Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a3a2f33322d3332203d3e20323732353333.roa
File: 323830343a383261633a3a2f33322d3332203d3e20323732353333.roa (raw, json)
Hash identifier: 635QgZ1uoUR8jgGOnQkSnoszCwu071rPnXkwC1jnN0s=
Subject key identifier: F7:E9:2B:E7:2C:59:10:C0:DA:0A:47:0E:9B:2A:AA:90:59:E9:DE:BD
Certificate issuer: /CN=CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22
Certificate serial: 54BEDE8978A097EDFBD6B295DC193F44CAAC3CC0
Authority key identifier: CD:A3:48:A4:B2:FE:FD:9E:13:C7:F0:75:05:38:DD:EA:A5:87:DB:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a3a2f33322d3332203d3e20323732353333.roa
Signing time: Fri 02 Aug 2024 15:58:19 +0000
ROA not before: Fri 02 Aug 2024 15:53:19 +0000
ROA not after: Fri 01 Aug 2025 15:58:19 +0000
asID: 272533
IP address blocks: 2804:82ac::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 Aug 2024 11:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:be:de:89:78:a0:97:ed:fb:d6:b2:95:dc:19:3f:44:ca:ac:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22
Validity
Not Before: Aug 2 15:53:19 2024 GMT
Not After : Aug 1 15:58:19 2025 GMT
Subject: CN=F7E92BE72C5910C0DA0A470E9B2AAA9059E9DEBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:56:c3:86:6f:4a:7b:b8:fb:58:89:ae:42:
ac:69:43:c6:6b:55:d9:89:73:9c:70:32:ec:eb:a3:
45:cc:9c:0a:8a:73:5f:ef:99:ba:a2:a8:d9:8e:20:
c0:e6:7f:c2:fb:30:9d:d9:da:7e:bd:cc:f0:9e:06:
13:48:e6:c0:67:b0:d7:ff:76:93:92:5c:91:cd:68:
f7:38:5d:eb:f0:6a:78:83:e3:4d:d8:fe:da:aa:df:
83:2f:e5:95:b9:0b:19:2c:40:e4:2e:17:b0:e8:59:
c9:77:07:ae:b6:3a:bb:89:de:34:0b:3a:b1:ac:48:
d5:d8:71:d8:43:0c:0e:cc:48:70:fb:94:f9:5b:fc:
97:58:26:ad:9e:16:43:3e:ad:6b:ce:07:da:63:13:
dc:f9:83:fc:02:ee:2c:86:39:1e:5e:cc:b6:ed:40:
2a:6b:5d:65:a6:b0:32:a0:9b:81:d0:b0:c2:25:00:
1f:7e:f9:9c:d7:ae:8a:76:ac:41:b6:ed:4d:46:1a:
d8:4c:ed:ce:ec:cc:84:7a:a7:16:f7:57:d6:d9:10:
c4:aa:41:e5:ed:a9:b2:ce:63:53:e4:aa:bd:76:da:
59:36:fe:c1:a2:6c:38:26:b9:21:88:ed:69:14:ff:
a4:0f:24:40:9d:b7:d3:80:5b:c6:ee:1f:34:d5:5b:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E9:2B:E7:2C:59:10:C0:DA:0A:47:0E:9B:2A:AA:90:59:E9:DE:BD
X509v3 Authority Key Identifier:
keyid:CD:A3:48:A4:B2:FE:FD:9E:13:C7:F0:75:05:38:DD:EA:A5:87:DB:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a3a2f33322d3332203d3e20323732353333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:82ac::/32
Signature Algorithm: sha256WithRSAEncryption
2a:bf:f1:20:73:6a:f6:68:ac:e0:9f:0c:05:99:5b:93:cd:3a:
43:7e:2d:a9:91:f1:91:70:d6:ad:da:7e:ef:62:3b:3d:7b:b1:
84:6b:51:8f:da:d4:5f:d3:cf:02:43:22:53:c8:76:bf:05:6c:
e5:9e:82:0a:5e:da:d9:c8:14:25:75:50:15:21:c0:04:ab:d5:
52:5a:39:1a:bd:2b:32:29:01:17:de:6a:a2:46:41:ca:0f:73:
47:6b:71:0a:33:12:e1:7f:70:56:44:d8:91:fd:74:c0:e9:ab:
8d:9c:d9:3a:e0:43:d0:9f:6d:07:5d:a2:51:21:4a:0f:f7:64:
63:2c:f1:f7:d1:ce:03:3c:34:2d:7a:b7:f9:45:43:c9:bc:e9:
ae:52:ef:89:87:20:f5:b6:eb:cb:42:46:ed:07:19:7f:ec:e4:
bd:88:39:c4:03:5b:bb:7d:59:0e:a6:5f:d3:48:91:00:bd:b9:
94:6e:21:a9:4b:35:1a:5d:11:4a:72:a8:d1:69:c5:e4:a4:94:
e9:b1:96:66:cf:a0:91:4e:bc:43:92:6c:29:3e:bd:28:e9:ab:
55:72:be:c9:50:bf:09:07:7e:92:14:e6:c8:ae:6e:42:4d:d8:
1d:f5:4f:52:9f:e1:b5:44:a7:b6:89:4e:8c:4b:de:ef:50:76:
ec:16:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 13:37:27 2024 by rpki-client on console-fra.rpki-client.org