Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33332d3333203d3e20323633303837.roa
File: 323830343a3937383a3a2f33332d3333203d3e20323633303837.roa (raw, json)
Hash identifier: 0GJ/7PrJQY+QvnAMBlCyjRKFbtiWehBGS/hGNIcAnhQ=
Subject key identifier: 84:71:F4:A7:C0:FF:0B:4D:00:A1:4C:E5:C7:5B:53:9F:03:CA:84:B5
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 0DD94D1512E8FDE5D26412652599410A40F47171
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33332d3333203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:30:27 +0000
ROA not before: Thu 18 Apr 2024 14:25:27 +0000
ROA not after: Thu 17 Apr 2025 14:30:27 +0000
asID: 263087
IP address blocks: 2804:978::/33 maxlen: 33
Validation: Failed, certificate revoked on Wed 22 May 2024 17:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d9:4d:15:12:e8:fd:e5:d2:64:12:65:25:99:41:0a:40:f4:71:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:25:27 2024 GMT
Not After : Apr 17 14:30:27 2025 GMT
Subject: CN=8471F4A7C0FF0B4D00A14CE5C75B539F03CA84B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:e2:1c:56:5c:e8:3d:6f:60:73:af:cd:04:
b2:9e:ac:1a:d7:52:87:0e:21:cd:17:61:38:14:dd:
b4:14:23:45:64:c7:6e:88:89:81:6f:e2:b9:36:5e:
83:a5:25:b2:99:5c:ee:24:a5:98:de:b2:bb:9a:4b:
d9:49:9d:ae:25:07:e7:87:cc:4a:7e:92:08:28:e1:
fa:4f:01:df:85:ba:c0:82:b8:7d:ce:fe:3e:b3:14:
5a:10:30:f6:cd:73:18:18:e6:fa:2e:42:e2:7c:cc:
cd:c3:e2:f5:62:e8:ff:67:de:31:e1:cb:f4:1b:07:
3d:36:47:10:95:a4:9d:e8:59:d8:c3:4e:ed:00:60:
f6:cf:b3:4f:23:29:54:48:73:f7:cb:c8:ad:c2:2a:
75:4b:43:35:ab:96:0f:b1:45:e7:31:23:5c:7d:01:
ba:af:60:7d:96:e1:eb:a0:e3:ed:db:23:69:eb:cb:
86:af:90:b0:7a:a0:d8:37:06:76:ae:b2:a6:7a:7a:
a4:a1:4f:34:7e:10:c7:17:17:a9:4e:71:70:a6:5f:
d6:d2:83:41:7f:01:5c:e3:23:3d:5b:5b:57:5e:0d:
82:0c:13:1e:c2:39:40:60:a8:bc:23:1e:cc:9a:2b:
6e:d4:57:1b:58:33:2b:eb:c1:ef:ee:3e:07:7b:b7:
24:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:71:F4:A7:C0:FF:0B:4D:00:A1:4C:E5:C7:5B:53:9F:03:CA:84:B5
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33332d3333203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:978::/33
Signature Algorithm: sha256WithRSAEncryption
96:7c:34:a6:9d:3e:38:5c:1f:70:10:ba:a0:95:20:1b:83:a2:
c5:d7:c0:11:f5:08:14:70:77:9e:59:b4:83:d0:5c:4e:74:10:
eb:69:b8:45:e5:22:c1:41:8d:06:c0:f0:3f:02:58:72:d5:d7:
0a:79:3b:3f:8f:4d:89:f5:02:b1:14:f4:0c:fb:10:29:bd:f1:
60:ab:65:f6:9a:ff:ea:1b:ca:f7:21:6c:39:f8:4a:b1:bf:42:
c3:1c:63:12:c8:c5:e3:50:12:65:70:61:6d:50:94:13:ff:e2:
45:c2:a1:d2:80:d8:86:dc:1d:92:91:c4:d4:aa:66:d3:1c:73:
77:b6:de:51:c1:26:68:31:53:f0:8e:79:82:6a:21:fc:5e:28:
fd:e9:b3:f0:ad:df:23:3d:e7:e8:15:d7:0c:85:92:ad:a4:39:
33:84:4e:58:11:f1:94:37:5a:7d:c2:59:68:1b:58:d1:2f:73:
47:8a:77:31:09:97:e7:6d:2d:7e:94:8a:39:db:cc:95:7d:72:
9b:72:81:85:1b:46:82:10:04:c3:7c:0b:f6:ae:b9:5f:d1:c5:
c2:6e:82:c6:50:e5:34:bb:2e:a8:98:ab:43:e8:8c:76:f4:8b:
32:d5:c1:3b:0e:56:1a:65:80:a5:74:e6:c3:b8:3d:bc:a8:36:
3a:7b:5a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org