Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33322d3332203d3e20323633303837.roa
File: 323830343a3937383a3a2f33322d3332203d3e20323633303837.roa (raw, json)
Hash identifier: ALwkI2bJnOZLS4DPPj1WzsvWyPa/EKA2oAPwLtsQ2Tw=
Subject key identifier: 5A:05:B8:C2:D9:51:80:6A:64:35:96:82:40:F6:D5:7C:5C:50:04:80
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 57F9A04FC9047F30E05628EC8C3B41FEBBCC6EA7
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33322d3332203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:30:25 +0000
ROA not before: Thu 18 Apr 2024 14:25:25 +0000
ROA not after: Thu 17 Apr 2025 14:30:25 +0000
asID: 263087
IP address blocks: 2804:978::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 22 May 2024 17:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f9:a0:4f:c9:04:7f:30:e0:56:28:ec:8c:3b:41:fe:bb:cc:6e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:25:25 2024 GMT
Not After : Apr 17 14:30:25 2025 GMT
Subject: CN=5A05B8C2D951806A6435968240F6D57C5C500480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:dc:85:e1:c1:b7:cf:df:a1:70:44:19:1c:
2e:b8:20:34:7b:1b:cd:64:b3:e3:be:9e:64:0b:6a:
a3:74:0b:a4:80:e5:06:f2:db:94:07:bd:27:d4:42:
ca:d7:74:b9:21:99:d4:e2:3a:a3:2d:bd:43:4d:11:
74:ab:f2:7f:a9:17:20:39:a8:29:4b:e9:5f:7d:77:
27:ab:9e:8f:33:d4:7b:b7:53:0e:5b:4b:31:4d:d5:
1b:02:78:f2:a9:74:35:ca:7d:68:3e:36:c4:f9:2c:
80:06:19:a0:25:22:5b:3e:cb:ef:a4:f4:be:d5:79:
71:6f:6f:f5:1e:d2:6c:b8:fc:3c:25:bf:22:f6:95:
da:5d:3b:6d:6e:69:88:63:5e:73:ee:4d:b9:69:d2:
03:62:94:de:b0:49:ef:c3:a1:9c:09:01:60:be:7f:
94:da:77:7a:f2:03:ba:a8:17:94:18:75:0b:9e:cc:
58:4a:88:22:12:43:7e:d6:5d:03:7f:41:22:0c:24:
11:f5:b1:95:00:b6:a1:d7:ec:d0:76:b6:95:69:a7:
f9:40:9b:51:d5:72:f9:39:4b:02:26:96:52:ce:dd:
bd:85:91:02:0a:d5:b8:53:34:10:77:c1:8c:f1:28:
8c:be:45:65:7b:51:c0:58:80:dc:0f:6e:39:68:d2:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:05:B8:C2:D9:51:80:6A:64:35:96:82:40:F6:D5:7C:5C:50:04:80
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33322d3332203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:978::/32
Signature Algorithm: sha256WithRSAEncryption
98:9f:9a:8f:04:29:38:d7:a1:ca:f9:8a:b1:95:47:d6:ca:5a:
0a:2a:b2:40:f0:5b:81:e6:2a:d7:fa:b6:2f:70:89:ed:81:c3:
23:7c:c7:3c:f9:9a:af:41:ec:fe:00:af:d7:86:2a:14:90:6e:
b6:6e:54:f8:7f:da:a7:8c:f6:6a:54:ed:a1:ed:20:34:70:06:
c9:d4:af:f0:c9:5e:57:cb:2e:96:9b:c9:e2:62:9b:1b:f9:3f:
a5:7e:14:4e:55:8f:7c:49:9b:5d:02:6a:a7:48:ff:c5:40:e5:
55:32:f2:79:c5:c3:2f:5f:1a:ea:a0:d4:ba:22:66:e1:45:6f:
9f:a8:7a:71:b6:75:16:34:12:b2:99:ff:43:a9:f9:68:8d:71:
43:eb:8c:04:35:e7:f1:bd:8f:44:11:11:6e:f2:f5:ad:d9:f7:
0d:69:ec:62:cf:9d:02:03:d6:51:19:95:f2:4d:eb:22:f0:0e:
c7:df:56:35:51:46:11:3e:a2:cd:33:7d:78:59:03:e1:01:f3:
e7:62:7a:84:a5:f0:d6:b7:49:8e:28:ec:a2:89:01:15:a3:0e:
57:7a:31:a6:6b:9c:a1:71:56:e2:b3:9c:55:eb:bc:73:81:97:
61:2b:62:b0:c1:61:ec:85:a0:3b:74:5c:76:b8:8c:1e:17:0f:
66:9d:5b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org