Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a383030303a3a2f33332d3333203d3e20323635323639.roa
File: 323830343a326434303a383030303a3a2f33332d3333203d3e20323635323639.roa (raw, json)
Hash identifier: C9HpLyuRdCtfAn7pUdG11vUnICUadE6DMAFXNyU/9EU=
Subject key identifier: FF:85:D7:BC:96:4C:79:93:83:ED:75:38:4B:3D:C7:49:84:16:DC:40
Certificate issuer: /CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186
Certificate serial: 68B53D97C361C7EE3E775CCCDA8B2CBB46A5A7B3
Authority key identifier: C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a383030303a3a2f33332d3333203d3e20323635323639.roa
Signing time: Thu 12 Dec 2024 17:26:21 +0000
ROA not before: Thu 12 Dec 2024 17:21:21 +0000
ROA not after: Thu 11 Dec 2025 17:26:21 +0000
asID: 265269
IP address blocks: 2804:2d40:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Tue 28 Jan 2025 13:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b5:3d:97:c3:61:c7:ee:3e:77:5c:cc:da:8b:2c:bb:46:a5:a7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186
Validity
Not Before: Dec 12 17:21:21 2024 GMT
Not After : Dec 11 17:26:21 2025 GMT
Subject: CN=FF85D7BC964C799383ED75384B3DC7498416DC40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:38:6b:6c:03:cf:2a:2c:25:a8:cc:34:59:
1b:e3:c9:49:d0:b2:df:08:38:8e:74:e0:2b:1f:0a:
27:0b:72:ae:31:53:45:6a:72:4c:79:ef:04:47:88:
56:bb:be:1d:7b:51:a7:12:a7:e1:20:81:6c:31:e3:
18:e2:81:c4:85:b4:05:c9:4a:d3:bf:da:dc:07:01:
54:c7:12:94:a5:a2:5d:37:ec:1f:ae:37:3b:17:94:
34:05:a1:47:59:99:62:aa:be:cf:12:4c:2e:01:01:
22:2d:b7:05:26:ab:c8:8a:f5:fe:ba:c4:0e:72:88:
6c:d7:72:0b:30:c1:77:3e:02:88:dd:4a:94:38:8e:
6c:e5:f1:6d:1b:e4:3a:da:fa:e6:9c:78:21:09:26:
e6:3c:a0:d3:c7:92:e7:e5:48:5e:9a:18:bb:da:8a:
da:65:72:d5:a1:4c:0c:bb:0e:ed:28:f2:bd:b8:7f:
18:b6:14:f1:58:e2:93:80:1b:d6:9b:52:14:f4:70:
d1:0e:f8:2d:1c:f9:67:42:b1:45:fa:91:db:d2:3c:
91:66:37:2b:d8:e7:31:bb:b4:3c:9b:39:fd:e3:fd:
c8:dd:08:e8:62:8b:19:81:51:20:27:b2:a5:3d:af:
7c:e3:38:49:b6:72:a0:e5:0f:6b:a3:51:f0:54:81:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:85:D7:BC:96:4C:79:93:83:ED:75:38:4B:3D:C7:49:84:16:DC:40
X509v3 Authority Key Identifier:
keyid:C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a383030303a3a2f33332d3333203d3e20323635323639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2d40:8000::/33
Signature Algorithm: sha256WithRSAEncryption
75:b7:af:50:cf:d5:bc:34:44:0c:35:8d:34:5a:c4:9b:bc:05:
30:db:d0:e9:8e:02:a6:33:f7:be:50:43:f8:72:36:3a:0a:99:
af:d5:a0:71:fd:b2:c2:de:e7:05:5b:a0:0e:bc:57:8d:39:27:
6c:e4:ca:93:2d:06:02:4c:ce:ab:f4:bd:97:8a:30:b0:e6:62:
61:49:86:a1:1f:55:a2:dc:5e:4c:87:07:4f:63:61:22:8f:72:
92:ab:23:e6:57:43:2f:1e:8c:26:58:91:70:38:63:df:e1:be:
24:55:f4:38:4a:4c:ca:4e:b7:de:eb:74:9c:f1:40:23:5c:39:
b7:e3:99:58:ae:7b:52:02:79:29:94:c3:a7:e2:b0:c1:25:c3:
3d:ad:27:94:26:f1:e2:5e:50:b8:52:93:53:25:3b:6b:41:3a:
70:7e:ef:6a:52:76:25:7f:2d:2d:0a:00:e4:d1:f1:d5:96:06:
73:94:ef:97:58:cf:97:20:28:78:a5:b9:8f:1c:a8:24:c5:4a:
eb:ad:d4:13:ed:e4:2e:98:93:54:44:f2:ed:d9:84:50:31:07:
42:72:9f:fb:39:d4:b8:76:d5:40:44:01:34:de:30:07:35:0d:
69:ab:57:35:08:e5:45:b5:5b:57:08:9a:5a:fa:66:d2:cc:39:
14:d1:05:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:59:16 2025 by rpki-client