Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a3a2f33332d3333203d3e20323638323632.roa
File: 323830343a346537343a3a2f33332d3333203d3e20323638323632.roa (raw, json)
Hash identifier: l/eJvZvTYPro6Dqdqd13EUr9BhLh5Bh24ZQLk181xnE=
Subject key identifier: BE:CE:7E:D2:69:A6:FA:2E:4E:71:6B:DA:19:05:CE:A0:55:39:E6:6A
Certificate issuer: /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
Certificate serial: 0AEBB4A5D7D609A7B71594FF6B2C421341649624
Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a3a2f33332d3333203d3e20323638323632.roa
Signing time: Thu 25 Apr 2024 13:14:27 +0000
ROA not before: Thu 25 Apr 2024 13:09:27 +0000
ROA not after: Thu 24 Apr 2025 13:14:27 +0000
asID: 268262
IP address blocks: 2804:4e74::/33 maxlen: 33
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:eb:b4:a5:d7:d6:09:a7:b7:15:94:ff:6b:2c:42:13:41:64:96:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
Validity
Not Before: Apr 25 13:09:27 2024 GMT
Not After : Apr 24 13:14:27 2025 GMT
Subject: CN=BECE7ED269A6FA2E4E716BDA1905CEA05539E66A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:7c:02:82:49:42:7c:09:02:eb:63:28:f7:
98:00:86:b5:a0:63:b8:fe:7f:69:16:11:aa:08:5d:
8e:1c:a6:96:24:c6:a2:09:d0:78:91:e9:d1:cd:35:
4b:62:53:8e:c3:6f:6b:af:d7:d7:2a:50:7b:58:24:
7e:21:3f:a4:a8:bc:d6:e3:0b:fc:3c:ae:17:a2:66:
eb:ed:b6:2b:f0:42:c8:0b:69:08:56:74:f9:4e:07:
3c:df:96:65:e9:76:78:1a:99:46:c5:52:96:e8:13:
d3:b1:a0:7c:12:9e:08:f9:be:75:ce:6b:fa:6c:15:
1c:e2:6f:aa:e8:de:3e:0d:a2:6c:f4:87:4b:ad:c8:
15:f3:4e:1a:0b:47:bb:7f:d3:60:b2:b4:4f:91:ad:
72:8e:ed:02:13:55:de:b4:b0:63:f2:5f:50:d2:66:
c6:e7:46:87:94:8f:f8:ea:c9:75:58:b7:c3:de:26:
6e:e1:cc:7f:67:e6:30:5e:e4:32:f7:73:0a:77:65:
9e:b5:dc:4e:26:3c:b7:8a:98:b1:a5:d5:49:1a:4f:
8c:74:af:cd:f9:10:40:f8:a8:e6:58:4b:16:34:2d:
be:6c:7c:44:b9:c7:a7:2e:7a:c1:a1:c4:0b:5c:d0:
f3:40:f2:c3:f0:95:77:03:dd:09:06:f6:e3:9b:d7:
f2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:7E:D2:69:A6:FA:2E:4E:71:6B:DA:19:05:CE:A0:55:39:E6:6A
X509v3 Authority Key Identifier:
keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a3a2f33332d3333203d3e20323638323632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4e74::/33
Signature Algorithm: sha256WithRSAEncryption
a0:f0:d0:cc:13:1f:06:95:af:73:2c:fd:e5:3f:6f:93:7f:c4:
2c:55:e4:83:45:64:23:75:62:3d:c4:5c:e4:a0:32:a1:4b:a7:
08:2f:21:95:ed:6c:30:1a:53:3f:02:15:55:89:de:d6:0b:fa:
37:fd:06:dd:74:1b:26:8a:a6:57:37:fc:54:00:99:3f:32:fb:
3b:91:f0:a7:4f:fa:97:88:19:22:74:08:70:fa:c0:75:d9:41:
73:f1:ae:82:39:4f:20:d7:f3:3d:48:fd:af:8b:ac:fc:8c:31:
56:a5:99:69:c5:dc:4a:d4:ff:ea:e2:21:a7:49:71:8d:89:b2:
8b:56:70:3e:94:5d:68:98:27:0f:7a:99:00:cd:d0:88:bd:4d:
ad:c4:dd:cf:9b:9c:44:63:43:bd:23:15:2a:b6:75:1e:1b:b0:
0d:e1:52:33:99:44:78:27:29:77:76:b5:59:c0:b0:19:d9:69:
c5:7f:c7:4a:fc:89:86:d3:f2:5e:77:9a:99:df:05:6c:5e:90:
98:23:db:6a:51:e1:9e:36:ea:0b:21:9c:ef:76:4f:2d:4f:24:
df:e4:64:61:8c:92:bd:69:c3:30:fd:cb:f3:2b:ae:47:ff:b0:
d0:7e:10:02:0a:07:75:03:7b:5e:e6:f0:0e:4a:0c:9c:84:c3:
5e:ab:90:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org