Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323638323637.roa
File: 323830343a393165303a666230303a3a2f34302d3434203d3e20323638323637.roa (raw, json)
Hash identifier: YiY1pWtCMZpulVw/gg/Qj6d/KExEeozaqnPqeTfp4hk=
Subject key identifier: 83:74:A8:BB:81:C1:F9:D8:32:4C:23:2E:51:EB:D4:EB:77:A1:AF:CB
Certificate issuer: /CN=048F5080A314D580279F12113E7EC9BCA443B4B7
Certificate serial: 668B6729B40146022CAE285C107C50B2C6189281
Authority key identifier: 04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323638323637.roa
Signing time: Mon 26 May 2025 18:54:48 +0000
ROA not before: Mon 26 May 2025 18:49:48 +0000
ROA not after: Mon 25 May 2026 18:54:48 +0000
asID: 268267
IP address blocks: 2804:91e0:fb00::/40 maxlen: 44
Validation: Failed, certificate revoked on Thu 29 May 2025 17:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:8b:67:29:b4:01:46:02:2c:ae:28:5c:10:7c:50:b2:c6:18:92:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048F5080A314D580279F12113E7EC9BCA443B4B7
Validity
Not Before: May 26 18:49:48 2025 GMT
Not After : May 25 18:54:48 2026 GMT
Subject: CN=8374A8BB81C1F9D8324C232E51EBD4EB77A1AFCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:eb:eb:e6:d1:d0:b3:ea:3c:7a:a9:7f:f5:
b0:e2:c1:4d:c5:05:fa:5d:fa:ac:18:96:5b:e1:d7:
19:87:67:43:05:97:fe:8d:61:29:6e:96:38:a8:43:
e5:82:ef:3d:27:f7:7f:fb:4c:e0:95:e2:52:6e:30:
88:fc:65:c0:67:96:9c:ad:c5:ce:5d:35:f6:18:9b:
31:eb:95:ad:2c:2d:3a:31:f1:58:e4:c8:45:36:aa:
3e:a7:68:e6:42:b8:33:72:a5:df:2e:2d:80:df:4d:
a4:f5:ac:b1:fe:36:ce:8f:f1:7e:94:07:4d:0e:8a:
fd:7a:17:5b:51:8c:ff:45:1d:2e:5d:b0:36:6f:16:
a1:d9:8e:45:b7:38:7d:d3:53:f5:29:2d:80:a9:8f:
86:27:2f:29:68:36:b8:2b:0c:fe:32:71:cf:63:fe:
93:b2:ac:f3:52:b7:25:5e:dc:63:a3:93:c0:30:c9:
06:e5:19:71:4d:6b:ae:c9:2a:1d:af:93:cc:66:96:
c5:6d:91:1c:fd:bc:ab:bc:95:c7:47:20:95:14:30:
e2:e5:31:02:ad:10:8b:2d:88:7b:77:07:37:c2:31:
f6:bc:bc:12:ce:b3:5f:25:77:4c:c5:ea:d8:f3:bd:
88:14:94:aa:df:f5:37:c3:ba:28:53:24:e0:01:9e:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:74:A8:BB:81:C1:F9:D8:32:4C:23:2E:51:EB:D4:EB:77:A1:AF:CB
X509v3 Authority Key Identifier:
keyid:04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323638323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:91e0:fb00::/40
Signature Algorithm: sha256WithRSAEncryption
60:cc:92:be:9c:5b:ea:61:f5:ba:f0:f1:cc:5c:09:5a:f6:f4:
c4:d1:08:e8:07:35:e2:ae:b8:da:1f:69:db:e8:06:73:7a:64:
e2:a3:6f:30:67:8c:98:ed:cf:f8:1f:87:d0:57:62:e7:ed:3d:
e8:10:f5:42:31:f6:5e:60:86:40:3d:2e:e2:35:ec:e9:1b:13:
77:2a:b6:cc:0c:b3:59:8f:d3:11:d0:7a:67:87:6d:bc:68:50:
e3:11:6f:35:8a:01:e8:c7:c0:3c:9d:f9:6e:7a:eb:79:74:59:
60:82:99:6e:c2:70:53:87:20:ce:57:a8:ae:12:19:00:e4:b6:
2c:4a:df:c4:0d:72:0f:aa:b6:7f:49:73:5f:d6:39:8c:9a:e7:
7a:f5:68:e2:2a:35:0e:5d:c0:c7:73:f4:6d:05:19:53:a4:bb:
ad:b3:93:66:56:cb:29:18:bb:98:de:c7:f9:1f:0a:f4:ad:53:
fe:1f:7a:62:ac:aa:af:33:b2:6b:a9:ad:11:25:7b:47:7e:d8:
05:dc:c0:6e:58:33:9b:4a:76:81:14:f6:cf:83:97:1f:54:9b:
50:2a:ff:9d:08:e0:e6:45:56:34:64:9f:62:a3:2a:97:8a:65:
7d:3b:d6:75:23:44:53:22:55:0b:19:cf:91:ea:0b:cd:76:a2:
24:1f:da:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:33:34 2025 by rpki-client