Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a3330303a3a2f34302d3430203d3e20323638383538.roa
File: 323830343a356239633a3330303a3a2f34302d3430203d3e20323638383538.roa (raw, json)
Hash identifier: 8Gt7OYBviMVzdQRO99Uf912EpeXQl25q6DpI7wKTtMo=
Subject key identifier: B9:E2:E9:4E:B8:2D:04:BD:2A:AB:66:D1:6C:CC:8B:D8:13:1A:C3:FE
Certificate issuer: /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial: 67B8D428435EBA6CDAA0F392ABC8F4522BBD1D0E
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a3330303a3a2f34302d3430203d3e20323638383538.roa
Signing time: Wed 03 Apr 2024 20:43:53 +0000
ROA not before: Wed 03 Apr 2024 20:38:53 +0000
ROA not after: Wed 02 Apr 2025 20:43:53 +0000
asID: 268858
IP address blocks: 2804:5b9c:300::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 09 Jul 2024 13:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b8:d4:28:43:5e:ba:6c:da:a0:f3:92:ab:c8:f4:52:2b:bd:1d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
Validity
Not Before: Apr 3 20:38:53 2024 GMT
Not After : Apr 2 20:43:53 2025 GMT
Subject: CN=B9E2E94EB82D04BD2AAB66D16CCC8BD8131AC3FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:b6:9c:46:f3:be:75:a1:ea:06:28:40:4a:
a6:80:49:30:38:50:2d:18:27:5e:ce:77:72:e6:74:
7b:d9:b8:de:cb:8f:9a:10:1e:25:49:00:19:93:5f:
b7:35:89:54:74:eb:9c:a9:78:e4:09:3b:a6:62:36:
97:76:0a:f6:76:1b:84:25:f8:4b:c5:ec:0e:2e:9b:
5c:09:7d:63:df:c7:db:e2:ee:c5:bb:aa:d5:77:f0:
5f:9f:2d:e1:1d:43:59:9f:89:60:0d:09:d4:63:f8:
1d:1e:4d:4c:dc:31:aa:e2:9b:9d:ea:eb:23:8e:41:
fc:9c:a2:95:c8:76:49:4d:50:cb:5f:3b:3c:3b:da:
6f:b9:97:c6:c2:d7:49:a8:9b:51:14:44:ac:4c:a3:
fb:c2:9b:48:bd:9a:de:45:3b:b9:9b:ef:db:cb:69:
d0:9f:a4:37:e2:fa:c5:a8:e7:ec:26:1e:f9:9d:72:
49:3d:8a:fb:fd:d2:78:5d:60:d6:0a:ef:5e:a7:1e:
4a:1f:bb:6b:26:b5:5a:1d:86:8e:da:bf:5a:d3:06:
a6:b5:e4:8c:e1:1b:08:00:ab:eb:30:1f:ef:a7:de:
d9:98:f6:7a:ee:af:41:42:a7:79:3f:07:b3:24:2e:
9c:f2:56:f5:e8:06:24:74:cf:f6:74:55:04:d8:6d:
97:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E2:E9:4E:B8:2D:04:BD:2A:AB:66:D1:6C:CC:8B:D8:13:1A:C3:FE
X509v3 Authority Key Identifier:
keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a3330303a3a2f34302d3430203d3e20323638383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5b9c:300::/40
Signature Algorithm: sha256WithRSAEncryption
5e:61:a2:c3:ae:ff:d3:a9:ec:b2:cd:89:b1:52:56:dc:f2:d6:
1c:c5:37:73:96:f1:6f:e6:73:18:9f:87:1d:29:d3:ea:24:67:
a0:e0:fa:96:8b:9f:dc:6c:2f:f2:a4:1c:bb:9e:09:31:cc:12:
5d:e8:9f:de:73:cf:4b:08:93:b4:8b:a4:cf:bf:6c:9e:d2:ad:
be:99:f7:97:fe:83:98:0b:bd:2b:24:22:b6:df:6f:a1:d6:7d:
54:44:94:24:81:89:7d:19:5b:d2:1f:4a:30:c5:17:89:ff:04:
9f:e4:ce:a8:81:b9:b9:1d:70:14:0d:fe:77:69:44:56:ff:b4:
bc:8c:67:44:b9:c9:4d:e4:da:1f:de:af:f8:62:ec:f5:05:6e:
93:43:99:4c:de:cc:b1:a1:26:aa:9e:e8:72:7c:2f:47:13:45:
4b:e8:4b:a6:4a:b6:b1:2a:ac:8c:c5:62:72:7a:e0:be:1a:28:
39:3f:4d:71:ac:10:54:ad:b4:7e:4a:d8:c2:15:9c:90:6e:aa:
ff:67:d8:ae:82:67:40:c1:bb:ac:e5:61:24:97:38:98:15:d9:
5f:23:ed:10:b5:5d:38:03:fb:83:61:82:33:d0:42:0d:ec:5d:
1a:97:0f:ca:50:08:bf:c4:d0:94:33:f3:34:c5:28:6b:79:c0:
b5:f2:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 15:12:05 2024 by rpki-client on console-fra.rpki-client.org