Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a633030303a3a2f33342d3334203d3e20323633303837.roa
File: 323830343a3937383a633030303a3a2f33342d3334203d3e20323633303837.roa (raw, json)
Hash identifier: o2/RQqVX14J8vi7cyKT4tea2r3msAwCW3yXSvtnACnk=
Subject key identifier: DF:8E:AC:96:D9:DB:E5:B7:74:E7:8D:23:F0:4D:97:62:DF:B9:ED:C6
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 3E4C5343D812441B1A0DAF5A46420C98B8408FC8
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a633030303a3a2f33342d3334203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:30:43 +0000
ROA not before: Thu 18 Apr 2024 14:25:43 +0000
ROA not after: Thu 17 Apr 2025 14:30:43 +0000
asID: 263087
IP address blocks: 2804:978:c000::/34 maxlen: 34
Validation: Failed, certificate revoked on Wed 22 May 2024 17:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:4c:53:43:d8:12:44:1b:1a:0d:af:5a:46:42:0c:98:b8:40:8f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:25:43 2024 GMT
Not After : Apr 17 14:30:43 2025 GMT
Subject: CN=DF8EAC96D9DBE5B774E78D23F04D9762DFB9EDC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:a3:55:98:c6:cf:59:4c:96:fb:33:ca:a7:
f9:f6:e5:7d:b0:5d:22:fa:27:b8:a1:e0:d1:7d:6c:
af:6e:90:3b:ce:43:8d:0c:79:2c:6e:ef:e5:10:2b:
d9:3a:b4:b8:fe:1e:b5:02:19:10:ff:f8:14:29:ce:
ba:59:9c:04:5f:d0:f0:17:5d:4a:7a:3c:ed:8f:fe:
12:54:58:2d:79:9e:64:23:a9:23:cf:3e:5d:8c:39:
f9:4c:db:4d:d6:57:7d:37:f4:e7:b6:01:c2:8a:6c:
de:21:7f:09:37:04:eb:f0:07:12:83:b6:c9:a1:57:
3e:02:f1:18:77:e0:58:fc:ec:4e:11:2f:41:7e:55:
4f:1c:3a:a7:13:c0:d0:e7:d2:c8:1f:3c:8c:41:09:
0d:eb:aa:ee:9b:9e:56:1f:b8:41:11:2a:cf:25:e0:
3b:fb:c8:d3:71:64:8e:32:95:47:24:df:a2:f3:df:
21:94:73:32:68:29:5f:ad:34:22:7e:49:2e:ee:c2:
03:5e:8f:b0:ce:f6:8b:5b:4a:df:04:59:c5:d0:30:
8b:7b:23:64:c3:6b:5a:96:eb:ba:2e:74:a5:12:90:
4d:c7:ef:16:37:a5:9b:da:ee:d4:98:be:e1:be:ba:
ec:d9:57:89:10:2e:b1:7f:ee:c6:1e:fd:37:66:1c:
0e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8E:AC:96:D9:DB:E5:B7:74:E7:8D:23:F0:4D:97:62:DF:B9:ED:C6
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a633030303a3a2f33342d3334203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:978:c000::/34
Signature Algorithm: sha256WithRSAEncryption
8d:aa:74:8e:6d:11:20:9b:6b:e8:ae:9b:c7:e3:15:78:24:80:
d5:cd:5c:8e:e7:4a:ea:18:ef:f8:c9:d5:a1:cb:7b:1a:ee:76:
6a:de:f6:e5:55:28:86:fc:9d:b1:16:87:68:c0:57:54:f2:f1:
da:6c:75:f5:94:4d:eb:14:fb:4a:b4:df:f2:55:b6:d8:5a:0c:
4e:63:92:30:7c:cd:d4:3b:7a:ff:6b:6e:92:6a:51:2b:2a:0d:
3d:01:9b:d2:87:ef:76:0f:a9:67:3a:a2:c0:3d:a1:e4:82:5b:
d6:5c:54:e3:40:2f:b2:9c:a3:5e:03:4e:8d:8d:2a:65:6f:e4:
20:90:08:69:04:43:80:d7:44:d8:83:3e:fc:6b:a4:6e:2d:ad:
66:13:8d:2c:e6:43:40:b6:a1:ff:0a:2d:84:d4:51:ed:94:d8:
ed:10:00:05:81:c5:51:64:84:fe:0b:ce:1a:b5:79:27:af:3c:
1a:2a:4a:d7:90:68:39:3f:78:43:3e:f8:45:93:45:a7:d8:66:
f5:71:79:d9:53:3a:fc:ea:55:48:a2:4f:0a:45:ae:27:89:ec:
ec:cf:d9:d2:ec:6f:12:f8:0b:e3:f9:d7:0f:28:46:27:76:60:
63:99:00:f4:4a:70:54:7f:f8:1f:5f:1b:09:f1:c1:22:68:a4:
80:79:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org