![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a666666643a3a2f34382d3438203d3e20323633323833.roa
File: 323830343a313635383a666666643a3a2f34382d3438203d3e20323633323833.roa (raw, json)
Hash identifier: BeeZCiUjrCXKNgJ2mD8QGv4AJGWiMS7MoPdzS7k+Dzw=
Subject key identifier: EB:36:AB:4C:82:CE:EF:04:5D:6F:4B:BA:52:9D:AA:8A:EC:43:D8:43
Certificate issuer: /CN=41B0D3EA994B3A684602641351C292C7808B50FC
Certificate serial: 4EAF29B4AF97F08215FCE9ED39E43A6DEC2E2387
Authority key identifier: 41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a666666643a3a2f34382d3438203d3e20323633323833.roa
Signing time: Thu 24 Oct 2024 13:09:00 +0000
ROA not before: Thu 24 Oct 2024 13:04:00 +0000
ROA not after: Thu 23 Oct 2025 13:09:00 +0000
asID: 263283
IP address blocks: 2804:1658:fffd::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 29 Nov 2024 13:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:af:29:b4:af:97:f0:82:15:fc:e9:ed:39:e4:3a:6d:ec:2e:23:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41B0D3EA994B3A684602641351C292C7808B50FC
Validity
Not Before: Oct 24 13:04:00 2024 GMT
Not After : Oct 23 13:09:00 2025 GMT
Subject: CN=EB36AB4C82CEEF045D6F4BBA529DAA8AEC43D843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:0a:69:53:bb:96:33:7e:f3:08:ca:cd:45:
61:03:36:35:b0:51:6b:c7:db:a8:a6:a8:ae:c8:9f:
fa:ca:81:5e:cb:7a:12:e4:08:4d:4f:73:9a:61:11:
0c:bf:77:61:76:0b:14:cc:42:26:93:c0:f8:af:1c:
88:81:34:16:80:b7:57:cf:42:2f:5f:88:ed:cf:69:
bb:8d:20:b3:a9:5c:78:8c:18:85:f5:49:df:f7:59:
5e:d5:12:27:18:8d:d1:12:1c:60:6a:21:e1:71:2c:
70:8f:25:88:15:ef:96:ad:65:44:9f:d0:fb:ca:71:
88:4c:61:f5:b0:32:54:55:7c:57:e3:32:8d:05:af:
38:2a:f8:cf:d5:8d:3d:59:de:57:ff:d4:27:68:c3:
5e:97:d6:43:b1:86:f8:c0:83:3a:2b:7e:06:8f:25:
1c:02:d9:b9:a1:0c:f1:76:9d:ae:72:e6:67:60:8f:
5a:aa:80:fd:98:bf:32:90:16:ee:82:66:74:ec:23:
be:8f:cc:e4:23:bc:01:ad:d1:5d:98:d2:18:3d:33:
e7:9d:0d:1e:7b:94:ce:29:13:44:aa:8c:f0:1e:d9:
e6:7e:00:11:8f:62:a9:5b:65:bb:8d:cb:79:3e:50:
d0:80:e5:92:33:56:e7:11:36:af:2e:30:fe:d7:20:
02:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:36:AB:4C:82:CE:EF:04:5D:6F:4B:BA:52:9D:AA:8A:EC:43:D8:43
X509v3 Authority Key Identifier:
keyid:41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a666666643a3a2f34382d3438203d3e20323633323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1658:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
28:c1:93:4b:d7:51:95:7d:3a:e6:0f:84:6f:a1:49:fc:3f:80:
cc:d7:ea:63:c4:5e:06:d9:63:89:e1:dc:7f:2a:33:10:4b:90:
58:d9:86:31:34:7a:09:f5:d5:62:73:ca:3f:40:76:e9:03:3f:
f6:12:28:cd:54:f5:ef:31:a8:fc:a0:87:e4:d1:5f:29:d4:bd:
92:5a:11:08:77:8f:81:dc:f1:bd:a8:55:4e:f2:30:44:db:df:
e4:7c:47:40:23:23:fa:5b:ad:99:cb:e2:b0:3c:e4:92:b8:81:
14:e8:9f:95:ad:b6:7d:a9:2a:08:18:2f:8a:77:2f:6a:7f:c1:
e9:60:89:42:9d:ea:07:e0:9a:79:a4:ab:64:00:b9:d5:6e:a2:
89:3b:50:7c:f1:52:fb:c5:ff:7e:29:7b:18:50:ae:02:91:ab:
85:a1:58:ab:26:90:7d:e1:2c:9f:0a:ff:ae:76:7f:45:9b:b4:
29:0a:5a:d8:b7:1e:b3:3f:fa:fb:60:46:e0:6c:57:77:73:ec:
fc:94:fe:1d:27:80:ca:12:ed:23:bf:16:cd:0f:e6:54:f5:3d:
72:2f:f2:10:1e:a8:55:3b:b7:51:f3:10:7d:12:b0:73:b5:42:
42:22:a4:5b:61:e4:22:ff:dd:cf:84:33:aa:5f:78:40:e5:c6:
2c:e0:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:16 2025 by rpki-client