![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33332d3333203d3e20323733343539.roa
File: 323830343a386566383a3a2f33332d3333203d3e20323733343539.roa (raw, json)
Hash identifier: jS2yIjHKkPUj6CSlOce+rpegtQDvKoHEIECHkWD6CjE=
Subject key identifier: AD:52:B1:39:83:A7:EB:2C:5E:25:66:49:A6:E6:23:6B:B0:16:A8:EE
Certificate issuer: /CN=60394DEF47E6D547EE9A7D8544543C8F0B072BDA
Certificate serial: 5F264F4F5D4C3DD65D242DD1BF2E79F834E883C8
Authority key identifier: 60:39:4D:EF:47:E6:D5:47:EE:9A:7D:85:44:54:3C:8F:0B:07:2B:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33332d3333203d3e20323733343539.roa
Signing time: Tue 26 Nov 2024 16:16:24 +0000
ROA not before: Tue 26 Nov 2024 16:11:24 +0000
ROA not after: Tue 25 Nov 2025 16:16:24 +0000
asID: 273459
IP address blocks: 2804:8ef8::/33 maxlen: 33
Validation: Failed, certificate revoked on Tue 26 Nov 2024 22:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:26:4f:4f:5d:4c:3d:d6:5d:24:2d:d1:bf:2e:79:f8:34:e8:83:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60394DEF47E6D547EE9A7D8544543C8F0B072BDA
Validity
Not Before: Nov 26 16:11:24 2024 GMT
Not After : Nov 25 16:16:24 2025 GMT
Subject: CN=AD52B13983A7EB2C5E256649A6E6236BB016A8EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0a:c4:d8:d1:1f:bf:1d:90:86:7e:da:67:d0:
26:fe:5f:60:78:9b:36:a2:00:c2:76:ab:51:3b:7c:
6d:9f:64:9a:d6:04:3b:4c:e3:fe:8e:09:db:9c:2e:
7c:ec:78:28:6d:70:d9:e6:2e:3f:86:b9:b1:66:90:
58:ff:01:57:65:c1:a9:59:09:9c:f0:2b:c1:22:b2:
9a:04:5b:ea:22:b2:86:71:d2:b2:54:77:c0:31:0a:
f3:39:8c:00:47:8d:f7:68:69:1c:45:ff:2a:7b:a3:
41:06:61:3a:63:ca:00:d0:c8:c2:47:04:69:e0:fc:
ab:b7:9f:34:fa:da:6a:8f:ab:e5:49:c9:63:14:d9:
71:31:b7:26:4d:1d:17:e8:ec:a5:88:92:cd:36:02:
16:b1:a4:71:24:ce:41:74:b1:63:aa:08:1d:77:85:
f4:bc:2b:0e:8c:0c:47:cf:29:ad:43:ca:e6:cd:e6:
25:a7:93:ec:42:b9:2d:25:90:8e:59:4f:1a:c1:e2:
88:45:aa:b3:5b:c7:d9:68:d3:08:28:56:82:78:9c:
6c:7e:57:82:fa:36:f0:d4:fe:34:4e:60:4f:35:7d:
68:e4:28:72:bc:a6:22:a8:d9:17:76:0c:eb:f7:35:
a3:26:5d:b8:bf:d2:95:27:4f:3c:fe:7f:01:be:95:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:B1:39:83:A7:EB:2C:5E:25:66:49:A6:E6:23:6B:B0:16:A8:EE
X509v3 Authority Key Identifier:
keyid:60:39:4D:EF:47:E6:D5:47:EE:9A:7D:85:44:54:3C:8F:0B:07:2B:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33332d3333203d3e20323733343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8ef8::/33
Signature Algorithm: sha256WithRSAEncryption
1f:95:47:92:dc:4f:29:2f:6a:56:75:ae:35:c7:95:d5:ff:ea:
35:fe:a3:b9:f6:80:02:68:3c:6f:0d:2a:a0:f5:cf:2c:08:c6:
6a:ca:c7:5c:c0:a5:50:68:ec:b8:6b:3c:07:9a:08:a6:83:45:
31:21:46:ed:50:df:5d:8f:f2:fa:17:d8:4c:8b:e3:81:fb:c1:
c6:7c:66:01:92:98:3c:8b:6c:9a:76:91:09:01:bf:ef:dd:99:
25:90:a6:ce:90:12:13:a4:d5:18:54:8e:3f:63:ae:5d:b3:6c:
dd:c2:40:24:68:50:be:13:a3:0f:7b:cb:35:24:e2:a6:71:12:
d7:3c:da:79:23:a6:9a:6d:43:ea:93:42:2e:b2:6f:80:3b:64:
0a:1a:ee:7d:9a:a5:79:de:4d:fb:1f:63:47:6d:47:6d:57:f0:
fe:c0:0a:b1:26:ff:69:f3:1c:13:18:61:4b:a2:ff:91:4d:95:
84:db:08:2e:36:79:98:17:00:da:32:38:ae:98:19:77:0f:9d:
e7:d7:5a:dc:d6:11:1d:ac:da:63:b7:7b:aa:e8:05:e4:e4:4b:
38:10:3a:8b:0c:55:20:8d:03:1c:a6:50:e2:99:13:2a:38:29:
c9:be:ed:4b:20:6d:a8:31:dc:03:fa:3f:7e:83:c8:55:26:50:
64:c0:29:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:12 2025 by rpki-client