Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a313030303a3a2f33362d3336203d3e20323632333338.roa
File: 323830343a3830343a313030303a3a2f33362d3336203d3e20323632333338.roa (raw, json)
Hash identifier: DLVXb+Ejx6ZaUymc5SQNRZgeZBGw8tb/61NV9UMiKts=
Subject key identifier: A7:63:C9:E1:DD:C5:B1:27:80:0B:82:D4:7E:37:A8:F7:76:7A:45:DA
Certificate issuer: /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial: 1208E7728C6D1AB621F924B528FC739FA289D1BE
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a313030303a3a2f33362d3336203d3e20323632333338.roa
Signing time: Wed 24 Apr 2024 12:44:36 +0000
ROA not before: Wed 24 Apr 2024 12:39:36 +0000
ROA not after: Wed 23 Apr 2025 12:44:36 +0000
asID: 262338
IP address blocks: 2804:804:1000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 05 Jun 2024 18:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:08:e7:72:8c:6d:1a:b6:21:f9:24:b5:28:fc:73:9f:a2:89:d1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Validity
Not Before: Apr 24 12:39:36 2024 GMT
Not After : Apr 23 12:44:36 2025 GMT
Subject: CN=A763C9E1DDC5B127800B82D47E37A8F7767A45DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:59:67:53:e5:e8:8c:67:69:11:ca:3f:42:
39:24:41:ea:55:2c:bb:12:b8:96:46:bc:4e:cc:09:
1a:fd:df:cd:d6:74:5e:14:2d:bd:c7:97:f8:d9:f7:
8c:62:66:b4:3a:9b:10:23:14:8f:70:ff:6b:75:1e:
3e:cd:21:66:48:ba:54:ef:b3:f6:c2:bf:06:fa:1a:
a9:6b:c2:d8:7c:6e:c8:c1:e3:b0:73:6f:46:9d:41:
77:82:f8:9b:36:c6:4b:d7:a9:15:2e:bd:e1:fa:ab:
1e:bb:14:42:ae:aa:af:32:c3:eb:7e:3b:db:3a:66:
83:1b:2d:26:01:f5:02:c3:ea:05:cd:b7:57:7d:70:
ba:6a:61:0b:cc:c2:f5:bb:db:1f:b6:9c:5b:ea:cf:
13:c6:f2:48:f1:6c:7d:b5:61:f4:d4:54:79:da:8d:
6e:92:45:15:9c:13:83:b2:56:7a:08:07:75:d1:1e:
fc:55:fd:f0:be:84:97:51:33:a2:e9:f4:46:1c:42:
5c:a3:90:48:25:6f:c6:ca:e2:c2:84:fd:60:54:f3:
87:17:45:fc:09:41:16:55:35:98:a5:b1:c8:ce:49:
cc:bd:fb:14:64:ce:50:21:b6:1f:f1:a9:91:f0:e8:
c7:b5:ad:5d:48:2d:7f:c6:af:57:90:4d:61:3c:cf:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:63:C9:E1:DD:C5:B1:27:80:0B:82:D4:7E:37:A8:F7:76:7A:45:DA
X509v3 Authority Key Identifier:
keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a313030303a3a2f33362d3336203d3e20323632333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:804:1000::/36
Signature Algorithm: sha256WithRSAEncryption
28:72:af:c7:91:11:1e:5a:8f:c7:54:f4:3a:6a:75:60:c6:cb:
00:bf:22:f6:e2:78:9c:89:8f:d0:24:7b:2a:ea:fa:0c:0f:eb:
8f:99:f5:81:3d:c5:8a:5d:75:e4:57:3d:52:1d:d6:fb:e6:26:
7b:d1:a2:7e:cd:d6:cc:b6:09:f6:be:c1:e7:d2:42:d6:8f:c5:
8c:2a:47:fa:8e:2f:92:59:66:eb:ba:24:7c:ce:a7:69:01:39:
b0:3b:11:6a:59:fc:c9:cf:13:34:29:a5:8d:d6:cb:9a:2d:c8:
5a:87:cf:18:13:a0:38:28:1b:cb:e6:a3:a4:4e:0a:b9:c6:d9:
ac:32:32:d0:5b:71:a2:82:f9:28:b3:24:43:8f:d8:22:8f:ad:
4f:50:0a:5b:51:1c:be:61:bb:d4:92:2d:ec:dd:81:3b:7f:a3:
8a:7c:e6:e8:d8:9a:81:17:a5:3d:9b:b0:1a:f3:20:66:16:88:
fa:d8:cf:0f:1f:1e:5d:6c:e4:f0:5f:b9:de:32:b6:d7:0e:1d:
50:ee:c3:00:2c:6a:9e:68:90:30:7d:84:d8:77:a5:9b:17:1f:
eb:f5:4e:ed:21:54:8b:b1:48:f0:ab:ef:3b:b2:d1:bf:2a:e0:
36:be:83:b4:44:27:04:05:c1:8c:31:50:5e:02:c6:e3:cf:ab:
31:5d:75:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:07 2025 by rpki-client