Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a633030303a3a2f33342d3334203d3e203631373337.roa
File: 323830343a316239633a633030303a3a2f33342d3334203d3e203631373337.roa (raw, json)
Hash identifier: kuuvsevLwgFjh9raIx15FaRZj+YPuisr3nbBcZcAL3A=
Subject key identifier: 99:30:4E:C0:99:18:59:D1:49:F4:03:59:C0:70:D9:D2:9D:FB:7F:16
Certificate issuer: /CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
Certificate serial: 0220D16E4195D62BBDC1EF9F8EE1D7E402F7F6EA
Authority key identifier: 39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a633030303a3a2f33342d3334203d3e203631373337.roa
Signing time: Fri 14 Feb 2025 00:08:56 +0000
ROA not before: Fri 14 Feb 2025 00:03:56 +0000
ROA not after: Fri 13 Feb 2026 00:08:56 +0000
asID: 61737
IP address blocks: 2804:1b9c:c000::/34 maxlen: 34
Validation: Failed, certificate revoked on Fri 28 Feb 2025 17:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:20:d1:6e:41:95:d6:2b:bd:c1:ef:9f:8e:e1:d7:e4:02:f7:f6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
Validity
Not Before: Feb 14 00:03:56 2025 GMT
Not After : Feb 13 00:08:56 2026 GMT
Subject: CN=99304EC0991859D149F40359C070D9D29DFB7F16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8b:7f:9a:81:7f:e6:b0:1d:23:68:34:61:03:
02:a5:88:d5:a0:6b:8d:90:27:f9:8f:06:a2:68:40:
33:8c:9c:64:e9:bd:07:69:d8:92:83:25:3e:7f:a5:
b3:e5:1c:f0:f9:73:c6:f9:a3:76:9c:48:11:a9:73:
72:34:d2:df:6b:a5:6d:96:b7:ee:17:87:f4:7d:53:
bc:87:16:a1:ec:91:ce:e5:11:e3:d8:33:8a:8e:6c:
a1:8e:b1:58:9e:01:72:e8:7b:26:13:4c:35:ce:c6:
f3:49:d0:e0:c7:6a:c3:2c:1d:53:c4:e9:72:32:7b:
06:23:8c:51:c7:7e:14:98:36:24:f7:d2:05:09:06:
ca:cc:b3:0d:14:4a:73:21:b6:b5:6e:27:16:f4:58:
84:96:11:de:3e:32:3f:7e:23:b2:35:2d:39:c1:84:
d5:ae:15:ac:19:22:06:2d:d9:f8:fe:36:df:58:ec:
0b:0d:b6:ed:5f:4e:7a:7d:07:7b:5c:a6:84:d8:f9:
9c:75:84:c3:7d:80:d0:f8:6f:27:77:8f:e4:6a:cc:
cb:32:1b:7d:17:ff:9b:b6:30:f2:7b:03:54:1a:b4:
f8:f0:0e:2f:31:0a:fa:ad:fc:3d:8b:72:23:a3:50:
ed:25:a5:9c:0e:ef:73:db:d3:34:d5:23:c2:6b:77:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:30:4E:C0:99:18:59:D1:49:F4:03:59:C0:70:D9:D2:9D:FB:7F:16
X509v3 Authority Key Identifier:
keyid:39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a633030303a3a2f33342d3334203d3e203631373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1b9c:c000::/34
Signature Algorithm: sha256WithRSAEncryption
4d:73:d5:ef:f2:d6:5a:e9:07:89:a1:16:b9:b2:6a:49:ff:7a:
3a:aa:49:04:e1:e4:63:11:91:3b:24:f5:23:d9:96:f2:e3:e3:
c4:c6:a5:86:3b:17:d4:31:fc:ba:6d:d7:5f:6e:45:ff:af:93:
17:8c:c3:1a:78:1e:bc:19:2c:56:78:c1:99:9c:3c:6d:3d:60:
40:fd:84:f1:e3:ae:f6:30:5c:36:45:83:b0:a3:b1:17:c7:71:
0b:36:57:1d:0c:b1:42:d4:1d:c3:8d:b1:25:03:52:13:91:1d:
f8:eb:64:3a:17:de:8c:34:c7:ac:a8:db:7a:8b:dd:79:71:f6:
9e:ce:6c:d9:9d:e1:17:79:ec:a3:36:d0:38:65:0b:5f:e9:ce:
a0:99:e9:f2:d1:a2:70:2b:a5:e5:70:df:08:03:5a:03:19:6d:
c3:4b:d8:22:2d:cc:d8:98:cf:c0:08:5e:da:04:2d:fa:d9:00:
77:55:ea:7c:33:30:7e:e3:63:1b:82:47:10:60:04:5a:7c:7e:
1a:36:66:79:e5:56:57:fc:4e:97:e7:9c:39:d0:e3:24:82:3e:
ca:51:b0:f5:b0:05:d3:44:2c:da:9a:5f:38:70:78:c1:8d:3a:
2c:0b:6e:a1:13:67:15:bb:df:73:73:3c:97:66:a5:03:cc:2f:
e1:eb:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:50:34 2025 by rpki-client