Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/323830343a333836633a3a2f33322d3438203d3e20323636343736.roa
File: 323830343a333836633a3a2f33322d3438203d3e20323636343736.roa (raw, json)
Hash identifier: +BYB1ioYkYnZhZu1AgadjDCErXgAdPkly2sC1EDEYes=
Subject key identifier: 02:EF:62:25:3B:AA:54:BB:B3:81:DA:DF:6F:FE:12:B1:7E:EF:73:9A
Certificate issuer: /CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F
Certificate serial: 0BC181B7A7D3EC85BE944AAE7142263827CB2BAF
Authority key identifier: C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/323830343a333836633a3a2f33322d3438203d3e20323636343736.roa
Signing time: Fri 17 Jan 2025 17:34:05 +0000
ROA not before: Fri 17 Jan 2025 17:29:05 +0000
ROA not after: Fri 16 Jan 2026 17:34:05 +0000
asID: 266476
IP address blocks: 2804:386c::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Feb 2025 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c1:81:b7:a7:d3:ec:85:be:94:4a:ae:71:42:26:38:27:cb:2b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F
Validity
Not Before: Jan 17 17:29:05 2025 GMT
Not After : Jan 16 17:34:05 2026 GMT
Subject: CN=02EF62253BAA54BBB381DADF6FFE12B17EEF739A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:46:5f:04:1d:4c:e8:1e:71:2e:c6:cd:fa:
7a:f9:f4:a8:df:25:33:2c:8a:fa:ae:37:6a:a9:80:
97:26:ac:13:0c:08:72:68:8d:24:c6:05:71:52:41:
8f:f2:74:9a:a1:45:0b:94:06:d5:ea:c6:b0:3d:5e:
08:b3:47:e8:39:9a:c7:a0:86:4f:02:af:35:7c:74:
32:10:01:87:7f:be:e5:5c:0b:1b:bc:90:e4:ad:3b:
e5:5b:e2:10:45:e6:6f:20:97:56:e1:4b:70:66:2c:
15:35:0b:eb:b1:e0:4d:15:19:6f:bb:81:80:9f:ba:
37:84:a6:83:0b:af:64:50:2c:be:a9:d5:b9:38:69:
36:b3:5a:81:0a:42:1a:34:83:97:d6:5d:c0:40:83:
33:ff:92:55:a0:18:5f:45:ce:74:00:25:49:49:2d:
19:eb:f8:e3:0a:e2:24:c4:3d:b9:dc:84:fc:36:1e:
2a:6f:30:92:7f:dd:ec:07:41:0b:24:01:79:de:45:
d4:4d:f6:61:9e:f8:15:38:13:eb:20:2a:c6:e4:19:
20:be:16:39:db:9b:32:a4:3c:7e:d0:5a:75:8f:20:
8d:df:fa:05:31:79:57:e5:ce:31:4f:03:ed:cf:23:
f9:f0:10:31:9c:66:24:47:80:dc:5a:1d:bf:08:d1:
2d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EF:62:25:3B:AA:54:BB:B3:81:DA:DF:6F:FE:12:B1:7E:EF:73:9A
X509v3 Authority Key Identifier:
keyid:C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/323830343a333836633a3a2f33322d3438203d3e20323636343736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:386c::/32
Signature Algorithm: sha256WithRSAEncryption
49:62:a3:89:fa:56:aa:e9:43:ba:cc:a5:a9:ed:f5:d8:ae:4a:
b6:7b:e9:e6:28:f7:a3:ef:e4:e1:8b:53:cf:9f:2e:a6:2b:d2:
99:59:1d:80:e2:b4:ba:48:86:84:1f:77:4c:0a:c8:0c:b0:fc:
2f:50:84:87:cd:1b:4c:05:6d:1f:31:76:1f:52:f7:f6:ab:fe:
d8:49:46:5c:e2:19:03:36:e7:3e:8c:62:4c:21:05:9d:64:5c:
33:e7:04:dd:65:72:00:fc:57:9a:da:10:f9:96:8c:59:90:cf:
ce:9d:9b:98:4e:c4:a0:9f:6c:6a:a8:55:fa:1e:04:6a:22:73:
00:59:da:6c:23:57:63:ca:d8:34:f5:f4:e2:08:af:55:35:85:
7b:a8:2a:ad:b4:9e:d3:02:8e:7f:b5:9a:39:52:11:88:e0:36:
00:8b:c5:61:b4:54:b3:98:b5:e3:71:7d:a6:9e:17:d5:e9:73:
3e:db:6f:1e:11:f3:7e:2e:42:e2:37:36:3d:6d:86:4a:53:4f:
95:d1:da:f4:5d:c9:4a:23:78:f8:ba:22:bd:64:e3:b7:7c:63:
6c:c4:66:ad:4d:9d:10:ea:e6:5b:0e:c6:57:33:ce:fe:98:3a:
f9:9f:93:2e:c6:e7:ea:66:ae:bd:09:8e:76:85:08:f0:a4:a6:
18:5e:40:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:44:23 2025 by rpki-client