Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3a2f34302d3430203d3e20323633333437.roa
File: 323830343a313462633a3a2f34302d3430203d3e20323633333437.roa (raw, json)
Hash identifier: F/bG4CKBDkOAm/Nhr6QBrsYUrjrvg092CkdoIppiRc8=
Subject key identifier: 56:72:C7:EC:C9:2E:0F:FB:0F:93:26:5D:35:E7:23:50:89:3C:0C:0E
Certificate issuer: /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial: 1EE0DEAD2906A5BAFA57F5629416BB59B8B0579F
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3a2f34302d3430203d3e20323633333437.roa
Signing time: Sat 09 Nov 2024 13:42:28 +0000
ROA not before: Sat 09 Nov 2024 13:37:28 +0000
ROA not after: Sat 08 Nov 2025 13:42:28 +0000
asID: 263347
IP address blocks: 2804:14bc::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 17 Jan 2025 19:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:e0:de:ad:29:06:a5:ba:fa:57:f5:62:94:16:bb:59:b8:b0:57:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Validity
Not Before: Nov 9 13:37:28 2024 GMT
Not After : Nov 8 13:42:28 2025 GMT
Subject: CN=5672C7ECC92E0FFB0F93265D35E72350893C0C0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:50:68:e4:22:d6:fd:6b:fc:bc:01:dd:a9:
58:f2:7e:58:1e:f1:64:f5:ab:e8:09:98:15:92:b2:
fb:00:12:79:78:e8:ac:f6:5b:c5:0c:79:32:0e:2e:
29:95:10:72:0d:ba:e3:d4:91:e4:6d:42:f3:7a:74:
40:40:8f:d7:81:fd:29:6a:97:56:3f:6e:5f:9b:ec:
3a:66:b3:c9:01:1c:0c:e5:0f:db:ec:b4:27:6b:b3:
f6:e0:3e:7a:39:f1:25:c6:f9:c4:4a:a7:af:28:ed:
39:5c:1c:63:0c:52:77:f9:0d:c9:3d:67:bc:e4:e0:
08:3e:4d:8e:f4:1f:4f:b0:2d:af:98:79:4e:1e:a6:
ea:92:5f:81:09:72:4e:e9:18:78:ca:55:f8:73:5b:
f3:19:8d:f0:f9:0e:d7:bb:94:d3:dd:ed:54:c5:58:
c5:03:fb:57:31:77:e9:55:50:e1:06:3f:bc:c0:3a:
ee:2b:67:0f:56:e3:1b:b9:d9:70:f4:c9:b2:1c:41:
68:30:26:d0:e1:03:bd:f2:f4:94:b6:4c:62:dd:84:
6c:82:e0:25:31:98:56:4b:f8:a4:2c:b3:61:a9:b3:
ad:6e:22:c5:0f:c2:4f:df:b0:8b:a4:17:28:5e:dc:
0e:45:72:49:8a:f3:c5:f1:11:f7:a7:31:aa:3c:f8:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:72:C7:EC:C9:2E:0F:FB:0F:93:26:5D:35:E7:23:50:89:3C:0C:0E
X509v3 Authority Key Identifier:
keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3a2f34302d3430203d3e20323633333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:14bc::/40
Signature Algorithm: sha256WithRSAEncryption
3d:b0:ae:e1:a2:da:f7:de:38:a1:51:5d:4b:8c:41:cc:e2:de:
99:9c:69:37:3a:24:67:fc:25:16:38:c5:66:79:7f:9e:b4:3e:
7d:64:0d:1c:ef:00:af:ce:fc:b9:6c:7f:c3:a4:4e:e1:53:50:
e9:07:2b:a9:81:69:4a:c3:dc:27:a8:d8:47:23:e4:c3:0d:c0:
cc:6c:61:48:03:4f:04:40:2e:69:28:36:3a:0d:0b:d3:70:e4:
69:bf:ed:4f:1f:19:c0:e3:66:d8:fd:59:33:f2:5d:e9:50:16:
08:b1:de:2b:9a:e6:a1:c5:23:f6:15:a8:2d:54:b6:d1:69:58:
8e:71:3a:d7:5f:36:76:21:53:fb:de:d9:6f:e1:8d:f8:87:48:
68:51:a8:68:d7:f8:28:92:c7:60:b8:4e:2b:f2:53:59:46:15:
33:6c:41:60:fe:37:f6:fe:bc:2b:b4:32:ee:b1:5b:3f:91:36:
b7:3c:f6:3b:3c:41:5e:b7:02:af:20:4a:b8:16:5c:b8:a0:b7:
0f:14:75:59:23:d8:ed:26:6c:0c:1e:03:26:38:98:59:a9:71:
ae:3e:e8:4b:f6:7c:40:fa:ea:33:bd:2b:b6:a2:86:12:f5:69:
c6:5c:5b:63:7c:e2:e3:91:e4:d3:fe:ac:02:49:9e:2c:a9:37:
61:04:67:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:39:48 2025 by rpki-client