Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a383030303a3a2f33332d3333203d3e20323633333436.roa
File: 323830343a313462383a383030303a3a2f33332d3333203d3e20323633333436.roa (raw, json)
Hash identifier: c0aL3BmdCqjZ+X4PXSPWcQRmuTqLu+J3qoZoUzRhIBI=
Subject key identifier: 45:C9:A6:1E:F2:03:7B:DF:3A:D3:0C:90:9E:D6:55:F1:BB:5F:10:B6
Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial: 1A7D60A6F0F5C5459A5979FF14D3F03E6B45A713
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a383030303a3a2f33332d3333203d3e20323633333436.roa
Signing time: Tue 23 Apr 2024 18:49:16 +0000
ROA not before: Tue 23 Apr 2024 18:44:16 +0000
ROA not after: Tue 22 Apr 2025 18:49:16 +0000
asID: 263346
IP address blocks: 2804:14b8:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Wed 05 Jun 2024 18:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:7d:60:a6:f0:f5:c5:45:9a:59:79:ff:14:d3:f0:3e:6b:45:a7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Validity
Not Before: Apr 23 18:44:16 2024 GMT
Not After : Apr 22 18:49:16 2025 GMT
Subject: CN=45C9A61EF2037BDF3AD30C909ED655F1BB5F10B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:02:fa:0c:ff:12:be:92:09:44:d6:43:a8:
17:6d:94:b9:38:c4:d4:9f:07:98:92:81:45:4a:f9:
f1:cf:12:10:6b:70:d7:29:2b:4f:3f:d8:43:ee:87:
ab:14:6a:0c:e2:0e:06:b6:64:d3:44:82:c7:5f:69:
dd:db:6d:eb:13:fc:7f:53:ec:c2:41:ce:0c:42:82:
ac:05:4d:66:93:00:4b:f0:64:86:f0:3a:d4:e0:9b:
38:7f:8e:5f:5b:36:30:d5:00:15:12:10:d7:64:af:
91:28:4f:ef:e8:f4:e8:f4:6f:16:c7:e7:d0:dd:d9:
fe:13:00:3d:ce:92:69:17:09:99:d2:ff:75:83:e4:
d8:8e:f3:19:a5:68:b3:45:5c:28:67:da:b9:00:02:
28:db:bb:22:ea:af:59:9e:c1:96:13:07:b7:6b:bf:
c7:6e:f0:27:19:21:fb:2a:7a:6d:9b:b8:e5:55:37:
e6:ba:4f:64:8c:58:d4:67:b1:1f:47:ce:b1:55:60:
85:2d:49:48:21:74:2a:35:64:cb:cf:c6:3d:d8:fd:
c6:ed:dd:be:31:38:a8:ff:62:84:1e:9e:72:7d:3f:
10:4a:cc:12:6a:e5:0b:c4:4b:dc:cf:78:b9:02:55:
c1:f2:fb:7f:2a:fe:f1:32:3b:ba:f2:76:69:3d:77:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C9:A6:1E:F2:03:7B:DF:3A:D3:0C:90:9E:D6:55:F1:BB:5F:10:B6
X509v3 Authority Key Identifier:
keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a383030303a3a2f33332d3333203d3e20323633333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:14b8:8000::/33
Signature Algorithm: sha256WithRSAEncryption
48:c6:00:32:b4:36:e1:9d:2f:b2:25:fc:3d:ed:8d:09:d8:58:
73:8c:af:57:aa:d7:be:38:99:fd:72:5b:af:97:2d:c4:35:e5:
68:bf:c0:a0:64:77:f8:83:63:d2:db:96:44:ad:21:72:cf:04:
72:09:82:1d:ce:ba:ee:b4:bf:95:91:b1:ec:2f:14:9f:0c:65:
ee:e6:f7:5d:bf:23:1f:04:fd:3f:96:c0:01:4a:5d:70:eb:28:
a1:36:85:dd:37:64:e6:2b:53:25:34:3e:32:8e:8a:c1:b5:88:
f8:2d:36:fe:03:4f:12:67:ca:f1:00:a1:dc:eb:a8:7c:a3:1b:
93:86:14:4e:86:23:ad:e3:19:d5:c7:86:82:26:ca:f2:d6:cf:
6d:35:1b:6e:c6:b4:49:9e:cf:af:72:0d:68:3e:a1:4e:3b:74:
6f:ff:41:76:0c:37:8f:11:75:5e:ec:fd:f6:89:2c:ab:9d:b6:
fb:8a:2d:16:76:35:56:10:58:ac:47:87:95:88:95:56:3e:0d:
4f:b5:78:c5:4e:82:84:b5:e2:70:b1:f0:ed:17:68:ea:9b:86:
fa:a3:7d:0d:ce:67:ad:28:ba:10:3f:37:f3:37:fe:e9:b2:1f:
17:f1:f7:c4:69:ef:75:43:50:5b:3a:8c:73:33:5b:65:c3:ef:
60:9e:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:50 2025 by rpki-client