Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a3a2f33332d3333203d3e20323733333436.roa
File: 323830343a386434343a3a2f33332d3333203d3e20323733333436.roa (raw, json)
Hash identifier: eBCcv5bTaBMVBkwXpankDQB4weH2l6lN5Fw2tU7gt5s=
Subject key identifier: A8:EB:59:71:27:37:0C:5F:1D:C4:14:F0:68:21:FD:7D:F2:AD:40:2E
Certificate issuer: /CN=36C70D54DDACCCE385198B3B82C67FCEE369B6D0
Certificate serial: 7FDF9C2ACFEB1AACEDFCE6EFEFD42A2055908520
Authority key identifier: 36:C7:0D:54:DD:AC:CC:E3:85:19:8B:3B:82:C6:7F:CE:E3:69:B6:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a3a2f33332d3333203d3e20323733333436.roa
Signing time: Wed 12 Feb 2025 20:00:26 +0000
ROA not before: Wed 12 Feb 2025 19:55:26 +0000
ROA not after: Wed 11 Feb 2026 20:00:26 +0000
asID: 273346
IP address blocks: 2804:8d44::/33 maxlen: 33
Validation: Failed, certificate revoked on Sat 22 Feb 2025 14:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:df:9c:2a:cf:eb:1a:ac:ed:fc:e6:ef:ef:d4:2a:20:55:90:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36C70D54DDACCCE385198B3B82C67FCEE369B6D0
Validity
Not Before: Feb 12 19:55:26 2025 GMT
Not After : Feb 11 20:00:26 2026 GMT
Subject: CN=A8EB597127370C5F1DC414F06821FD7DF2AD402E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:9e:d8:0e:75:9d:cf:aa:fb:3b:48:59:7d:
d8:5d:68:e7:2c:11:88:3c:4e:f9:c6:0b:50:10:82:
6a:b2:f5:7b:cb:4e:ec:cb:8e:cf:3b:af:e9:45:27:
fd:a9:61:e6:8e:57:91:c0:11:e2:fc:5e:c3:e4:b2:
0e:99:8e:5e:f5:70:7d:4b:3e:9e:75:f0:2d:ef:e2:
d3:a0:80:4f:be:5e:b1:b2:0f:62:60:7d:94:d3:4f:
40:ff:44:80:cc:80:df:61:c4:eb:c6:4f:46:26:8a:
22:20:02:3b:d1:1e:0e:e2:67:15:2c:74:50:89:bf:
6b:25:1e:73:db:ec:d8:06:51:ec:d7:59:88:2f:93:
d8:07:58:db:67:d6:95:82:23:c9:40:4d:b8:2b:fd:
db:45:aa:71:5b:09:44:5c:c3:6a:38:14:d3:fc:47:
5e:de:da:94:e2:4f:e3:c1:74:17:91:57:1d:88:3e:
10:55:83:51:4c:22:b6:b7:71:07:e1:65:48:81:0e:
f5:98:0d:f5:fb:06:ad:ba:05:b0:8e:59:34:b8:4e:
f1:c7:27:ab:dc:7d:28:33:83:77:20:6e:12:17:7b:
dc:b6:fc:99:53:2e:54:30:9f:d0:3e:3b:8b:f3:4d:
a0:db:b7:9c:8b:b7:77:2d:84:a6:dc:fc:5b:04:be:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EB:59:71:27:37:0C:5F:1D:C4:14:F0:68:21:FD:7D:F2:AD:40:2E
X509v3 Authority Key Identifier:
keyid:36:C7:0D:54:DD:AC:CC:E3:85:19:8B:3B:82:C6:7F:CE:E3:69:B6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a3a2f33332d3333203d3e20323733333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8d44::/33
Signature Algorithm: sha256WithRSAEncryption
5b:69:94:a7:fe:c0:39:ad:f9:b3:9a:51:db:7f:23:4b:a3:29:
8a:5d:e4:37:e6:c8:28:42:c9:32:5a:26:bb:d7:28:79:e7:ee:
33:a4:ff:81:3f:21:8d:f4:b7:a0:37:92:95:cd:3f:18:c4:7f:
f1:38:8a:8c:58:b8:e1:52:8e:ed:70:52:84:3c:ea:05:68:88:
f4:1a:43:b3:29:5c:11:3a:70:fb:f0:92:81:8e:10:05:c3:4b:
e2:31:06:c6:69:2f:ab:bd:0a:30:3f:04:e8:6e:5a:85:21:1e:
36:6f:f5:62:4c:e7:de:b7:0d:29:6a:f3:e6:4c:68:3c:fe:59:
c8:aa:b4:38:79:63:33:a1:b8:07:d3:e4:2a:2d:13:bc:cf:7a:
b0:e6:4e:ae:f1:b5:c9:55:99:a8:0c:cc:90:6e:48:9f:88:be:
d5:cf:63:95:38:84:cd:68:ac:51:93:40:62:37:ec:92:6b:9e:
ff:ba:01:ea:70:0f:bd:bc:83:62:22:4f:01:96:d2:50:09:83:
ec:94:46:5a:b8:c3:b4:53:cd:bd:b6:0c:ad:11:0f:06:fc:e2:
e4:65:f8:4f:2f:17:db:8d:b1:00:08:18:bb:3c:20:dc:b9:4f:
70:54:e6:49:20:50:6a:f8:f6:e1:25:61:f7:c0:e1:42:04:bd:
a4:66:88:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:40:17 2025 by rpki-client