Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d3332203d3e20323635323639.roa
File: 323830343a326434303a3a2f33322d3332203d3e20323635323639.roa (raw, json)
Hash identifier: S1oGVtYlHMKJGfkgRvMZMuShn5Vn3tKh27lxFoRui7Q=
Subject key identifier: A0:19:60:60:4A:CD:C6:C8:2E:87:DE:36:6B:10:2B:B1:5D:7F:C6:56
Certificate issuer: /CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186
Certificate serial: 0E1995DF0F7C117D22E959F22E6916100DC95529
Authority key identifier: C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d3332203d3e20323635323639.roa
Signing time: Thu 12 Dec 2024 17:26:21 +0000
ROA not before: Thu 12 Dec 2024 17:21:21 +0000
ROA not after: Thu 11 Dec 2025 17:26:21 +0000
asID: 265269
IP address blocks: 2804:2d40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 Jan 2025 13:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:19:95:df:0f:7c:11:7d:22:e9:59:f2:2e:69:16:10:0d:c9:55:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186
Validity
Not Before: Dec 12 17:21:21 2024 GMT
Not After : Dec 11 17:26:21 2025 GMT
Subject: CN=A01960604ACDC6C82E87DE366B102BB15D7FC656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:a2:03:5b:bf:91:b1:4b:cd:70:55:15:84:
40:25:78:6d:fa:f3:f7:4c:a0:f8:05:c1:a0:1e:31:
68:e4:dc:70:e3:08:44:82:ee:a6:97:8c:a1:43:d9:
93:48:a4:b3:88:49:12:8c:8c:63:b5:be:28:49:da:
0a:15:b6:83:27:27:25:22:37:34:ab:86:ce:e0:d6:
ea:6d:ea:d2:d2:53:93:e0:5d:94:1f:07:43:46:bb:
04:df:a5:fe:98:3a:5a:cc:ce:cd:9d:ac:7a:aa:36:
4e:f2:f0:c3:38:7d:8f:6a:8d:16:55:cb:55:83:d1:
7d:1a:dd:d0:8c:4a:fd:75:9a:9a:79:d4:53:d1:5b:
13:cd:c5:d0:37:0f:ca:59:a4:28:5e:b9:ce:6e:80:
cb:c0:84:58:1f:cd:00:bf:4f:ea:ba:e0:11:c1:6c:
e1:02:21:f6:3b:d6:4b:9c:91:b4:57:57:cf:50:df:
b9:40:fc:ca:92:6f:8a:c6:e8:79:51:49:f1:e9:0e:
60:3d:42:f5:38:b2:f1:f3:6a:ae:f5:50:cf:71:99:
59:9b:f3:52:2e:03:c3:a1:d5:19:65:12:f0:fa:fa:
68:e2:44:f7:b3:25:37:4f:29:a9:1a:eb:ab:a4:ac:
c2:d1:64:c3:11:eb:e5:68:ab:99:bf:11:86:3b:12:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:19:60:60:4A:CD:C6:C8:2E:87:DE:36:6B:10:2B:B1:5D:7F:C6:56
X509v3 Authority Key Identifier:
keyid:C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d3332203d3e20323635323639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2d40::/32
Signature Algorithm: sha256WithRSAEncryption
99:6a:30:31:e5:57:58:2f:79:f3:0d:00:a3:1d:fe:96:2e:f4:
8d:ab:b9:ae:e3:05:6c:8f:d9:5c:6c:34:72:48:6b:ac:e8:20:
2d:e6:93:05:5d:8f:ed:28:2e:48:0d:12:45:1e:1a:af:bf:8f:
a2:4c:81:60:b5:90:8f:e3:eb:80:8e:23:a2:be:6b:48:71:f4:
d1:6c:f8:39:4b:63:91:a6:d6:00:47:89:cf:9c:a0:95:45:99:
09:37:6a:21:3c:b4:c2:2a:e3:a1:0f:61:f3:9b:03:3d:79:28:
5e:c1:1d:ae:9b:de:4d:7f:ac:87:3a:59:6f:01:40:b5:72:70:
64:27:fc:15:1f:19:90:10:27:00:75:8d:ab:0c:92:d4:48:0e:
54:5c:7c:27:83:cb:98:1d:67:ab:73:14:af:f4:f1:69:b9:1a:
bd:11:56:60:d4:ed:5b:fc:1d:71:7c:9b:5c:83:46:52:a2:8d:
c2:31:99:47:41:b8:f6:42:e9:d4:53:16:8c:11:4c:57:47:18:
e5:e4:05:fa:d5:e0:24:14:1e:f9:4f:07:b4:67:33:cc:a3:41:
2d:35:dc:9d:a8:46:86:49:6d:15:77:91:bd:be:6d:06:3a:23:
6d:cb:04:58:12:f9:72:1f:c3:a4:ca:7d:fe:ca:54:96:a2:54:
b5:f9:c9:ad
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDhmV3w98EX0i6VnyLmkWEA3JVSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzExQUE5QTdBNTM4QzIyQTAyNThFNzRERUJFMzJGNUI2
NjI4RTE4NjAeFw0yNDEyMTIxNzIxMjFaFw0yNTEyMTExNzI2MjFaMDMxMTAvBgNV
BAMTKEEwMTk2MDYwNEFDREM2QzgyRTg3REUzNjZCMTAyQkIxNUQ3RkM2NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCssKIDW7+RsUvNcFUVhEAleG36
8/dMoPgFwaAeMWjk3HDjCESC7qaXjKFD2ZNIpLOISRKMjGO1vihJ2goVtoMnJyUi
NzSrhs7g1upt6tLSU5PgXZQfB0NGuwTfpf6YOlrMzs2drHqqNk7y8MM4fY9qjRZV
y1WD0X0a3dCMSv11mpp51FPRWxPNxdA3D8pZpCheuc5ugMvAhFgfzQC/T+q64BHB
bOECIfY71kuckbRXV89Q37lA/MqSb4rG6HlRSfHpDmA9QvU4svHzaq71UM9xmVmb
81IuA8Oh1RllEvD6+mjiRPezJTdPKaka66ukrMLRZMMR6+Voq5m/EYY7EhkFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUoBlgYErNxsguh942axArsV1/xlYwHwYDVR0j
BBgwFoAUwRqpp6U4wioCWOdN6+MvW2Yo4YYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3JuSHFmcWt4SldNbmIxZWFpNGFxa3JHczVrS1NEaWpmYXBuSk11Mlhv
THcvMC9DMTFBQTlBN0E1MzhDMjJBMDI1OEU3NERFQkUzMkY1QjY2MjhFMTg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMUFBOUE3QTUzOEMyMkEw
MjU4RTc0REVCRTMyRjVCNjYyOEUxODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dybkhxZnFreEpXTW5iMWVhaTRhcWtyR3M1a0tTRGlqZmFwbkpNdTJYb0x3LzAv
MzIzODMwMzQzYTMyNjQzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzIzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQtQDANBgkqhkiG9w0BAQsFAAOCAQEAmWowMeVX
WC958w0Aox3+li70jau5ruMFbI/ZXGw0ckhrrOggLeaTBV2P7SguSA0SRR4ar7+P
okyBYLWQj+PrgI4jor5rSHH00Wz4OUtjkabWAEeJz5yglUWZCTdqITy0wirjoQ9h
85sDPXkoXsEdrpveTX+shzpZbwFAtXJwZCf8FR8ZkBAnAHWNqwyS1EgOVFx8J4PL
mB1nq3MUr/TxabkavRFWYNTtW/wdcXybXINGUqKNwjGZR0G49kLp1FMWjBFMV0cY
5eQF+tXgJBQe+U8HtGczzKNBLTXcnahGhkltFXeRvb5tBjojbcsEWBL5ch/DpMp9
/spUlqJUtfnJrQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:51:24 2025 by rpki-client