Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343330303a3a2f34302d3430203d3e20323638383538.roa
File: 323830343a356239633a343330303a3a2f34302d3430203d3e20323638383538.roa (raw, json)
Hash identifier: mum7iPnAOISHy/tCwyOP6AVvsV/VH+9C2uqKDufrG9Y=
Subject key identifier: EF:37:29:FE:8F:CB:94:BD:0E:01:64:A4:C5:9B:9E:92:0A:5F:2D:9A
Certificate issuer: /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial: 74B0FD5B3DDAC25559BD7A41EB0F79D98574B30E
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343330303a3a2f34302d3430203d3e20323638383538.roa
Signing time: Wed 03 Apr 2024 20:43:54 +0000
ROA not before: Wed 03 Apr 2024 20:38:54 +0000
ROA not after: Wed 02 Apr 2025 20:43:54 +0000
asID: 268858
IP address blocks: 2804:5b9c:4300::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 09 Jul 2024 13:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b0:fd:5b:3d:da:c2:55:59:bd:7a:41:eb:0f:79:d9:85:74:b3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
Validity
Not Before: Apr 3 20:38:54 2024 GMT
Not After : Apr 2 20:43:54 2025 GMT
Subject: CN=EF3729FE8FCB94BD0E0164A4C59B9E920A5F2D9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:51:e6:d8:ed:a1:34:58:da:28:8c:5f:23:
e4:26:9c:d6:62:90:f3:a9:5f:df:ff:28:69:1b:a0:
2a:85:37:95:48:da:85:3f:f0:96:d4:5e:b4:f0:5a:
64:a4:19:38:5b:51:f9:c0:b3:7e:bf:34:97:08:36:
c9:c9:2c:9d:3e:15:c5:be:03:38:ff:3b:1b:29:ad:
83:6d:a0:7f:e8:6e:f8:8f:d6:e1:c1:eb:c4:ec:65:
df:6d:4d:ad:a6:ef:dc:c0:79:c5:e1:48:6e:d1:b3:
0b:6a:d8:4a:07:8a:af:3b:10:d5:c9:47:d6:c4:06:
a3:33:82:68:ec:e9:2a:cd:9c:30:00:01:72:f0:9c:
6b:34:8c:97:27:c9:e0:32:08:d3:9a:c7:6e:51:10:
a9:ab:20:0d:d6:c7:21:00:ab:8a:d5:5b:16:94:74:
88:cd:fb:5f:2e:02:57:fc:8b:bb:40:29:ec:c9:67:
b5:57:92:e1:e5:90:43:27:58:fe:0f:1b:71:cf:c9:
15:e5:1b:a9:84:fb:60:b1:25:ee:75:0b:c6:c1:88:
97:43:d5:69:15:e1:63:0c:7b:17:1f:e3:90:8c:c6:
5c:0a:78:81:23:01:34:61:3f:d2:84:be:b2:ab:e7:
59:17:55:d4:fc:0d:6b:47:ac:3a:97:54:8c:ca:82:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:29:FE:8F:CB:94:BD:0E:01:64:A4:C5:9B:9E:92:0A:5F:2D:9A
X509v3 Authority Key Identifier:
keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343330303a3a2f34302d3430203d3e20323638383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5b9c:4300::/40
Signature Algorithm: sha256WithRSAEncryption
76:01:0e:c2:e0:e5:8a:a2:29:8d:b2:c0:9e:8d:af:2d:d2:bd:
2c:66:59:e2:35:bb:c9:8e:4b:cd:03:b7:c0:7b:e7:c6:55:25:
3c:01:7a:e4:2f:6c:8a:a3:44:21:27:05:55:24:b3:86:8f:2f:
a3:f4:58:af:fa:93:66:a3:4e:65:81:77:7d:f8:e6:7c:a8:8d:
e0:55:af:c3:d0:4c:a9:e5:6f:aa:6d:27:99:54:b4:06:e3:b5:
a7:b7:c3:aa:0d:0e:6c:d2:da:3c:f7:fd:d5:a0:5d:b0:02:de:
c4:48:01:a6:08:54:64:4a:11:c9:4f:b7:99:0c:94:a7:19:89:
cb:b5:1b:98:ea:21:89:cd:e9:e7:fb:4d:af:d9:78:f9:0d:e1:
94:8c:ef:6d:5e:e8:10:79:31:8e:43:eb:f6:23:e5:4a:4d:41:
67:9e:cb:de:64:4d:07:8a:2f:98:3a:d3:4e:98:50:a8:f3:b3:
b6:9e:a1:ab:98:3f:5d:0e:97:f6:e5:3c:de:1f:12:85:76:82:
80:4b:c9:63:36:95:46:35:6e:7e:f6:66:60:bf:fc:1c:af:55:
61:e5:a2:de:12:ee:37:49:1d:76:49:c5:1c:62:33:59:ea:e9:
d8:b8:08:43:f0:72:8e:b9:de:cc:6c:35:e6:03:38:de:fc:e4:
31:60:ac:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 15:52:57 2024 by rpki-client on console-ams.rpki-client.org