437.roa
File: 323830343a313462633a3131303a3a2f34352d3435203d3e20323633333437.roa (raw, json)
Hash identifier: AAvUcHsqU89UTNQTIXfA4A6l7bcv+qhobvyasGHB+q8=
Subject key identifier: 2F:A7:D0:45:1A:37:1B:B4:AB:78:F5:65:2C:E6:BB:88:C6:6C:8E:2B
Certificate issuer: /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial: 2BB0B2DDEE5F2AAFA22A41FE11EF3A985C96880F
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3131303a3a2f34352d3435203d3e20323633333437.roa
Signing time: Sat 09 Nov 2024 13:43:01 +0000
ROA not before: Sat 09 Nov 2024 13:38:01 +0000
ROA not after: Sat 08 Nov 2025 13:43:01 +0000
asID: 263347
IP address blocks: 2804:14bc:110::/45 maxlen: 45
Validation: Failed, certificate revoked on Fri 17 Jan 2025 19:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b0:b2:dd:ee:5f:2a:af:a2:2a:41:fe:11:ef:3a:98:5c:96:88:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Validity
Not Before: Nov 9 13:38:01 2024 GMT
Not After : Nov 8 13:43:01 2025 GMT
Subject: CN=2FA7D0451A371BB4AB78F5652CE6BB88C66C8E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:1f:9d:46:b7:5f:fb:46:9a:9f:96:3c:98:
f4:77:79:55:c3:5d:a6:a1:bb:0a:1e:48:83:fc:77:
8d:0a:92:91:02:8a:1c:3f:71:34:9a:e6:f8:f7:cb:
2d:5c:e1:6c:bf:c7:5e:2b:f1:ac:97:ed:9b:23:7b:
86:e7:9b:0e:75:10:24:7f:cc:60:3f:3d:0d:58:40:
85:84:13:d6:17:4d:62:84:5b:b2:9c:28:81:48:1b:
b2:e3:1a:78:76:c8:12:f7:96:a8:df:53:e7:a5:a3:
a9:65:0d:71:e0:ea:a7:46:c0:9f:e7:93:45:cf:1e:
a4:48:cf:e0:16:d5:0a:61:2d:1e:e0:ef:f0:cc:c2:
e6:47:96:83:78:44:46:0c:0e:6a:11:c8:1e:43:2f:
d0:5d:0c:47:82:d5:6e:64:85:54:39:63:ec:16:5e:
b1:60:91:03:a3:1d:18:30:d3:3e:2a:68:96:bc:51:
4c:cc:88:81:43:37:74:42:28:b4:d4:2d:d1:2e:cc:
ea:d8:bb:0e:62:0a:30:ec:ed:5b:57:ad:50:1d:c3:
7c:99:13:a4:99:49:83:03:1d:da:00:56:30:f2:61:
4e:9b:e5:5e:e8:cb:10:57:99:9f:ea:3e:57:25:d9:
6a:f9:fa:09:8d:5c:08:4d:be:3f:73:41:8e:e7:50:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A7:D0:45:1A:37:1B:B4:AB:78:F5:65:2C:E6:BB:88:C6:6C:8E:2B
X509v3 Authority Key Identifier:
keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3131303a3a2f34352d3435203d3e20323633333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:14bc:110::/45
Signature Algorithm: sha256WithRSAEncryption
47:49:d1:24:fb:7d:c7:a3:21:12:af:ce:d6:b3:a2:b1:c1:5e:
58:71:6c:d1:ae:b0:d8:9e:10:c9:71:c7:d2:7b:e8:b8:7a:ff:
8c:76:a3:0f:65:a5:b4:08:b2:59:a2:78:45:11:6a:59:31:9b:
4f:34:07:d5:08:50:39:04:aa:c8:69:0a:3c:d4:9b:be:88:82:
4c:77:62:45:95:76:8f:cf:c8:ce:f0:1a:3a:85:30:0a:61:84:
03:a6:59:dc:5a:f0:c4:43:0e:71:ef:27:20:24:ec:26:82:67:
97:27:19:d3:2a:a3:57:c7:52:fe:e4:a1:47:fa:1e:aa:e2:c1:
20:4f:5b:df:67:d2:f5:d9:5f:e0:88:64:0b:99:c0:d7:ed:32:
8c:ca:d1:b3:95:58:82:6c:e6:76:2e:28:5b:e6:95:b7:eb:87:
41:bc:26:d3:8a:29:34:2a:10:28:9f:a1:b5:a8:3e:d9:da:6c:
8e:5e:25:a1:f7:a6:51:66:c5:a8:00:13:50:29:b3:63:39:60:
2f:d6:d7:15:35:70:05:99:e5:68:4b:d3:0d:78:11:9e:0c:59:
73:83:37:f2:cc:bc:b2:5a:5f:9a:55:9c:db:05:4b:64:1d:1a:
3e:dc:63:21:d0:31:67:5d:01:df:f3:b5:81:be:0f:4b:36:2a:
e0:ac:d0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:39:48 2025 by rpki-client