![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a343030303a3a2f33352d3335203d3e20323633333436.roa
File: 323830343a313462383a343030303a3a2f33352d3335203d3e20323633333436.roa (raw, json)
Hash identifier: fYpXCAh9gk3eGhuh2vUttHW9YZh1Wd3rTaEPqpwvkwg=
Subject key identifier: C4:5F:B6:1A:35:9D:29:F7:1C:6C:5B:58:66:AE:E6:2A:F8:6C:CB:C7
Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial: 161ECE1EE71D276CF9E5E295B487942A30D8F14E
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a343030303a3a2f33352d3335203d3e20323633333436.roa
Signing time: Tue 23 Apr 2024 18:49:11 +0000
ROA not before: Tue 23 Apr 2024 18:44:11 +0000
ROA not after: Tue 22 Apr 2025 18:49:11 +0000
asID: 263346
IP address blocks: 2804:14b8:4000::/35 maxlen: 35
Validation: Failed, certificate revoked on Wed 05 Jun 2024 18:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:1e:ce:1e:e7:1d:27:6c:f9:e5:e2:95:b4:87:94:2a:30:d8:f1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Validity
Not Before: Apr 23 18:44:11 2024 GMT
Not After : Apr 22 18:49:11 2025 GMT
Subject: CN=C45FB61A359D29F71C6C5B5866AEE62AF86CCBC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:83:05:c4:47:46:6a:7b:1d:d0:d4:1f:9c:
bd:e0:0a:cc:ea:e6:8e:ae:02:e0:a6:dc:fc:60:b4:
c7:f9:e7:3c:2c:7f:8b:8e:6e:96:af:df:5e:5f:08:
f5:d8:df:34:bc:45:d2:3c:0b:87:8a:a8:ee:e8:86:
ff:ea:a0:97:6f:58:7e:0b:72:0c:8e:9d:8a:3e:a6:
e3:17:78:cf:04:77:9a:47:24:0a:e8:64:da:35:10:
35:14:59:bb:03:d9:15:3c:ec:59:d3:57:8f:32:7c:
ea:da:09:de:d9:2a:ec:2f:f9:19:bc:eb:be:4f:b3:
13:98:ba:6f:54:5d:53:d9:ff:8d:f6:8a:6f:82:a8:
23:16:47:a9:6b:d3:e1:a4:7f:b4:e6:65:12:f3:7d:
78:0e:09:72:75:a7:35:9e:be:54:05:31:16:91:53:
35:09:5b:95:0b:3f:cb:18:77:68:e7:3f:a3:7a:47:
bd:41:b3:ef:20:21:34:f0:6a:49:d9:56:80:a1:41:
c1:70:88:56:87:be:2a:fd:35:0a:d7:37:72:cb:04:
e5:a9:64:03:91:38:4e:cb:1f:ad:b1:3e:25:93:6a:
e4:af:42:26:cb:c2:4d:3c:01:54:5f:08:86:ff:27:
fc:55:e8:55:65:d3:4d:05:f7:bc:e5:e0:9a:c6:2c:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5F:B6:1A:35:9D:29:F7:1C:6C:5B:58:66:AE:E6:2A:F8:6C:CB:C7
X509v3 Authority Key Identifier:
keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a343030303a3a2f33352d3335203d3e20323633333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:14b8:4000::/35
Signature Algorithm: sha256WithRSAEncryption
33:50:1e:44:2e:6b:fc:7a:fa:e0:da:3b:05:2e:3e:94:ee:4c:
36:9c:61:82:4f:34:63:dc:68:a0:34:84:b1:6f:58:8d:dc:9b:
7d:52:df:cb:8a:b0:0e:cb:de:01:26:48:ca:d7:c0:2f:a0:5e:
be:03:06:15:1c:3e:40:94:49:7b:5a:79:e0:a1:b5:48:22:82:
96:61:6d:74:6f:18:6e:f9:0f:1e:53:d7:d1:42:58:b8:7a:09:
07:e7:ee:12:57:71:dc:b9:05:7c:70:46:2e:b2:c0:b2:a3:e1:
b0:38:7c:22:30:47:c1:a4:a7:4d:49:30:f7:3a:90:4e:74:1e:
06:49:d8:7f:11:25:af:e3:89:90:3b:b1:56:71:b8:71:ad:c5:
ce:1f:ee:47:d8:ae:a1:5e:22:b2:e0:5e:96:d5:47:1f:65:5a:
de:18:2e:35:10:b3:9e:ad:13:4d:49:5b:2e:9a:bb:e0:94:fb:
58:6b:10:df:18:ee:4e:21:a6:0c:f7:d6:3b:ec:50:9c:77:21:
66:91:f6:ff:26:e4:b4:5f:dc:19:da:44:8a:6e:14:be:75:7d:
71:50:eb:86:ec:82:71:ff:c3:16:13:64:dd:52:d1:83:9f:f0:
e3:1e:21:35:e9:60:2c:be:c5:02:b1:d7:2d:92:73:e4:5c:59:
8d:55:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:09 2025 by rpki-client