Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/323830343a6238343a3a2f33322d3332203d3e203532373838.roa
File: 323830343a6238343a3a2f33322d3332203d3e203532373838.roa (raw, json)
Hash identifier: 0nMsVGMFjfvwjKKfyptqct9TpLjLull2EabXkpWHVwc=
Subject key identifier: B9:F9:9E:71:F4:55:D5:3F:88:12:50:94:0F:8B:AD:1B:F4:18:02:48
Certificate issuer: /CN=33D444D18668AFF627287DE909F4EDC258CA9CC3
Certificate serial: 7E10872D0061FDEB9D7C5ABDAAA5EB80898714B6
Authority key identifier: 33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/323830343a6238343a3a2f33322d3332203d3e203532373838.roa
Signing time: Thu 25 Apr 2024 17:52:07 +0000
ROA not before: Thu 25 Apr 2024 17:47:07 +0000
ROA not after: Thu 24 Apr 2025 17:52:07 +0000
asID: 52788
IP address blocks: 2804:b84::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:10:87:2d:00:61:fd:eb:9d:7c:5a:bd:aa:a5:eb:80:89:87:14:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33D444D18668AFF627287DE909F4EDC258CA9CC3
Validity
Not Before: Apr 25 17:47:07 2024 GMT
Not After : Apr 24 17:52:07 2025 GMT
Subject: CN=B9F99E71F455D53F881250940F8BAD1BF4180248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:70:99:9c:f9:f1:01:90:ab:10:9b:24:ce:
10:42:c1:49:d1:52:1a:b2:e1:da:eb:6b:c0:55:ee:
44:58:c6:ff:af:86:d1:3e:ad:15:14:70:45:94:b7:
b3:7a:57:05:b8:cd:9f:5f:e4:86:92:77:b9:74:92:
0c:aa:d2:bc:67:50:5d:51:cb:0b:71:4b:c3:63:ed:
27:b9:2d:84:0b:d2:48:98:57:d4:0a:22:aa:b1:1b:
c9:84:39:5b:f5:66:dc:ab:96:05:9a:74:36:92:d6:
54:0e:1d:20:54:1d:99:71:b2:d2:04:5e:51:7a:ca:
2c:ad:54:8d:2a:9b:58:b4:ff:6c:45:7d:4a:9b:80:
1a:ca:71:cb:8a:9e:6a:a5:8c:d5:35:c9:28:2e:7c:
38:c4:d7:a6:86:d4:56:4d:3a:b3:cb:3a:cc:ad:86:
03:c4:0d:da:8f:dc:15:a6:1f:f7:5b:df:d1:83:20:
a7:ce:07:af:95:f9:e1:32:e5:f3:d0:5f:e4:c4:c8:
98:e8:b2:31:37:97:94:07:67:6a:3d:80:54:ea:51:
79:0d:f6:41:0a:88:6d:60:db:57:85:e0:1a:8e:1e:
36:60:3e:40:6f:4b:78:bc:4d:5c:c9:72:cb:fc:fc:
ad:32:4c:07:81:74:0c:e5:7f:d7:38:94:f2:3b:3b:
67:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F9:9E:71:F4:55:D5:3F:88:12:50:94:0F:8B:AD:1B:F4:18:02:48
X509v3 Authority Key Identifier:
keyid:33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/323830343a6238343a3a2f33322d3332203d3e203532373838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:b84::/32
Signature Algorithm: sha256WithRSAEncryption
92:bf:f0:3a:b7:d9:41:c2:ca:72:9a:ea:f3:16:bd:36:71:81:
f3:1e:fa:18:a7:63:73:ac:48:82:76:52:91:07:8d:ca:66:f7:
2c:75:f6:3a:c4:2f:a4:3f:15:00:95:8c:da:cb:3c:d3:6d:b0:
95:e4:db:ce:53:f2:84:e6:7e:03:0e:c9:3f:c6:98:34:04:66:
47:5e:84:71:59:48:20:77:27:1f:fd:2c:02:15:58:98:31:c8:
cd:0a:7e:86:a5:54:7f:ff:2a:06:77:af:83:fb:22:13:a3:f2:
cc:fb:ce:dc:30:d8:72:59:cd:39:f6:75:c0:8b:fb:09:19:aa:
39:70:b5:8d:2d:aa:e1:9c:a5:25:f4:44:f1:52:8e:ca:41:11:
bc:39:d0:dd:0b:e4:8c:b5:2c:e8:bc:c1:a6:44:31:c9:ae:d1:
f5:27:0f:0a:87:e1:f6:d4:5b:16:ff:09:ad:e6:11:6e:8a:07:
76:28:27:48:87:35:04:fa:87:31:7b:f0:8e:3e:9c:8e:a9:1e:
de:22:a4:b9:bd:ce:1c:fc:f5:1d:d2:61:ec:b8:d8:95:36:c1:
25:89:0c:ab:56:4d:db:94:e7:12:c6:3b:d9:3b:52:ad:65:1c:
35:47:36:29:6d:03:82:d2:1b:6e:f0:81:fa:a8:b8:a6:fb:71:
64:e7:12:41
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUfhCHLQBh/eudfFq9qqXrgImHFLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNENDQ0RDE4NjY4QUZGNjI3Mjg3REU5MDlGNEVEQzI1
OENBOUNDMzAeFw0yNDA0MjUxNzQ3MDdaFw0yNTA0MjQxNzUyMDdaMDMxMTAvBgNV
BAMTKEI5Rjk5RTcxRjQ1NUQ1M0Y4ODEyNTA5NDBGOEJBRDFCRjQxODAyNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcHCZnPnxAZCrEJskzhBCwUnR
Uhqy4drra8BV7kRYxv+vhtE+rRUUcEWUt7N6VwW4zZ9f5IaSd7l0kgyq0rxnUF1R
ywtxS8Nj7Se5LYQL0kiYV9QKIqqxG8mEOVv1ZtyrlgWadDaS1lQOHSBUHZlxstIE
XlF6yiytVI0qm1i0/2xFfUqbgBrKccuKnmqljNU1ySgufDjE16aG1FZNOrPLOsyt
hgPEDdqP3BWmH/db39GDIKfOB6+V+eEy5fPQX+TEyJjosjE3l5QHZ2o9gFTqUXkN
9kEKiG1g21eF4BqOHjZgPkBvS3i8TVzJcsv8/K0yTAeBdAzlf9c4lPI7O2ddAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUufmecfRV1T+IElCUD4utG/QYAkgwHwYDVR0j
BBgwFoAUM9RE0YZor/YnKH3pCfTtwljKnMMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzVtTkVGQW82RDNuUUpieFJyOWlTS2dobk1KTG5ycXZTbmlXeWRSWkpq
Qk0vMC8zM0Q0NDREMTg2NjhBRkY2MjcyODdERTkwOUY0RURDMjU4Q0E5Q0MzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDQ0NEQxODY2OEFGRjYy
NzI4N0RFOTA5RjRFREMyNThDQTlDQzMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c1bU5FRkFvNkQzblFKYnhScjlpU0tnaG5NSkxucnF2U25pV3lkUlpKakJNLzAv
MzIzODMwMzQzYTYyMzgzNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzNzM4
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAuEMA0GCSqGSIb3DQEBCwUAA4IBAQCSv/A6t9lBwspy
murzFr02cYHzHvoYp2NzrEiCdlKRB43KZvcsdfY6xC+kPxUAlYzayzzTbbCV5NvO
U/KE5n4DDsk/xpg0BGZHXoRxWUggdycf/SwCFViYMcjNCn6GpVR//yoGd6+D+yIT
o/LM+87cMNhyWc059nXAi/sJGao5cLWNLarhnKUl9ETxUo7KQRG8OdDdC+SMtSzo
vMGmRDHJrtH1Jw8Kh+H21FsW/wmt5hFuigd2KCdIhzUE+ocxe/COPpyOqR7eIqS5
vc4c/PUd0mHsuNiVNsEliQyrVk3blOcSxjvZO1KtZRw1RzYpbQOC0htu8IH6qLim
+3Fk5xJB
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:39 2025 by rpki-client