Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3234303a3a2f34322d3433203d3e20323635313837.roa
File: 323830343a326330303a3234303a3a2f34322d3433203d3e20323635313837.roa (raw, json)
Hash identifier: 96ytvRVaZwfwRo26x3gDvtcZOLIgEIn7+OtmHJwWtsY=
Subject key identifier: 5E:1F:4F:08:90:2F:3F:C1:53:FB:8B:8C:80:23:04:2B:EC:E5:35:BF
Certificate issuer: /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial: 168A679D1E6FE75B257519AD93A03880F5A5E80E
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3234303a3a2f34322d3433203d3e20323635313837.roa
Signing time: Thu 04 Jul 2024 17:14:55 +0000
ROA not before: Thu 04 Jul 2024 17:09:55 +0000
ROA not after: Thu 03 Jul 2025 17:14:55 +0000
asID: 265187
IP address blocks: 2804:2c00:240::/42 maxlen: 43
Validation: Failed, certificate revoked on Thu 23 Jan 2025 09:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8a:67:9d:1e:6f:e7:5b:25:75:19:ad:93:a0:38:80:f5:a5:e8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Validity
Not Before: Jul 4 17:09:55 2024 GMT
Not After : Jul 3 17:14:55 2025 GMT
Subject: CN=5E1F4F08902F3FC153FB8B8C8023042BECE535BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:42:28:36:77:80:98:40:09:ce:02:33:9f:
78:b2:5d:8c:14:43:ee:71:f7:c2:cd:e2:10:14:c8:
63:20:b1:44:d7:5b:32:90:4f:61:a6:aa:61:cf:73:
26:a2:2f:49:e7:2f:5b:2d:00:cd:31:0d:db:a5:7e:
b1:45:98:1b:89:9c:70:9b:6e:89:48:0d:a1:1b:e1:
ec:47:48:b8:1b:4b:7c:06:67:79:6b:93:27:d2:b7:
8b:e0:ec:b9:e8:11:a1:99:46:5e:06:57:16:59:f5:
6d:b6:8d:9f:2f:52:85:42:d5:49:d1:e9:fe:f6:af:
37:3d:fc:14:9f:23:37:f4:d6:36:ea:00:53:88:f6:
b8:dc:b0:ef:9a:e3:66:3f:d4:b8:cf:22:c8:72:23:
33:42:28:e8:c1:f3:00:dc:c8:91:5b:e3:d7:8e:aa:
c5:03:cd:2b:a5:14:0b:c4:41:17:9c:9f:de:05:13:
34:a4:02:3a:53:99:a9:5b:00:2b:52:33:2d:10:f4:
8c:6c:40:56:b6:d9:07:11:17:c5:18:3d:f7:b2:c3:
5f:09:4b:1f:3b:52:e9:e6:f7:bb:31:32:e1:85:c9:
6b:ea:ec:a7:25:96:aa:7e:9a:07:c6:52:da:19:98:
e4:e9:1f:cb:8e:cb:55:a4:4e:ed:21:7f:3d:2b:15:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1F:4F:08:90:2F:3F:C1:53:FB:8B:8C:80:23:04:2B:EC:E5:35:BF
X509v3 Authority Key Identifier:
keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3234303a3a2f34322d3433203d3e20323635313837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2c00:240::/42
Signature Algorithm: sha256WithRSAEncryption
29:3f:34:79:3a:02:5d:77:e5:6d:40:0b:51:6f:2c:87:ef:30:
fa:b0:46:1c:a5:e2:a3:c0:1f:8b:ec:eb:05:34:fe:8a:34:22:
6e:03:4d:b9:7d:0c:4a:55:78:fa:2e:8f:99:ea:c1:42:c8:f1:
a8:9d:72:04:84:ed:e4:d2:dc:79:10:6a:6c:72:61:01:0f:4f:
ff:a1:a9:22:6b:d4:7f:c9:ce:ed:39:31:3d:8e:e7:d9:d7:f9:
39:41:01:e9:30:30:60:58:03:3a:8a:3e:0e:06:7c:19:45:fc:
3a:86:e6:0c:95:18:f2:72:c4:1f:13:e2:72:2a:54:23:8a:9c:
87:e3:29:d3:f2:10:48:19:14:dc:14:15:fb:21:57:6f:65:de:
6c:7f:05:a9:2b:31:6b:51:1a:60:43:91:ab:32:89:75:8b:67:
34:2a:2a:89:ca:da:9d:f1:06:c7:b5:86:02:9f:2c:74:d4:bd:
94:f3:0c:85:6c:de:82:ab:c9:59:bc:6d:54:ba:af:bc:47:d5:
44:22:ac:09:0a:0c:bc:1d:66:6b:f6:6a:af:65:45:ec:03:8e:
95:20:80:94:70:ed:7f:20:ec:33:b7:49:a6:87:77:84:87:26:
59:25:d0:7d:0e:ce:91:4a:f7:90:70:5f:68:9e:27:82:73:5c:
b8:62:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:33 2025 by rpki-client