Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33342d3334203d3e20323633303837.roa
File: 323830343a3937383a3a2f33342d3334203d3e20323633303837.roa (raw, json)
Hash identifier: PQ3lIXI4Y2AHd+SRhGdK+oR8I+Ce1bimayihfO+sqaM=
Subject key identifier: 14:F3:34:B5:50:8A:E9:AB:CE:48:A2:F9:EE:95:56:33:BD:72:9C:DD
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 66423DC0B81AB167869153D07C255665FC1CF33C
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33342d3334203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:30:29 +0000
ROA not before: Thu 18 Apr 2024 14:25:29 +0000
ROA not after: Thu 17 Apr 2025 14:30:29 +0000
asID: 263087
IP address blocks: 2804:978::/34 maxlen: 34
Validation: Failed, certificate revoked on Wed 22 May 2024 17:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:42:3d:c0:b8:1a:b1:67:86:91:53:d0:7c:25:56:65:fc:1c:f3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:25:29 2024 GMT
Not After : Apr 17 14:30:29 2025 GMT
Subject: CN=14F334B5508AE9ABCE48A2F9EE955633BD729CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:d0:bf:d8:b5:b3:04:47:c1:4e:97:15:f5:
9a:ea:70:e6:bf:60:96:bd:10:1c:c1:4b:0f:e5:8f:
0c:6c:41:4b:1b:d6:bf:4d:ae:8e:a6:bb:29:bd:fa:
c9:8b:2f:6b:5c:58:a7:89:92:74:0f:c7:f7:6b:be:
ed:04:1a:56:5f:21:66:78:4e:a7:88:69:44:5f:d1:
28:8a:3d:6e:4b:9a:0f:c6:65:aa:c4:b8:d6:23:73:
00:39:ac:22:94:12:49:16:db:8a:35:6e:ad:ae:74:
55:09:9b:33:88:f8:6d:eb:2b:9d:7d:0a:d6:be:f4:
3d:70:36:e5:ea:9f:26:52:5a:4f:54:d5:6a:24:80:
c3:82:f9:06:c7:0f:49:12:e5:6d:68:ab:d0:49:b4:
89:a8:be:b5:ff:69:46:16:0b:71:3f:b5:4f:90:18:
06:eb:ff:9c:26:9b:2c:ce:a6:52:60:09:a3:cc:d2:
6b:c3:a6:3b:57:ef:01:41:be:54:02:8e:5b:85:2a:
32:9d:ab:cb:80:c0:56:9f:2b:29:05:c1:d0:f2:38:
4f:17:75:bd:4f:20:75:48:7c:ae:06:c6:7b:9c:e4:
c4:3c:00:a6:d5:d6:13:ca:10:e4:83:cc:64:bc:f9:
3b:d6:97:c8:04:6f:5f:61:53:96:60:fd:54:08:d3:
25:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F3:34:B5:50:8A:E9:AB:CE:48:A2:F9:EE:95:56:33:BD:72:9C:DD
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33342d3334203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:978::/34
Signature Algorithm: sha256WithRSAEncryption
a6:5d:34:40:1b:9a:5d:e6:c1:3a:c5:27:70:57:11:5c:b8:42:
f2:63:d8:23:f0:c1:7e:55:ee:2a:7e:61:50:1a:4f:b7:28:1c:
8a:a1:b9:6c:09:0f:9f:8d:0c:75:de:b7:cc:14:c6:8e:a6:fc:
f7:d1:96:a9:dd:2d:4a:0e:f2:79:e7:25:75:ea:d1:dd:98:8a:
b2:4f:8f:66:c1:95:cb:6d:cc:2c:09:b5:be:89:02:8c:99:e1:
f7:bf:cc:bb:3c:df:06:52:23:43:69:01:a8:1a:7c:16:64:1a:
f3:71:44:9c:c2:c4:04:d5:0a:67:e0:3a:55:b1:03:a0:93:37:
3c:d3:2c:9c:67:11:8f:36:23:54:0e:ce:c7:ba:f9:e1:cc:5b:
59:32:d5:77:7b:0c:b0:31:13:17:0e:fa:23:c6:e1:97:63:1e:
16:43:40:b6:3f:94:78:b8:c2:e7:a1:08:a6:c8:3a:bf:7b:d0:
a0:e9:61:85:b2:7c:6c:02:54:58:35:16:d7:a8:14:ac:bc:c5:
d9:7d:51:b8:92:41:ac:6f:8f:85:89:39:b1:11:3b:d6:f3:cb:
79:fe:7a:0a:ed:51:ba:75:c7:d6:36:6d:33:31:d6:3f:f1:a2:
11:29:85:cb:21:1b:d8:23:be:1a:90:1f:46:f2:cb:29:a9:fe:
61:52:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:51 2025 by rpki-client