Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a383030303a3a2f33342d3334203d3e20323633303837.roa
File: 323830343a3937383a383030303a3a2f33342d3334203d3e20323633303837.roa (raw, json)
Hash identifier: 7kzsTVyTe4MoIfH7TcNjW7M5PAypLYOM5zkpwXBzQMY=
Subject key identifier: 72:82:B4:4F:DA:BD:D1:2E:57:C7:E1:1A:57:84:99:0B:55:9F:AA:D6
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 51E47744FFC9C64DD9C51885D5A3D83EC0FA4C83
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a383030303a3a2f33342d3334203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:30:41 +0000
ROA not before: Thu 18 Apr 2024 14:25:41 +0000
ROA not after: Thu 17 Apr 2025 14:30:41 +0000
asID: 263087
IP address blocks: 2804:978:8000::/34 maxlen: 34
Validation: Failed, certificate revoked on Wed 22 May 2024 17:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e4:77:44:ff:c9:c6:4d:d9:c5:18:85:d5:a3:d8:3e:c0:fa:4c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:25:41 2024 GMT
Not After : Apr 17 14:30:41 2025 GMT
Subject: CN=7282B44FDABDD12E57C7E11A5784990B559FAAD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:0b:f5:dc:20:30:ef:e3:1f:a2:e3:ae:9d:
41:7e:26:d2:64:f6:4e:5e:c4:9c:7d:b0:4d:5e:44:
bb:fa:b8:c9:db:44:11:f2:45:98:a3:cf:b7:81:22:
66:79:64:91:57:2d:ad:87:50:ef:3e:50:45:99:a7:
24:c0:d1:10:b6:18:d0:da:39:65:7d:22:28:3b:e0:
00:12:d0:e7:d1:eb:67:59:af:ae:df:af:c1:7f:13:
2f:9b:c7:62:57:d5:34:89:e2:ed:33:9e:94:25:7c:
47:86:6b:49:a0:0b:19:39:2e:fb:a9:db:69:75:75:
91:2c:53:a5:bf:5b:0f:ad:a7:41:c5:fb:03:16:f5:
12:0f:de:89:9b:08:f5:d3:da:b9:b7:7a:e0:06:ed:
2d:de:c9:ba:d1:6e:44:4f:29:7e:cd:4c:16:ef:ef:
95:f7:3a:99:05:25:5a:37:01:f0:8d:48:b8:fd:06:
5a:55:cd:d9:c9:39:ac:01:57:7f:c5:31:14:30:8c:
7e:f4:7b:2a:8c:7e:96:ac:30:7e:2f:0d:d1:6e:e4:
af:1f:ec:0b:c7:a6:a6:bd:ce:72:23:b9:64:3a:63:
f3:fa:ed:2b:46:db:7a:c5:39:e2:db:05:c3:0a:b4:
93:01:29:40:9e:59:ce:91:7e:5f:fd:aa:02:f9:5f:
bd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:82:B4:4F:DA:BD:D1:2E:57:C7:E1:1A:57:84:99:0B:55:9F:AA:D6
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a383030303a3a2f33342d3334203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:978:8000::/34
Signature Algorithm: sha256WithRSAEncryption
5e:75:41:d6:5a:e2:7f:e8:2d:c9:79:f1:f8:85:93:e0:b7:5d:
d0:54:f6:3b:8f:9e:f6:ff:1b:e7:58:d0:fd:ac:66:4d:ac:d4:
e9:6a:a6:1f:c2:72:4b:0f:82:69:8e:ce:59:58:51:44:ab:8f:
76:cc:be:74:10:9d:c5:6e:45:a6:89:1f:38:3a:a1:6e:81:d5:
73:64:8d:b1:c4:90:9f:71:eb:d2:3b:d9:3c:3c:ff:31:22:3e:
0f:cf:3b:9b:88:80:f9:45:ff:e4:12:08:79:63:0b:72:e2:e2:
05:a0:65:70:00:94:40:81:bd:f1:61:b7:2d:6e:3c:f2:c6:46:
2a:18:80:a7:68:d7:5d:67:8d:f7:22:47:f7:54:a9:1a:f9:e1:
03:9b:93:ee:7d:e0:f2:6d:ff:06:f6:66:21:5a:80:8b:2d:1a:
d5:04:28:7b:81:92:bf:06:81:37:4a:62:aa:28:b5:cb:6c:5a:
f7:ca:ba:37:cc:ab:8e:97:92:72:23:bb:4e:33:ab:aa:0f:56:
1e:c7:c7:ee:e7:1e:10:e7:44:13:17:39:55:00:27:03:ee:e3:
35:41:3c:c1:b3:e6:26:9c:68:33:03:1c:25:b6:e0:45:5a:d0:
c3:57:a0:57:85:ed:b1:30:40:0e:cf:a0:fd:04:24:ea:86:da:
7e:63:37:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org