Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/323830343a323866633a383030303a3a2f33332d3333203d3e20323633393931.roa
File: 323830343a323866633a383030303a3a2f33332d3333203d3e20323633393931.roa (raw, json)
Hash identifier: eALSv9IG0Mu8UslQOvpd5eatbM/V46NKffDwY+3Pt40=
Subject key identifier: C3:60:56:E5:27:6C:0F:3A:2C:0B:D2:CD:28:6D:4F:0C:57:ED:0E:8C
Certificate issuer: /CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
Certificate serial: 352AC25E2988F79366E85BD8AC2AE0C9D6DB38EB
Authority key identifier: 97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/323830343a323866633a383030303a3a2f33332d3333203d3e20323633393931.roa
Signing time: Thu 25 Apr 2024 19:52:16 +0000
ROA not before: Thu 25 Apr 2024 19:47:16 +0000
ROA not after: Thu 24 Apr 2025 19:52:16 +0000
asID: 263991
IP address blocks: 2804:28fc:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Tue 04 Jun 2024 17:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:2a:c2:5e:29:88:f7:93:66:e8:5b:d8:ac:2a:e0:c9:d6:db:38:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
Validity
Not Before: Apr 25 19:47:16 2024 GMT
Not After : Apr 24 19:52:16 2025 GMT
Subject: CN=C36056E5276C0F3A2C0BD2CD286D4F0C57ED0E8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:df:86:ce:51:30:97:84:f5:3c:32:d3:04:
0e:f2:92:27:53:07:c1:0a:2e:1e:39:d7:d8:23:bc:
06:70:6c:60:30:55:66:56:7c:5b:76:3d:08:50:24:
44:1f:fa:c1:5d:36:bf:48:56:87:a6:d3:30:ef:ae:
29:28:fb:92:05:20:c7:8d:44:c0:53:7d:e2:e8:36:
b3:0c:f6:d2:12:ef:88:21:7f:0d:74:a2:98:45:cc:
c1:e6:95:08:34:14:67:34:bf:38:0d:1e:b2:e5:33:
d7:ea:cc:d0:61:f3:27:a6:84:2c:96:e9:1a:ad:2f:
77:5f:20:58:d8:5b:40:2a:ee:0b:b5:8f:db:ab:d6:
cb:85:91:b0:aa:b0:ca:32:4f:4e:8a:73:1d:61:34:
94:22:67:9d:02:ef:b4:b0:9b:58:dc:0a:8d:3e:16:
4e:2f:5b:e9:5c:fe:7e:99:32:a1:98:ed:42:b2:d0:
e1:7d:26:a8:2d:fb:bc:5c:9f:95:16:64:a7:8e:07:
bd:b6:b8:6b:22:87:58:65:0e:08:b0:71:61:77:db:
89:97:8c:97:b9:57:38:c5:26:ca:54:cf:11:b8:ae:
69:37:bd:57:9e:82:5a:b5:9b:21:1d:65:45:9b:02:
77:31:50:f1:e2:82:05:95:1f:d5:e7:d0:53:2b:72:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:60:56:E5:27:6C:0F:3A:2C:0B:D2:CD:28:6D:4F:0C:57:ED:0E:8C
X509v3 Authority Key Identifier:
keyid:97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/323830343a323866633a383030303a3a2f33332d3333203d3e20323633393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:28fc:8000::/33
Signature Algorithm: sha256WithRSAEncryption
03:76:6d:59:2a:87:f8:02:09:76:26:9c:f9:95:fb:26:81:09:
3d:77:79:f6:7c:c0:e8:3d:4b:67:ab:24:84:8c:08:b7:e8:08:
a7:d1:0e:25:aa:6c:e9:e1:ad:2a:27:eb:b3:6f:44:a0:b9:03:
69:a8:89:88:9e:90:79:fb:41:67:db:62:13:40:4c:21:7d:5d:
91:18:3c:cb:5d:f5:b8:d0:5e:da:ff:69:16:8d:bd:d4:bd:ab:
a9:15:2a:3b:22:b7:43:a9:f0:1d:a1:08:06:b5:58:0f:4a:aa:
e7:0d:91:01:11:f9:df:90:bf:a9:93:6a:d6:6b:e9:57:a5:d6:
15:bf:62:4d:80:a0:67:fe:60:55:b6:0a:88:83:d9:39:a9:af:
69:77:f3:01:48:3d:23:bd:32:38:7e:62:91:a8:25:50:43:4f:
48:f7:2d:d8:50:ad:1b:16:0a:df:e6:40:88:e9:2a:2f:51:03:
18:31:2c:b0:6a:49:3c:b7:4d:1c:cf:ec:95:83:d8:7e:aa:f0:
69:96:eb:f9:44:20:3b:d4:c7:f8:53:0c:1c:1f:9a:d9:de:7f:
1a:8f:57:15:f6:bc:b5:f8:1d:b1:6e:39:ce:d4:f1:1e:79:01:
5d:9a:38:b4:07:02:45:f9:96:0b:73:fb:01:6e:c3:7c:d1:98:
61:b5:a1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:43 2025 by rpki-client