Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/323830343a363366343a3a2f33322d3332203d3e20323639333934.roa
File: 323830343a363366343a3a2f33322d3332203d3e20323639333934.roa (raw, json)
Hash identifier: iXqVFVZw+gpWywfexdYd17oWGNNA/NkWpgvU3/znvCE=
Subject key identifier: BB:56:37:70:7D:A8:7D:3B:80:99:29:27:EF:BE:A8:0D:73:19:08:4D
Certificate issuer: /CN=CE5B1C22F785931FD04E35B0D10299499369B6B2
Certificate serial: 0EF7A96C65CB98491E0C329BD5CD60ADDD74D52B
Authority key identifier: CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/323830343a363366343a3a2f33322d3332203d3e20323639333934.roa
Signing time: Tue 31 Dec 2024 18:23:28 +0000
ROA not before: Tue 31 Dec 2024 18:18:28 +0000
ROA not after: Tue 30 Dec 2025 18:23:28 +0000
asID: 269394
IP address blocks: 2804:63f4::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 03 Jan 2025 18:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f7:a9:6c:65:cb:98:49:1e:0c:32:9b:d5:cd:60:ad:dd:74:d5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE5B1C22F785931FD04E35B0D10299499369B6B2
Validity
Not Before: Dec 31 18:18:28 2024 GMT
Not After : Dec 30 18:23:28 2025 GMT
Subject: CN=BB5637707DA87D3B80992927EFBEA80D7319084D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:ad:75:38:66:dc:c2:ad:13:0b:f2:4d:b0:
db:2f:51:15:af:f4:25:23:3e:72:13:3e:2a:f6:7b:
c6:6c:ca:dc:73:f5:e1:0f:1b:d8:ad:6f:6e:fb:87:
d8:4a:77:50:03:c7:54:bb:39:a5:eb:c9:9b:24:f5:
13:b7:da:f3:36:ee:ab:ff:bd:c8:e9:d1:ec:f3:96:
67:b8:1e:8e:0b:05:84:2f:d6:d4:78:4e:0f:85:c0:
f5:60:75:26:5c:79:9c:fc:79:b9:98:da:6e:f8:ea:
63:38:e7:c1:21:92:52:82:c8:88:34:0b:14:3f:19:
81:4f:4a:79:50:35:93:5c:40:72:9c:fe:a7:fe:a4:
52:9d:29:5d:b4:80:39:af:83:77:9e:f8:16:0c:83:
c0:1d:ac:19:80:01:38:68:1a:42:f8:e6:98:e5:00:
4d:36:da:56:09:37:e4:7a:36:24:0d:ee:33:f3:16:
5b:73:84:4e:05:1e:3e:bd:f6:ec:6e:4d:d4:f1:5a:
0e:0e:13:f3:45:8f:f2:d2:ef:8e:72:a3:14:61:6c:
78:72:b7:ec:07:94:75:93:6a:a5:6e:63:83:0b:06:
dc:eb:b9:51:93:57:8c:cc:f4:a8:dc:5b:df:34:d4:
ad:96:4e:64:8a:b6:f2:82:20:2a:84:03:12:e0:3d:
88:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:56:37:70:7D:A8:7D:3B:80:99:29:27:EF:BE:A8:0D:73:19:08:4D
X509v3 Authority Key Identifier:
keyid:CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/323830343a363366343a3a2f33322d3332203d3e20323639333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:63f4::/32
Signature Algorithm: sha256WithRSAEncryption
c5:80:6c:74:8f:e9:eb:33:e5:40:dc:01:61:c5:69:31:26:f5:
1b:f6:88:9c:cb:14:ed:0c:d5:f2:14:e9:15:90:06:94:53:19:
32:4c:3e:6c:9d:98:07:ef:1e:6a:b9:b1:d6:aa:9f:a8:16:87:
9f:e4:29:40:b9:1e:ed:04:1f:b3:61:78:f3:55:a8:4b:9a:da:
3b:47:54:b1:64:fc:0b:34:61:bd:c7:ac:f6:17:eb:41:26:a4:
10:53:36:e8:e1:55:ec:4e:d7:fe:93:9c:0a:a2:a8:4d:6d:59:
8f:42:a0:48:c2:84:c1:ee:cc:cc:4c:dd:71:4a:da:c7:e3:e4:
bc:93:98:5b:1f:4f:c7:c9:94:9a:4c:40:73:ad:05:c9:61:0a:
59:8a:1f:5a:46:1c:b6:3d:c7:b2:5c:0f:e1:98:07:6b:d8:d4:
48:56:60:9f:e5:28:7a:df:2e:85:87:b0:6c:7c:2b:71:b0:85:
b6:68:55:ab:07:5e:af:01:0c:8e:8e:a2:07:81:35:99:bb:9c:
25:8f:32:f9:7e:68:ee:25:70:f8:fe:61:2d:7f:1a:da:27:e7:
de:19:2b:f0:9f:0f:2e:d2:b6:10:55:09:34:12:bb:e8:17:d8:
6e:45:10:b5:12:65:b3:f0:aa:17:bc:30:35:29:b5:50:86:40:
90:9e:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:49 2025 by rpki-client