Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a343030303a3a2f33342d3334203d3e20323634343530.roa
File: 323830343a316564633a343030303a3a2f33342d3334203d3e20323634343530.roa (raw, json)
Hash identifier: aSVrZLnwGktcsHlmYOmj4v8E3qugmdWkVrDlAgs+eRo=
Subject key identifier: D4:93:6E:E3:FB:AB:70:3E:84:A8:2D:D4:8B:D6:C9:85:FC:67:5C:6E
Certificate issuer: /CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Certificate serial: 0CD32B0B712D7F5AEAA26B3E411B065CFAB0B2AE
Authority key identifier: 02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a343030303a3a2f33342d3334203d3e20323634343530.roa
Signing time: Fri 31 Jan 2025 18:08:54 +0000
ROA not before: Fri 31 Jan 2025 18:03:54 +0000
ROA not after: Fri 30 Jan 2026 18:08:54 +0000
asID: 264450
IP address blocks: 2804:1edc:4000::/34 maxlen: 34
Validation: Failed, certificate revoked on Fri 07 Feb 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d3:2b:0b:71:2d:7f:5a:ea:a2:6b:3e:41:1b:06:5c:fa:b0:b2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Validity
Not Before: Jan 31 18:03:54 2025 GMT
Not After : Jan 30 18:08:54 2026 GMT
Subject: CN=D4936EE3FBAB703E84A82DD48BD6C985FC675C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:80:1c:2c:e3:0b:d6:ce:df:b0:f7:da:7d:
70:1f:6c:07:48:16:1a:c5:51:da:b5:0e:c5:c2:73:
b9:99:cc:5b:6a:fa:0d:4d:24:fd:f5:4d:b2:5c:62:
8a:35:2e:3a:2e:85:70:4c:58:bc:72:cd:39:b2:66:
29:44:08:07:d3:70:3a:ac:c5:ce:9d:4c:fd:c4:f9:
ad:d6:cf:73:35:28:fb:27:c7:31:38:73:b9:26:e5:
c1:a3:91:06:25:fa:12:b8:e3:7a:ba:7e:b1:24:11:
0a:66:28:f4:aa:8e:d0:4f:7c:2d:b1:c7:ff:57:77:
92:c9:f2:11:32:c7:2e:42:1f:eb:7a:f7:30:1d:13:
13:4d:38:67:3b:85:e2:3c:98:0e:e1:bc:02:7b:2e:
ad:45:d4:74:9b:de:54:84:c2:9f:de:67:ee:09:97:
4b:47:17:dd:97:b7:b0:42:09:71:67:c2:c3:8a:c4:
fa:66:77:39:ac:bd:4d:89:86:61:99:8f:5a:3d:80:
40:b3:9f:72:c7:4c:ca:d4:82:69:eb:c6:eb:f0:db:
af:ae:fc:88:6c:f7:56:32:dd:71:0a:ca:03:1d:12:
4f:94:d1:aa:41:ba:05:4c:c1:91:60:49:0b:a7:e0:
8e:06:64:18:cc:d7:c5:f4:23:d5:31:5b:6f:67:5e:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:93:6E:E3:FB:AB:70:3E:84:A8:2D:D4:8B:D6:C9:85:FC:67:5C:6E
X509v3 Authority Key Identifier:
keyid:02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a343030303a3a2f33342d3334203d3e20323634343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1edc:4000::/34
Signature Algorithm: sha256WithRSAEncryption
4a:76:39:82:30:79:4d:0e:b1:be:15:02:19:07:68:9e:b7:60:
17:3d:c9:55:ae:eb:9e:a0:e0:d4:e3:34:38:81:a6:f0:94:fa:
5f:76:2b:65:7f:63:a3:02:01:9d:c9:d0:2c:20:3a:04:86:73:
23:fc:89:8c:ae:44:fe:a7:8d:ea:cd:75:ab:bb:2d:cb:90:64:
9e:ce:61:e2:39:28:3f:04:12:81:12:46:7f:da:62:4d:2e:db:
ce:24:8e:af:71:5f:dc:e2:a2:8c:a7:1d:c3:7a:46:44:c0:12:
0a:0b:f4:60:ff:92:69:15:37:04:4c:23:ac:b4:02:0d:5f:9b:
df:43:06:d7:35:6d:36:ea:01:af:6d:3c:0a:d7:84:81:a1:92:
49:db:e3:6c:4c:9a:81:92:3e:48:eb:c8:c7:61:c2:df:62:5d:
19:6c:1d:18:e1:40:ea:f0:8e:31:b7:7e:5d:ad:d7:37:1d:f2:
0e:4e:cc:48:1c:cb:00:b2:c6:14:03:fe:9f:42:31:fe:39:8d:
35:98:67:b4:10:7b:16:b2:01:59:c7:0b:a2:89:c6:f3:de:63:
01:7e:01:70:60:98:e0:66:c1:23:38:2a:72:75:44:00:97:1c:
ee:fe:1d:92:cc:83:ff:2e:50:b2:77:6e:e7:66:38:af:0b:42:
73:b3:71:03
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDNMrC3Etf1rqoms+QRsGXPqwsq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJDQjIwMkVFN0M0MTU0MEJDRkQyODFBNTcyNkY0QkIy
RkFDRTUwRjAeFw0yNTAxMzExODAzNTRaFw0yNjAxMzAxODA4NTRaMDMxMTAvBgNV
BAMTKEQ0OTM2RUUzRkJBQjcwM0U4NEE4MkRENDhCRDZDOTg1RkM2NzVDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKYAcLOML1s7fsPfafXAfbAdI
FhrFUdq1DsXCc7mZzFtq+g1NJP31TbJcYoo1LjouhXBMWLxyzTmyZilECAfTcDqs
xc6dTP3E+a3Wz3M1KPsnxzE4c7km5cGjkQYl+hK443q6frEkEQpmKPSqjtBPfC2x
x/9Xd5LJ8hEyxy5CH+t69zAdExNNOGc7heI8mA7hvAJ7Lq1F1HSb3lSEwp/eZ+4J
l0tHF92Xt7BCCXFnwsOKxPpmdzmsvU2JhmGZj1o9gECzn3LHTMrUgmnrxuvw26+u
/Ihs91Yy3XEKygMdEk+U0apBugVMwZFgSQun4I4GZBjM18X0I9UxW29nXtQXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU1JNu4/urcD6EqC3Ui9bJhfxnXG4wHwYDVR0j
BBgwFoAUAssgLufEFUC8/SgaVyb0uy+s5Q8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFpVN3NzejJxcVFidlN5VkJXN0dybnM2Y0pFV01KTHl5RXpFZzNQQzVV
b1kvMC8wMkNCMjAyRUU3QzQxNTQwQkNGRDI4MUE1NzI2RjRCQjJGQUNFNTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0IyMDJFRTdDNDE1NDBC
Q0ZEMjgxQTU3MjZGNEJCMkZBQ0U1MEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RaVTdzc3oycXFRYnZTeVZCVzdHcm5zNmNKRVdNSkx5eUV6RWczUEM1VW9ZLzAv
MzIzODMwMzQzYTMxNjU2NDYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDM0MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEHtxAMA0GCSqGSIb3DQEBCwUA
A4IBAQBKdjmCMHlNDrG+FQIZB2iet2AXPclVruueoODU4zQ4gabwlPpfditlf2Oj
AgGdydAsIDoEhnMj/ImMrkT+p43qzXWruy3LkGSezmHiOSg/BBKBEkZ/2mJNLtvO
JI6vcV/c4qKMpx3DekZEwBIKC/Rg/5JpFTcETCOstAINX5vfQwbXNW026gGvbTwK
14SBoZJJ2+NsTJqBkj5I68jHYcLfYl0ZbB0Y4UDq8I4xt35drdc3HfIOTsxIHMsA
ssYUA/6fQjH+OY01mGe0EHsWsgFZxwuiicbz3mMBfgFwYJjgZsEjOCpydUQAlxzu
/h2SzIP/LlCyd27nZjivC0Jzs3ED
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:04:10 2025 by rpki-client