Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a323030303a3a2f33352d3335203d3e20323632353738.roa
File: 323830343a3635383a323030303a3a2f33352d3335203d3e20323632353738.roa (raw, json)
Hash identifier: Udl+e/VtDUqbax+28JhpXPiWqnkDjKKOPvW5oI1b7KI=
Subject key identifier: 1C:05:29:D4:F8:57:0A:0B:79:62:F1:B3:A0:E9:F9:08:CB:75:E0:90
Certificate issuer: /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial: 60783304F2FF98A64948DA90D0FF629E47E7BF57
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a323030303a3a2f33352d3335203d3e20323632353738.roa
Signing time: Fri 28 Jun 2024 17:35:36 +0000
ROA not before: Fri 28 Jun 2024 17:30:36 +0000
ROA not after: Fri 27 Jun 2025 17:35:36 +0000
asID: 262578
IP address blocks: 2804:658:2000::/35 maxlen: 35
Validation: Failed, certificate revoked on Mon 30 Sep 2024 12:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:78:33:04:f2:ff:98:a6:49:48:da:90:d0:ff:62:9e:47:e7:bf:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Validity
Not Before: Jun 28 17:30:36 2024 GMT
Not After : Jun 27 17:35:36 2025 GMT
Subject: CN=1C0529D4F8570A0B7962F1B3A0E9F908CB75E090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:87:bd:3c:e2:71:e0:26:ed:63:80:5b:6b:
5d:25:db:64:a2:b8:7e:12:a8:64:61:ce:1c:f8:22:
24:3c:9d:d2:48:4a:85:45:d6:f9:f2:b8:6e:4e:16:
54:e2:dd:86:22:b6:23:ce:ab:2d:02:58:c0:de:ec:
66:26:4b:27:c8:02:9e:98:f5:88:9c:32:fb:92:2a:
6d:13:e4:0f:fe:01:7c:14:55:14:61:1d:0c:b7:8b:
2f:ea:8b:ce:22:4b:7e:2c:90:8a:41:12:4e:3b:a4:
a7:d5:91:41:2c:d1:e9:68:be:68:65:8a:87:96:1c:
e4:32:15:35:1e:a3:54:75:ac:5c:39:08:52:71:d9:
87:67:70:74:0e:3f:4b:84:0c:da:36:1f:6a:69:da:
88:ae:59:a2:59:b3:3a:19:50:31:a2:aa:9c:0e:6b:
72:8c:58:ed:f2:8b:a7:01:0b:f9:51:b5:46:5b:68:
b9:8b:7c:52:09:27:61:88:22:4d:bb:bc:8f:f0:9d:
d7:fc:30:27:0d:c5:45:5e:ac:ee:e8:dc:0e:96:d3:
b7:3a:53:1c:55:48:1b:c6:99:22:01:b7:0d:e2:3b:
84:dd:d7:6d:75:7d:fd:b6:87:44:4a:3a:a9:ef:ed:
60:37:34:5b:35:20:4b:bb:d4:fc:c3:c0:1c:63:f2:
a3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:05:29:D4:F8:57:0A:0B:79:62:F1:B3:A0:E9:F9:08:CB:75:E0:90
X509v3 Authority Key Identifier:
keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a323030303a3a2f33352d3335203d3e20323632353738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:658:2000::/35
Signature Algorithm: sha256WithRSAEncryption
50:74:54:0e:88:10:e8:a1:d7:9a:98:97:33:50:78:8c:71:ae:
ae:df:09:a6:80:f0:11:fb:49:e7:b7:c0:4e:1a:d2:a8:bf:59:
87:28:a9:b2:c9:7f:c8:c4:6f:d0:23:c2:f3:68:41:35:0f:d5:
30:15:6e:17:73:ad:f2:57:fc:80:31:bb:14:96:d9:01:33:df:
5a:37:64:12:cd:ab:6a:79:d0:a8:ea:38:29:6f:cf:e2:ff:cb:
d0:39:3a:1f:af:cc:60:3e:d5:8c:9a:f2:86:67:02:a9:e5:02:
19:50:d2:65:61:b3:16:bc:c1:da:f8:96:98:0e:f6:e7:f0:27:
44:29:76:18:b3:75:00:e4:47:7d:be:04:06:4b:81:41:70:3a:
98:63:05:83:b6:1b:0f:0e:a9:b2:ee:d1:a6:d2:f4:2d:22:00:
c2:03:c1:64:68:f0:83:3e:1d:35:5c:83:14:ab:1e:9d:c4:00:
d2:68:98:dd:0d:83:15:ac:ae:9a:ac:bb:a3:3f:55:41:62:45:
a2:a5:68:5b:13:a2:eb:78:c1:7c:66:ad:53:40:e8:f7:08:b4:
bb:3a:2f:92:36:49:af:e6:35:5f:f5:3a:10:d8:27:1a:c7:27:
fb:0a:2c:46:2f:d9:52:1a:68:b7:26:01:bd:ec:a1:2a:0b:16:
3e:bc:ab:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:40:01 2025 by rpki-client