Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a633030303a3a2f33362d3336203d3e20323632333338.roa
File: 323830343a3830343a633030303a3a2f33362d3336203d3e20323632333338.roa (raw, json)
Hash identifier: XODGVVdmRGsPGRasX8ZlajHxZjeraNFOGPLgXl2TAFg=
Subject key identifier: 77:02:23:67:72:1F:56:36:70:7C:71:CE:4C:F1:15:A9:B2:70:8C:76
Certificate issuer: /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial: 499D6D0632C044822B43C48AF48FC4C1C6BC09A7
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a633030303a3a2f33362d3336203d3e20323632333338.roa
Signing time: Wed 24 Apr 2024 12:44:58 +0000
ROA not before: Wed 24 Apr 2024 12:39:58 +0000
ROA not after: Wed 23 Apr 2025 12:44:58 +0000
asID: 262338
IP address blocks: 2804:804:c000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 05 Jun 2024 18:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:9d:6d:06:32:c0:44:82:2b:43:c4:8a:f4:8f:c4:c1:c6:bc:09:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Validity
Not Before: Apr 24 12:39:58 2024 GMT
Not After : Apr 23 12:44:58 2025 GMT
Subject: CN=77022367721F5636707C71CE4CF115A9B2708C76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:2d:01:17:af:6e:39:f6:7d:e9:f6:15:48:
74:97:ce:2c:31:06:12:bb:4d:88:fa:6c:78:6e:82:
d1:f5:a4:87:8b:9a:d2:51:34:15:ef:e0:85:00:8e:
ef:62:f3:f5:5e:f5:c1:08:cc:43:b5:ba:c0:86:0a:
4f:59:a9:7c:0c:32:5a:79:85:45:3f:5a:86:24:f1:
b6:12:ba:74:66:f0:56:2e:f9:bf:9b:05:b5:f6:d8:
cb:fb:20:06:d4:9e:9d:23:02:a1:9a:60:13:6f:7e:
0c:7d:47:71:48:d3:98:82:2e:ac:32:9d:51:72:88:
09:38:49:4b:9b:b9:cc:97:0d:41:4f:de:5e:b4:c9:
6e:aa:25:50:f1:ef:3d:10:90:13:7c:28:a0:1e:d8:
3f:47:62:15:fd:a9:a2:63:42:fb:7e:99:fc:68:0a:
79:bd:68:22:c5:86:c8:32:ba:7e:e4:2a:73:e8:c8:
f2:19:ee:13:b3:f2:64:94:83:a7:fc:43:81:f7:40:
20:21:e6:f1:05:5d:82:96:4c:32:e8:c2:5d:ce:2d:
35:b0:dd:fd:0d:00:d9:d6:5c:af:93:4a:d3:11:22:
73:07:89:a9:4d:06:6b:94:4d:d8:89:67:17:ae:fb:
64:d7:6f:30:31:f7:72:cf:b8:5c:d1:e7:b3:f9:50:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:02:23:67:72:1F:56:36:70:7C:71:CE:4C:F1:15:A9:B2:70:8C:76
X509v3 Authority Key Identifier:
keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a633030303a3a2f33362d3336203d3e20323632333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:804:c000::/36
Signature Algorithm: sha256WithRSAEncryption
59:58:3a:e1:af:0a:8a:26:4a:15:12:00:32:87:d1:51:b9:9e:
4f:eb:9b:f4:20:53:2f:19:3b:35:7a:34:41:2d:09:54:a4:da:
56:9f:d1:70:25:7e:00:41:79:e8:7b:1f:21:63:bf:55:a7:1c:
fb:d3:29:a0:ba:04:f7:dc:29:06:19:f1:24:eb:dd:4d:2c:8e:
d4:5c:6c:d8:a7:2d:ba:f0:df:6f:3c:a9:17:98:10:9e:2f:f1:
7c:83:11:4a:57:4a:81:c1:fa:ab:37:d6:06:64:4b:74:ac:4c:
c9:87:f9:4e:d5:3d:5c:fd:7a:1b:36:ac:f0:49:29:d5:00:e1:
7a:08:c4:91:5c:ee:21:e1:7c:9a:cd:6f:21:ce:cb:45:5b:84:
6a:53:af:e5:0b:e3:07:98:76:7d:e2:44:af:30:0b:3d:fd:7a:
67:a0:83:d6:ae:ab:4d:47:30:15:02:78:c9:73:18:d3:d9:96:
10:f9:30:1e:c2:74:d8:5a:31:5c:5f:1b:6d:86:ec:06:eb:54:
ee:99:5f:ea:83:ba:3e:34:55:c5:37:35:0f:52:17:41:50:3d:
52:34:5f:40:5d:40:d2:a0:d5:66:5a:5d:fb:ab:86:1b:c4:dc:
f8:d1:d7:c1:11:58:d4:75:bd:5b:02:64:4a:5b:45:4a:6f:56:
c7:e0:cb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:52 2025 by rpki-client