Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33342d3334203d3e20323732353031.roa
File: 323830343a383232343a3a2f33342d3334203d3e20323732353031.roa (raw, json)
Hash identifier: V1HG5YhnJalSkg+xcWREWiKeA/9mei16Dp9eiGCymCE=
Subject key identifier: E4:AB:0F:A2:41:A3:79:FF:5E:34:06:C5:25:34:B3:47:D7:51:C2:46
Certificate issuer: /CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
Certificate serial: 41B3153C62624553C99C3339805CC68BEFBB05A1
Authority key identifier: 24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33342d3334203d3e20323732353031.roa
Signing time: Tue 30 Apr 2024 08:13:39 +0000
ROA not before: Tue 30 Apr 2024 08:08:39 +0000
ROA not after: Tue 29 Apr 2025 08:13:39 +0000
asID: 272501
IP address blocks: 2804:8224::/34 maxlen: 34
Validation: Failed, certificate revoked on Sat 10 Aug 2024 03:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b3:15:3c:62:62:45:53:c9:9c:33:39:80:5c:c6:8b:ef:bb:05:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
Validity
Not Before: Apr 30 08:08:39 2024 GMT
Not After : Apr 29 08:13:39 2025 GMT
Subject: CN=E4AB0FA241A379FF5E3406C52534B347D751C246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:7f:01:1f:b1:a2:ac:a2:56:a1:90:7f:2c:
7b:96:21:e4:65:a6:a5:4c:81:78:86:e7:93:8b:f7:
6d:65:fb:1c:c2:6b:da:e2:5d:8c:4b:bb:76:bd:51:
5f:6b:a4:73:9b:35:62:5a:c2:94:b9:25:c4:c0:f1:
d1:57:b7:fb:99:6d:43:b7:ca:38:10:bb:4b:e7:e8:
32:4e:3d:d2:4c:1e:13:e1:f3:74:74:3f:23:07:cb:
30:a3:37:af:92:8f:ba:3c:c4:85:14:62:cd:bf:8c:
66:b3:b4:31:4c:6d:54:ba:c4:00:b8:fc:9a:36:19:
83:10:13:35:77:58:c7:6c:a2:c1:d0:54:2e:95:2f:
53:2c:5c:25:03:52:0d:18:b3:c3:1a:6e:9c:e9:47:
d6:7d:76:f0:0a:c8:13:ca:55:f6:2a:1c:64:c0:ab:
aa:70:d7:d8:ab:e2:4c:49:f7:56:e9:ba:46:f0:ee:
38:08:59:aa:14:74:eb:ec:bb:0a:53:2d:a9:5d:c6:
ea:0c:37:a1:bb:93:bb:94:f5:72:88:9f:0c:ac:85:
1c:23:17:2a:8b:26:76:cf:64:b1:2b:de:e1:24:e2:
1d:2b:6b:ee:a1:43:07:9d:39:9f:3b:aa:33:60:7b:
4d:2f:f3:63:55:e0:9e:54:39:d6:35:45:c2:ab:68:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AB:0F:A2:41:A3:79:FF:5E:34:06:C5:25:34:B3:47:D7:51:C2:46
X509v3 Authority Key Identifier:
keyid:24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33342d3334203d3e20323732353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8224::/34
Signature Algorithm: sha256WithRSAEncryption
63:6e:4f:2c:61:a1:e1:1d:a7:cb:f4:82:be:a2:01:cb:75:67:
c1:36:82:d4:96:3a:00:85:0f:b0:25:98:e4:bd:7b:d9:29:87:
d0:fc:19:e4:f4:4b:c0:b9:75:d1:3c:f9:1d:a7:32:15:78:53:
5f:e4:e3:dc:f5:ed:4b:a2:d1:c8:e2:83:56:25:7c:75:4b:bb:
13:ed:e5:07:2e:a4:05:1f:f3:03:a7:4d:1b:6e:75:7f:af:21:
bd:21:5b:8f:4a:58:33:47:c1:ed:b3:22:bd:ca:ba:ba:ae:6f:
b4:e0:84:46:5e:4e:bb:7b:16:7f:11:e0:d9:b1:dd:62:c0:4f:
9b:09:e7:f7:7b:4f:71:0b:a0:48:31:5b:e9:68:42:42:70:64:
61:9f:65:95:72:b4:9d:f3:57:fc:74:7c:3a:08:aa:e4:64:fc:
be:18:4c:55:7e:70:c0:a7:8d:56:22:8d:c0:e7:b7:94:83:dd:
77:20:85:0c:6e:50:7e:dd:0d:ef:69:55:33:e1:2f:a9:e7:c6:
3f:bf:8c:4e:47:fb:01:50:d8:1c:f7:12:d0:0b:5e:6f:80:90:
42:dd:81:fc:ed:37:47:c5:2e:a6:cd:a8:1a:88:34:59:83:50:
0f:2e:df:17:00:19:5d:da:86:55:26:8b:41:9b:66:68:50:f5:
19:37:d4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 04:15:11 2024 by rpki-client on console-ams.rpki-client.org