Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33322d3333203d3e20323635313837.roa
File: 323830343a326330303a3a2f33322d3333203d3e20323635313837.roa (raw, json)
Hash identifier: WesPH84WlY4j4pNMI8l+74qv/3kOOqeUlMKfqvEUJS4=
Subject key identifier: FA:27:A8:0A:35:CB:45:C0:55:8A:6F:D4:19:85:F1:5D:CB:09:44:E2
Certificate issuer: /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial: 5DC6A04CE342655203BCA8C8DC26A3955FF08D4E
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33322d3333203d3e20323635313837.roa
Signing time: Tue 14 May 2024 17:09:55 +0000
ROA not before: Tue 14 May 2024 17:04:55 +0000
ROA not after: Tue 13 May 2025 17:09:55 +0000
asID: 265187
IP address blocks: 2804:2c00::/32 maxlen: 33
Validation: Failed, certificate revoked on Thu 23 Jan 2025 09:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c6:a0:4c:e3:42:65:52:03:bc:a8:c8:dc:26:a3:95:5f:f0:8d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Validity
Not Before: May 14 17:04:55 2024 GMT
Not After : May 13 17:09:55 2025 GMT
Subject: CN=FA27A80A35CB45C0558A6FD41985F15DCB0944E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:c4:12:31:7f:6d:1c:a4:f3:78:10:66:f8:
a6:c7:14:28:2f:8d:e1:8a:8a:47:51:5d:62:4a:67:
8f:2a:8a:9b:c8:55:13:22:8a:8c:6c:b8:a4:d7:1f:
aa:3b:e1:b5:6d:a0:81:90:d0:15:1f:e8:be:2a:32:
a9:20:4f:23:88:01:e9:5a:dd:b0:dc:63:cc:74:8e:
f0:a9:63:e8:29:47:ac:8d:cd:1f:49:70:e4:cb:bf:
d3:03:93:3e:74:15:4b:dd:35:eb:d1:66:6e:ba:d1:
6b:78:14:f1:e0:8d:91:f3:fe:4e:28:e9:83:d5:75:
a0:3a:e9:1d:c5:a4:20:78:84:d4:81:53:0f:13:5b:
30:58:fd:39:37:7a:46:35:58:a7:df:89:3c:95:7d:
b4:da:27:d7:33:93:e9:26:28:07:d9:5d:71:56:21:
c8:5e:92:3c:b5:26:c3:05:c4:99:e7:34:7a:74:dc:
a1:ab:9b:b1:50:b7:33:5d:c4:da:e0:dd:c6:9d:21:
b5:40:2f:c5:81:b9:f0:15:6e:04:5f:8c:c5:ba:80:
19:97:3e:09:de:64:ae:7f:d2:19:e2:24:67:5a:a8:
f1:8d:62:59:85:e5:cc:ea:6b:0a:a7:5f:7b:fc:74:
90:24:61:e5:1d:ae:cc:a4:ba:7e:63:ac:23:40:3b:
e7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:27:A8:0A:35:CB:45:C0:55:8A:6F:D4:19:85:F1:5D:CB:09:44:E2
X509v3 Authority Key Identifier:
keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33322d3333203d3e20323635313837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2c00::/32
Signature Algorithm: sha256WithRSAEncryption
13:4f:7a:ce:2b:a3:72:31:37:09:ce:97:a6:29:b4:0a:06:39:
90:8a:eb:29:45:a7:04:e6:6c:de:45:4e:87:52:c4:e2:2f:1d:
cb:9c:37:51:2b:09:07:ff:66:61:8e:2e:42:86:5c:3b:ad:6e:
9b:66:b8:e4:e4:4a:80:fb:37:48:b4:ed:c1:e1:0b:cf:59:30:
8a:db:8e:d6:b8:55:be:92:b4:e0:9c:f1:7f:14:89:71:27:05:
e7:65:c3:f5:7d:fb:50:75:6b:bd:e1:1e:b1:02:29:df:aa:07:
90:77:27:ad:d3:2b:22:22:31:07:ab:16:a6:7d:a0:79:6e:db:
b6:8f:e1:7c:cf:46:d6:90:be:ec:f2:18:0b:c6:2b:c3:31:8f:
45:26:42:4d:fb:b4:91:b3:84:84:d6:02:10:69:b7:bf:b5:80:
fb:69:58:87:c9:dc:27:de:24:f9:f7:5a:a7:55:b5:01:67:4b:
d1:81:8a:ed:e2:4c:fc:92:8a:70:a9:ab:d0:b7:bb:bc:2a:88:
33:d0:02:e0:e4:d3:c4:af:e2:43:f6:1d:13:a8:96:85:82:bd:
2b:2d:47:b0:86:1b:4f:67:75:7f:af:a3:ca:4c:0c:d2:17:76:
b6:d3:b5:65:b9:33:e7:5e:56:d6:cf:80:58:83:03:59:3d:fe:
b9:fa:63:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:20 2025 by rpki-client