Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a3a2f33322d3334203d3e20323632393739.roa
File: 323830343a3961383a3a2f33322d3334203d3e20323632393739.roa (raw, json)
Hash identifier: D+L0/imxO+Sx2yFNxMMoMY08E4ZKaS/yasmY0fKX82s=
Subject key identifier: 48:0C:A5:A5:CA:71:3C:51:71:BC:23:88:05:5A:7F:D4:EB:B5:55:DD
Certificate issuer: /CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
Certificate serial: 699256148286A3669AEAEEA8A60CEE406A0ABBFB
Authority key identifier: 99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a3a2f33322d3334203d3e20323632393739.roa
Signing time: Thu 06 Mar 2025 06:47:35 +0000
ROA not before: Thu 06 Mar 2025 06:42:35 +0000
ROA not after: Thu 05 Mar 2026 06:47:35 +0000
asID: 262979
IP address blocks: 2804:9a8::/32 maxlen: 34
Validation: Failed, certificate revoked on Fri 14 Mar 2025 20:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:92:56:14:82:86:a3:66:9a:ea:ee:a8:a6:0c:ee:40:6a:0a:bb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
Validity
Not Before: Mar 6 06:42:35 2025 GMT
Not After : Mar 5 06:47:35 2026 GMT
Subject: CN=480CA5A5CA713C5171BC2388055A7FD4EBB555DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:c1:01:a5:05:d2:84:f9:73:4e:0d:a8:2e:
0a:72:95:32:53:27:15:e3:c8:23:41:32:25:a5:c1:
69:2b:af:7e:24:dd:f1:7b:f1:0f:6b:98:d7:ae:56:
1e:85:c3:55:a5:d2:c6:a4:63:a4:71:cb:bd:96:8f:
b0:15:f2:4c:75:69:78:b0:a5:12:db:b8:74:1c:c9:
84:21:71:0b:22:ce:1b:a9:27:c4:2e:fd:4a:f5:c9:
e5:5f:e3:4d:a9:be:54:2f:f9:d1:7c:b5:15:0d:e9:
25:2f:b1:b5:a3:d4:c3:0f:f3:a8:74:c7:d2:a6:b8:
88:03:d0:b1:08:64:cc:17:b3:27:40:f3:56:0b:32:
fc:f0:f5:e7:f8:93:dc:67:bc:f7:c8:1c:7e:7b:1e:
a8:f1:bb:9e:48:97:47:6a:4c:73:2a:2c:d1:a5:ca:
81:b5:12:f5:e5:dd:7a:6b:29:36:03:ed:a2:c6:67:
3b:d4:d3:e5:f0:e7:31:a8:1c:f8:78:21:05:aa:0f:
56:23:13:df:89:22:17:24:b3:9e:e0:32:6d:c9:03:
70:9c:14:17:86:57:57:da:f6:7f:76:83:55:96:00:
d4:73:3d:5c:57:ee:6d:28:34:1b:c0:55:2f:85:d6:
c9:f9:a2:2c:0b:6a:ac:68:5d:3b:f9:e5:ce:6e:c4:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0C:A5:A5:CA:71:3C:51:71:BC:23:88:05:5A:7F:D4:EB:B5:55:DD
X509v3 Authority Key Identifier:
keyid:99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a3a2f33322d3334203d3e20323632393739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9a8::/32
Signature Algorithm: sha256WithRSAEncryption
27:d5:f9:7a:93:1f:a8:b5:fb:8f:b3:10:c5:a4:8e:57:19:1b:
45:85:09:db:e0:ff:ac:8a:17:08:29:2a:a1:48:0c:c1:da:8c:
84:ad:0d:01:9c:5b:33:35:52:7d:1c:93:c6:12:5a:81:7a:1f:
29:9a:2d:96:1f:ea:6b:4f:5a:e1:94:0a:a5:fb:0d:f6:41:7f:
5e:38:05:1d:99:63:14:06:ee:11:64:4b:d1:b3:7d:77:f3:5e:
95:30:4b:25:b6:e6:66:5c:bd:06:21:87:96:83:08:08:b4:f9:
e8:58:ea:74:c6:6d:8d:4f:71:f8:96:f4:2e:7c:5c:c1:25:55:
e0:ac:55:37:ab:17:27:c4:80:7d:84:15:b3:6a:9c:f5:a2:f8:
c8:4f:96:ee:4f:33:ff:1b:9c:cc:30:c5:8e:94:42:67:7b:ec:
57:e9:93:ba:f0:58:56:fe:e3:b0:3d:8b:26:c1:c0:bd:16:c8:
96:9d:04:0d:40:26:bb:fa:ac:ec:57:ff:ba:ac:b1:f8:83:cf:
3c:ce:ed:cd:19:67:6b:f2:e9:73:13:f1:24:85:96:49:8e:c3:
85:3f:41:d7:a3:6e:5b:d6:2d:69:e5:d7:98:99:98:ef:04:67:
48:bd:1d:18:29:3f:f5:b4:fe:93:f7:9c:95:71:01:5e:b4:1b:
c4:90:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:55:35 2025 by rpki-client