Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a343030303a3a2f33342d3334203d3e20323633303837.roa
File: 323830343a3937383a343030303a3a2f33342d3334203d3e20323633303837.roa (raw, json)
Hash identifier: iK2bjAkMPj9y6CsxYtNWiMWO2lzNGS/H5cCayTPXT6E=
Subject key identifier: C2:4E:8F:C9:60:4D:63:91:74:BE:7D:21:73:98:50:42:E1:72:F6:FA
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 7E6A7CBD48EA08D975AD78D858BBCBD6A67239DE
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a343030303a3a2f33342d3334203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:30:32 +0000
ROA not before: Thu 18 Apr 2024 14:25:32 +0000
ROA not after: Thu 17 Apr 2025 14:30:32 +0000
asID: 263087
IP address blocks: 2804:978:4000::/34 maxlen: 34
Validation: Failed, certificate revoked on Wed 22 May 2024 17:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:6a:7c:bd:48:ea:08:d9:75:ad:78:d8:58:bb:cb:d6:a6:72:39:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:25:32 2024 GMT
Not After : Apr 17 14:30:32 2025 GMT
Subject: CN=C24E8FC9604D639174BE7D2173985042E172F6FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:70:ac:6f:55:fd:ff:54:75:94:f8:fe:9d:
e9:70:41:ee:2c:2a:11:79:2d:4e:f9:41:04:b5:cf:
04:6d:44:cc:e4:93:58:4e:df:79:f2:3a:bc:ed:e4:
e3:7f:95:70:3a:e9:93:56:6d:96:4a:67:09:48:59:
29:11:c8:28:04:c4:14:a5:74:0a:21:cb:44:67:c8:
aa:60:79:d7:cd:15:47:a1:d2:d3:d6:86:ad:a2:5d:
c1:69:7f:bb:ed:cd:32:ee:47:54:16:6d:2d:8d:a2:
29:f6:a9:16:76:36:40:1b:2a:55:8e:9b:cc:f9:bf:
40:8e:c5:03:e0:0d:0c:7a:c3:97:24:47:cd:04:eb:
08:de:0b:2d:52:27:48:18:c7:e5:19:59:e7:09:a8:
0f:7d:d0:de:26:d2:97:ec:d1:36:bf:d9:31:a6:e5:
1f:33:c8:06:7b:a3:e9:bc:82:38:90:4a:5d:c4:fe:
c7:46:74:79:34:f2:e2:7f:33:80:71:e2:15:0a:f7:
37:86:b1:38:65:c2:c6:13:62:c9:13:c8:f2:78:d5:
e6:62:1f:bc:b9:91:ef:0f:d8:58:e2:65:79:ba:1e:
21:ec:a6:ef:8c:ba:27:1e:1f:be:2f:2f:27:74:3a:
85:3b:7f:0f:a5:bc:4c:9f:54:7f:f9:9b:ca:57:ae:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4E:8F:C9:60:4D:63:91:74:BE:7D:21:73:98:50:42:E1:72:F6:FA
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a343030303a3a2f33342d3334203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:978:4000::/34
Signature Algorithm: sha256WithRSAEncryption
3a:e2:41:fb:20:98:77:75:72:be:50:4c:7a:e1:cd:94:90:64:
a2:f9:6f:00:ec:c2:f2:7d:25:55:f7:4a:3e:7a:79:ab:24:92:
63:07:32:5e:c4:d9:f7:0f:28:e5:96:3c:62:3a:d0:8a:70:12:
01:d5:c2:66:ff:7c:e8:a5:d3:d9:47:e2:ea:f2:07:38:ee:00:
5a:39:73:4b:67:c2:d5:65:32:d5:55:17:0e:76:55:51:21:29:
bf:5a:29:c9:60:41:5a:d2:a6:a2:17:70:69:b0:ea:43:5f:9f:
43:9e:54:60:39:2a:96:fe:9e:5c:98:6b:51:fe:85:3b:c4:5f:
8e:d1:23:a8:32:66:d6:06:d5:e6:ae:5d:0a:1a:c3:df:24:9f:
40:83:9f:fc:e6:c5:a9:fd:d5:e9:29:54:a3:76:05:d5:8d:3a:
59:7e:56:d2:4a:f7:5a:4a:d8:12:ad:35:96:a3:70:ae:1e:86:
e3:12:19:87:66:9d:99:bb:2e:8f:23:44:35:80:2f:04:a1:ee:
b4:06:82:40:db:c4:a3:58:3a:3d:92:3e:38:d1:91:65:72:92:
33:33:8c:50:61:9b:79:4d:f1:b0:43:b1:42:61:fb:31:75:7c:
a0:af:69:6e:6d:b9:fc:70:08:b7:72:3a:80:84:8c:dc:75:7d:
d7:05:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org