Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa
File: 323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier: ngTdj6HfTMgXeCJT+NNommpB+zPLGCcg03ifR3Qe59E=
Subject key identifier: 92:97:71:A1:C7:E6:53:A0:F8:60:1E:01:00:3B:05:80:1A:F6:79:46
Certificate issuer: /CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Certificate serial: 21FFF029498B9D348631D02A41D56A0AC3AA0DCA
Authority key identifier: 49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa
Signing time: Mon 02 Dec 2024 14:06:30 +0000
ROA not before: Mon 02 Dec 2024 14:01:30 +0000
ROA not after: Mon 01 Dec 2025 14:06:30 +0000
asID: 273728
IP address blocks: 2804:8b5c:c000::/34 maxlen: 34
Validation: Failed, certificate revoked on Tue 08 Apr 2025 19:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ff:f0:29:49:8b:9d:34:86:31:d0:2a:41:d5:6a:0a:c3:aa:0d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Validity
Not Before: Dec 2 14:01:30 2024 GMT
Not After : Dec 1 14:06:30 2025 GMT
Subject: CN=929771A1C7E653A0F8601E01003B05801AF67946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:a5:5e:23:73:c6:47:d2:39:d8:61:61:1e:
d5:92:9b:c0:0b:f3:06:09:a9:90:ab:8b:76:c6:b3:
f4:af:21:3e:d5:35:9a:1c:37:5c:67:86:df:c9:e8:
a3:97:00:58:27:4d:cc:ff:08:64:24:39:65:05:4b:
00:a2:e5:c6:ba:a9:c1:38:73:c2:7c:94:cd:5e:ee:
51:48:22:7e:b8:5b:04:12:c6:77:4a:f8:c1:2a:2d:
bc:23:3a:5c:28:54:fd:ab:00:29:55:b4:9d:2a:b8:
82:97:e4:2e:f5:97:4b:c9:92:7a:80:fd:50:14:05:
6c:dc:76:33:e5:42:a3:fa:da:aa:e9:fa:f7:51:7a:
d4:8b:4b:6d:0a:18:03:51:91:f5:41:89:55:63:dc:
a7:87:e1:36:4b:a4:6a:3c:ca:82:04:3f:8e:6d:f2:
ba:34:d6:65:d8:70:5b:f8:98:92:7b:71:76:7f:24:
f1:3a:ab:96:e3:09:fc:ec:ba:af:48:92:f7:3b:88:
bf:9b:8c:3d:ec:ea:7e:98:54:01:8a:5a:9a:cd:f2:
77:2c:b7:75:d2:e5:19:58:2b:c8:d8:72:7f:1f:3f:
11:1a:3d:cb:13:44:60:5d:36:45:52:01:c5:7e:86:
63:74:4d:56:13:82:44:d2:da:f7:b8:cc:69:b5:cb:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:97:71:A1:C7:E6:53:A0:F8:60:1E:01:00:3B:05:80:1A:F6:79:46
X509v3 Authority Key Identifier:
keyid:49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8b5c:c000::/34
Signature Algorithm: sha256WithRSAEncryption
91:e7:52:c7:96:3e:c0:f8:0b:6b:51:79:c6:71:13:82:92:91:
4a:40:d1:28:2e:36:e5:f1:80:01:e5:8a:3c:98:e7:0d:6a:1e:
56:2f:14:28:7c:97:54:2d:39:06:c7:43:03:c5:82:c1:bf:7f:
ed:b4:91:98:b7:e4:0f:e5:ce:ea:0d:ec:f4:92:b2:d8:6d:e0:
e5:65:26:9f:4f:94:67:30:a1:24:fa:73:ba:7f:da:c0:9f:90:
1a:05:58:a4:33:2e:d3:b1:e5:67:57:a0:8b:12:d0:20:6b:5f:
32:74:91:28:de:98:72:f6:aa:4b:0b:b7:a6:aa:07:44:ea:97:
5e:ac:39:5c:5b:5c:74:88:b7:82:62:3a:ca:45:ba:0f:d1:91:
d1:db:4d:9c:31:81:a2:94:8d:d8:0e:a8:70:f7:b3:49:5f:f3:
78:97:1d:42:19:d3:2e:9a:d8:9f:ce:4d:cb:82:9a:49:47:9c:
1f:ba:16:04:46:0b:28:be:05:10:b9:5f:bd:31:8a:a2:11:d3:
fd:f9:7c:74:17:9f:4a:01:ff:7a:b0:06:19:5c:04:a0:db:61:
2a:42:af:29:67:28:81:a5:8e:9f:44:d0:cb:3e:a1:88:da:35:
15:6f:dc:37:92:1a:d9:52:97:b7:2f:1a:aa:bc:fa:75:a1:87:
48:45:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:16:51 2025 by rpki-client