Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33322d3438203d3e20323633303837.roa
File: 323830343a3937383a3a2f33322d3438203d3e20323633303837.roa (raw, json)
Hash identifier: twsFaUkjOoVcH1AX82kd+oWHHnIKeR1Y2uMuQ8wvTFs=
Subject key identifier: 99:11:25:BA:7B:0C:F8:E9:37:40:36:AE:2F:DF:4F:10:8F:98:D2:AD
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 1AFBFF43040403CBCE9E12C236BC3E90EC51C7BF
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33322d3438203d3e20323633303837.roa
Signing time: Wed 22 May 2024 17:17:44 +0000
ROA not before: Wed 22 May 2024 17:12:44 +0000
ROA not after: Wed 21 May 2025 17:17:44 +0000
asID: 263087
IP address blocks: 2804:978::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 07 Nov 2024 13:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:fb:ff:43:04:04:03:cb:ce:9e:12:c2:36:bc:3e:90:ec:51:c7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: May 22 17:12:44 2024 GMT
Not After : May 21 17:17:44 2025 GMT
Subject: CN=991125BA7B0CF8E9374036AE2FDF4F108F98D2AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:37:9c:f1:46:07:d8:46:ed:a2:f4:4e:97:
a5:03:c2:96:46:ce:f7:8d:9a:c4:92:4b:32:d9:97:
22:4e:26:18:66:34:12:76:16:04:32:3d:73:9b:93:
12:93:b1:4b:ee:07:1e:85:46:d6:57:82:c3:11:8f:
b4:98:67:60:71:11:fd:97:67:93:f8:95:f3:17:81:
87:7e:d9:bd:bd:e4:7c:51:a1:33:25:05:64:67:5f:
32:57:af:10:2d:37:4b:94:e1:85:4e:3b:f9:bc:0a:
ee:8b:62:e9:90:51:46:45:e9:35:8c:b5:22:2a:9b:
e9:d5:04:7a:55:8a:05:f4:06:2b:50:16:8c:48:71:
b4:1e:d8:14:21:15:cd:0a:1e:62:fa:92:67:38:17:
fc:4d:42:45:09:03:31:44:c1:0a:de:08:bd:a7:76:
f9:ac:19:95:75:35:89:34:38:5c:8c:da:9c:b5:8d:
d1:30:2b:45:4f:2c:7d:83:7a:70:1b:95:08:b5:84:
a1:ef:a8:df:39:5d:4c:ca:89:06:3e:80:8a:fa:48:
95:e8:e4:70:e3:d3:ba:6f:6f:ec:ce:b6:c9:56:c0:
b5:b8:39:77:69:84:07:36:e2:94:6d:75:28:a7:fe:
58:a6:0c:ee:2d:d2:42:ae:fd:3b:b3:66:36:cb:2e:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:11:25:BA:7B:0C:F8:E9:37:40:36:AE:2F:DF:4F:10:8F:98:D2:AD
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33322d3438203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:978::/32
Signature Algorithm: sha256WithRSAEncryption
97:e7:7c:a6:b3:22:d6:32:28:db:64:7c:14:46:85:a6:69:77:
28:32:1d:b1:77:92:c0:81:6f:bd:8f:a5:b7:86:12:f9:0f:f8:
15:1b:01:4b:70:c1:f0:aa:67:70:4f:52:05:f3:af:43:b4:be:
38:a6:f1:04:8d:d0:d3:a0:8d:f4:67:c6:51:a2:f1:75:3b:cc:
b7:54:8e:05:e7:ec:78:24:5a:84:6d:d5:66:a9:a7:f7:3e:d8:
6b:7c:e8:f7:04:b7:1c:a0:80:9f:a7:c7:e0:70:4b:f3:61:5c:
3e:8d:4c:27:81:74:c7:f2:51:1f:5f:de:7e:5f:f8:fa:c3:d3:
99:c1:28:7e:7e:89:db:fa:29:58:bd:48:83:38:da:d7:d7:c8:
ea:87:e7:e1:47:ce:53:83:1d:d4:32:5b:3f:a4:df:47:2e:e3:
cd:e4:68:3c:c7:49:9d:a4:dc:55:47:32:06:84:c9:2b:8e:0b:
e8:81:80:cb:b5:85:c5:2f:ae:c5:dc:c4:ef:42:3f:68:78:84:
3e:88:a3:18:b6:d3:c7:e9:dd:93:ef:0f:a7:83:5b:a0:10:e3:
4c:ec:7d:74:b3:1d:48:05:b4:04:6f:c5:9c:ae:11:9f:10:fe:
d5:87:41:73:a5:21:85:09:33:42:ae:2e:62:58:b9:7c:bb:07:
93:cf:98:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 17:43:08 2024 by rpki-client on console-ams.rpki-client.org