Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3a2f33332d3333203d3e203238333238.roa
File: 323830343a3637343a3a2f33332d3333203d3e203238333238.roa (raw, json)
Hash identifier: vTcKpgqszlDLxVIo8dVeI9ze//NiA51S7Yuad9NKl8s=
Subject key identifier: D3:0E:DA:B8:18:76:86:D2:06:4D:4C:08:0E:E8:AE:0F:F5:09:D7:EE
Certificate issuer: /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial: 15566BA35A8D8F0EC800B57B6F0E163D9C9668F3
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3a2f33332d3333203d3e203238333238.roa
Signing time: Thu 13 Jun 2024 00:37:32 +0000
ROA not before: Thu 13 Jun 2024 00:32:32 +0000
ROA not after: Thu 12 Jun 2025 00:37:32 +0000
asID: 28328
IP address blocks: 2804:674::/33 maxlen: 33
Validation: Failed, certificate revoked on Thu 25 Jul 2024 11:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:56:6b:a3:5a:8d:8f:0e:c8:00:b5:7b:6f:0e:16:3d:9c:96:68:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Validity
Not Before: Jun 13 00:32:32 2024 GMT
Not After : Jun 12 00:37:32 2025 GMT
Subject: CN=D30EDAB8187686D2064D4C080EE8AE0FF509D7EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:d3:d5:3d:7c:d8:66:5a:25:f1:47:f6:04:
12:62:16:de:4b:e2:b1:17:72:bb:13:6c:38:17:72:
87:a7:7c:1e:40:ca:d9:94:79:ce:3b:61:ab:71:a5:
c8:7f:ad:e8:d5:76:0e:27:00:1e:23:72:ee:30:95:
44:57:9d:e7:be:0a:07:5b:af:11:d6:b7:86:09:f6:
38:bc:75:34:22:8d:5c:80:5f:6b:ec:e8:97:c2:a8:
a6:1b:40:25:7d:52:09:c2:08:13:56:28:52:dd:42:
62:82:32:59:69:45:da:3f:d3:87:7f:c5:9a:9b:1b:
b8:f6:68:22:f0:98:06:f2:48:1c:e3:1d:ab:2c:8b:
ed:2b:ec:a4:fa:ec:1d:8d:c2:3b:8a:3e:32:c3:e3:
87:c7:38:01:a9:12:88:56:5b:d7:61:bc:68:4b:69:
7b:fe:cf:72:e0:c3:5c:2c:c3:8b:68:3a:fb:0f:4b:
0a:15:10:c0:dc:1b:5f:29:dc:cc:53:be:23:d6:ff:
88:5b:95:1a:76:68:56:5d:cd:87:80:ed:c3:31:ec:
7b:bc:22:19:32:47:5f:c0:e5:cb:f6:c0:ed:6f:08:
6f:36:3a:bd:0e:c3:9f:7d:83:67:6a:f7:00:3f:4f:
cb:c2:c4:04:7d:31:8c:e6:f4:72:e2:3b:e4:49:df:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0E:DA:B8:18:76:86:D2:06:4D:4C:08:0E:E8:AE:0F:F5:09:D7:EE
X509v3 Authority Key Identifier:
keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3a2f33332d3333203d3e203238333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:674::/33
Signature Algorithm: sha256WithRSAEncryption
1f:dc:05:ec:f5:c2:8d:a8:7c:0c:87:d1:c4:ac:aa:f7:78:09:
3d:a3:78:e8:70:c3:63:f3:cd:8d:cf:80:a1:68:fb:91:d0:5f:
6d:67:34:5f:02:ac:cc:bb:f6:ad:e0:73:63:9a:68:90:7f:b6:
a7:dc:3b:d9:77:ba:6e:bf:f4:67:ec:4c:c0:28:65:d6:46:ef:
ac:68:6a:ca:0c:38:ac:94:59:6b:99:b0:ef:01:6f:6d:a2:11:
e0:1b:ef:3d:a2:1b:87:b3:0d:9d:29:80:76:fd:ef:b9:28:54:
b4:cd:2c:f4:bf:b9:cb:c6:36:ac:52:17:34:aa:88:11:3a:cf:
3b:40:d0:54:0d:d6:b5:95:50:56:2d:30:0f:63:28:94:b0:ad:
67:a8:5a:cc:ef:f7:ee:d6:42:ca:f7:3d:4e:fc:df:ab:d5:3c:
83:38:4b:44:4c:3e:d1:64:58:e5:67:d4:c0:48:2a:32:58:be:
4d:1b:89:f6:6e:20:b1:0f:41:5e:df:57:f0:78:24:2a:55:4f:
8d:f2:06:f4:9b:53:3f:90:63:09:1f:4b:53:1e:a2:d8:83:89:
20:cc:7b:85:1c:67:68:2c:da:34:3f:cc:98:02:aa:a0:34:c0:
21:ad:bf:08:8b:48:db:0c:16:11:ad:fe:84:b2:61:d0:14:cd:
07:fc:43:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 13:50:36 2024 by rpki-client on console-ams.rpki-client.org