Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a3a2f33322d3332203d3e20323633363334.roa
File: 323830343a313036383a3a2f33322d3332203d3e20323633363334.roa (raw, json)
Hash identifier: vzTX3wYATz8acY9ajYrjyg3MH1/08EN8W88QBzYlbEM=
Subject key identifier: 76:72:D2:91:C7:0A:35:C5:EF:BA:C1:5E:BA:96:15:F9:C1:F7:0F:F1
Certificate issuer: /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial: 5C24B002536FCD147755AE2132663A3516996BB0
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a3a2f33322d3332203d3e20323633363334.roa
Signing time: Mon 18 Nov 2024 13:46:57 +0000
ROA not before: Mon 18 Nov 2024 13:41:57 +0000
ROA not after: Mon 17 Nov 2025 13:46:57 +0000
asID: 263634
IP address blocks: 2804:1068::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 21 Nov 2024 14:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:24:b0:02:53:6f:cd:14:77:55:ae:21:32:66:3a:35:16:99:6b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
Validity
Not Before: Nov 18 13:41:57 2024 GMT
Not After : Nov 17 13:46:57 2025 GMT
Subject: CN=7672D291C70A35C5EFBAC15EBA9615F9C1F70FF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:9a:01:ec:c6:23:f6:3e:b1:1e:88:57:8e:
9c:8f:a1:e9:82:96:72:e1:7e:eb:d1:18:e6:58:65:
a0:9e:28:6d:da:06:22:f8:3d:a6:34:99:0e:21:46:
b3:a1:30:0b:ce:c3:0c:e3:04:25:3b:11:9a:af:bb:
33:d1:84:26:52:03:a3:56:60:4d:34:61:f0:5f:e9:
5b:15:53:09:87:a1:57:f4:84:25:8f:33:5b:ff:ac:
38:2c:f5:be:78:da:55:92:5c:c6:62:4b:6d:da:9e:
3a:4e:7d:59:bd:f2:ee:2a:a3:58:74:35:d6:8a:bc:
73:02:dd:bd:74:51:33:bf:7b:4d:b4:f3:4f:a1:c9:
8b:ec:c5:9f:2d:3d:b6:b8:44:b8:3f:86:ac:f7:51:
8a:15:d1:44:cb:76:9c:38:32:1c:c8:35:a7:f7:04:
59:2d:68:b8:1e:fc:e3:1c:26:b0:e5:62:be:d8:da:
a3:54:b5:b8:5a:7f:b9:11:9a:68:76:68:ca:fe:13:
8b:fb:87:08:c4:34:d5:5d:e7:15:45:76:d4:a0:00:
f3:e6:4b:49:86:cf:2e:a2:c3:61:e1:c6:c2:02:c9:
56:b6:57:1a:79:53:69:f5:3e:fe:38:0c:43:13:cc:
11:88:be:2b:14:59:07:3a:e5:8b:de:21:c8:11:f0:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:72:D2:91:C7:0A:35:C5:EF:BA:C1:5E:BA:96:15:F9:C1:F7:0F:F1
X509v3 Authority Key Identifier:
keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a3a2f33322d3332203d3e20323633363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1068::/32
Signature Algorithm: sha256WithRSAEncryption
14:bc:15:a7:7e:d6:23:98:51:2e:5b:77:7a:8f:64:22:ab:d8:
25:d0:8f:cd:b8:71:79:d8:c0:db:ed:10:4d:25:38:97:fb:a5:
97:45:81:c6:44:7a:15:b4:8f:95:f8:47:e0:71:38:ac:1b:14:
e5:de:7b:75:b4:26:7a:9d:a0:d8:12:89:53:3c:3a:87:2f:40:
67:27:47:d4:ab:95:86:40:a9:94:a7:1a:18:98:e8:b2:83:ed:
bc:c4:8f:0c:29:9d:3f:57:85:3d:24:30:1e:3a:32:b5:3e:66:
3b:29:a2:1f:84:43:1e:2b:83:0d:8f:6e:92:c1:29:72:61:9f:
47:cc:e3:12:c2:49:88:9d:a2:87:b6:fa:14:2d:22:74:9c:16:
d2:fa:29:36:08:49:c7:24:f7:61:86:db:56:c1:29:bd:ef:8b:
44:e2:d4:16:59:42:af:c1:d5:37:50:a8:b4:e9:80:a7:9d:7c:
d5:23:38:ac:7e:08:ee:ed:10:04:fa:a0:e8:f7:db:4a:7b:f4:
54:66:11:76:5f:a1:fd:8f:6d:f2:36:b1:7a:07:1f:4c:bf:e4:
84:db:00:8c:c9:1e:fc:88:85:63:5b:7a:50:3f:ce:15:78:41:
a2:c1:2b:d8:38:a5:79:22:3e:cd:b8:9d:9d:94:96:6d:fd:fe:
68:80:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:20:36 2024 by rpki-client on console-fra.rpki-client.org