Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a34303a3a2f34322d3432203d3e20323635313837.roa
File: 323830343a326330303a34303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier: w2tlGD4tDoNfvi2uVyXCdPX8OQ37e1SvyonAC0v378o=
Subject key identifier: 77:3D:1E:BA:A9:5F:58:98:2A:FE:54:E4:13:B4:FC:64:25:66:57:13
Certificate issuer: /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial: 067539BE9EBF9584156DAE850DB7D715551E7F18
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a34303a3a2f34322d3432203d3e20323635313837.roa
Signing time: Tue 14 May 2024 17:10:07 +0000
ROA not before: Tue 14 May 2024 17:05:07 +0000
ROA not after: Tue 13 May 2025 17:10:07 +0000
asID: 265187
IP address blocks: 2804:2c00:40::/42 maxlen: 42
Validation: Failed, certificate revoked on Thu 04 Jul 2024 17:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:75:39:be:9e:bf:95:84:15:6d:ae:85:0d:b7:d7:15:55:1e:7f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Validity
Not Before: May 14 17:05:07 2024 GMT
Not After : May 13 17:10:07 2025 GMT
Subject: CN=773D1EBAA95F58982AFE54E413B4FC6425665713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:bf:5e:6f:62:ea:0a:65:eb:fe:7f:b0:a4:
dd:fa:4c:ed:5a:10:88:66:e3:2c:60:32:e8:dd:e0:
10:4a:a7:51:2a:62:5c:24:fa:d1:e0:9a:45:f8:1a:
c2:02:1c:ab:ca:78:af:bb:b0:70:36:df:6d:b3:a3:
57:85:e7:8d:30:fa:91:58:cf:d9:f0:e0:ef:3f:63:
21:14:91:27:d9:a4:f5:a3:4f:49:61:8f:91:12:16:
5e:d5:6d:13:97:51:14:e9:78:e9:3f:45:d5:bd:28:
29:f8:3b:e8:32:f2:42:63:24:69:47:a8:88:03:22:
49:fe:a9:0e:33:3a:91:c0:8d:c2:59:43:6d:1a:6d:
60:b1:09:51:5d:cd:09:d2:85:c4:40:b7:52:51:55:
c9:ec:3d:7a:38:b5:55:7a:2f:5e:fd:0d:bf:87:00:
82:61:3e:1f:6c:4f:2f:a4:38:7a:a1:8a:4c:d6:63:
ea:32:3b:f9:27:d6:5d:a7:a1:df:d8:6d:34:b4:d4:
8e:d7:f0:c2:4a:fc:ec:5d:9a:77:aa:4f:52:37:a3:
3b:0a:41:28:fc:25:b6:b9:44:d6:60:c7:26:16:f7:
b5:80:4e:a9:ce:da:74:c4:fb:42:51:5a:6f:e4:69:
b3:38:e0:45:3a:46:ac:07:ab:47:7b:50:72:c9:9c:
74:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:1E:BA:A9:5F:58:98:2A:FE:54:E4:13:B4:FC:64:25:66:57:13
X509v3 Authority Key Identifier:
keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a34303a3a2f34322d3432203d3e20323635313837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2c00:40::/42
Signature Algorithm: sha256WithRSAEncryption
7a:84:34:a0:00:3d:be:cc:6e:37:1c:c5:30:8e:0b:2f:3a:35:
30:b5:e7:89:60:85:f2:93:5d:ba:c6:15:c5:07:90:64:b3:d1:
aa:34:0f:b6:2a:c8:fd:fe:a5:c2:8b:c4:52:86:bf:30:65:bb:
85:e2:05:f2:4c:1a:06:58:68:6b:6f:7b:c7:26:64:9b:fe:1e:
13:bc:08:ab:dd:a1:97:45:54:f0:a2:f8:2e:5f:89:43:88:03:
07:7a:73:f5:91:0b:75:84:33:09:6f:f9:08:bf:62:89:f0:50:
6e:e3:b8:0d:95:fa:bc:5b:a0:74:80:9e:b7:5d:af:c4:67:b7:
85:ae:15:ab:2d:42:94:02:18:5f:33:21:5c:8f:e6:9c:db:cf:
98:69:74:ac:92:9f:21:b1:10:c9:9f:da:7d:71:b8:47:94:a5:
9a:38:77:2b:56:ee:ad:71:4c:7d:ab:d1:1d:10:21:49:b3:3e:
41:c5:0b:a3:9f:54:b4:f4:72:46:94:79:7a:d3:a9:01:1d:2b:
87:57:57:ed:e8:ca:84:d2:95:b7:b9:62:47:f8:48:ee:af:1a:
d4:be:2a:62:e4:0b:b5:bd:19:df:a4:21:32:f1:fa:93:d2:cc:
92:1c:ed:02:8a:e8:60:bd:a5:79:99:94:a5:ce:54:09:24:fc:
79:e1:28:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:36:17 2025 by rpki-client