Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/323830343a343334633a3a2f33332d3333203d3e20323637353631.roa
File: 323830343a343334633a3a2f33332d3333203d3e20323637353631.roa (raw, json)
Hash identifier: 2iEdxZq3kz48b2NbLqnDYjXJDOpED2XYs0pBrqJxSo8=
Subject key identifier: 29:64:31:E9:B0:48:21:FA:C3:53:C4:F8:E2:44:BB:65:AC:B3:D6:D4
Certificate issuer: /CN=95E83C1EC29F8251CA035F581B61B808604EC59D
Certificate serial: 13E5A34FD0B3E7C91F2CC08F9FB01F9BCBDAA237
Authority key identifier: 95:E8:3C:1E:C2:9F:82:51:CA:03:5F:58:1B:61:B8:08:60:4E:C5:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/323830343a343334633a3a2f33332d3333203d3e20323637353631.roa
Signing time: Thu 06 Mar 2025 13:59:40 +0000
ROA not before: Thu 06 Mar 2025 13:54:40 +0000
ROA not after: Thu 05 Mar 2026 13:59:40 +0000
asID: 267561
IP address blocks: 2804:434c::/33 maxlen: 33
Validation: Failed, certificate revoked on Thu 27 Mar 2025 13:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:e5:a3:4f:d0:b3:e7:c9:1f:2c:c0:8f:9f:b0:1f:9b:cb:da:a2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95E83C1EC29F8251CA035F581B61B808604EC59D
Validity
Not Before: Mar 6 13:54:40 2025 GMT
Not After : Mar 5 13:59:40 2026 GMT
Subject: CN=296431E9B04821FAC353C4F8E244BB65ACB3D6D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:c6:4a:39:3a:12:9f:1d:91:f9:b6:98:25:
bd:22:cd:3c:dc:fa:1d:98:98:bd:af:e7:b6:b8:22:
1b:0f:31:9c:1c:53:e8:28:c1:c8:40:18:6e:23:2c:
7f:1e:d0:35:8d:bb:0f:da:e6:ac:a4:c4:70:d8:68:
57:3b:13:32:c6:99:a4:ab:58:94:b3:de:08:2d:a2:
2e:4c:54:c2:6e:27:45:42:cb:5a:d5:dd:28:58:92:
d0:a9:82:93:70:1a:ab:e7:88:87:13:38:78:b5:e3:
73:0e:85:5d:f4:89:5c:fc:c7:aa:6b:ee:c7:19:ee:
69:4e:01:4e:06:40:c7:1c:23:be:2f:04:1a:2b:f2:
69:5d:0f:b2:87:59:4f:bb:ca:02:7b:57:f4:6b:ed:
9d:13:26:32:6d:c5:b4:b5:c6:61:ff:f5:bf:c1:df:
c8:87:ce:74:38:41:b2:c7:18:35:6b:cc:9c:13:4d:
db:b8:f0:db:45:8a:3c:f5:f1:66:69:fe:50:a6:37:
8b:cd:fb:6d:7c:49:9d:37:d0:00:49:cf:0a:da:48:
4a:03:08:7d:93:0c:16:28:cb:9c:f3:92:25:50:ee:
29:81:fa:ae:af:17:1d:31:fc:97:5a:be:5a:26:de:
f4:80:1b:28:3e:77:91:db:c4:04:18:13:88:64:f4:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:64:31:E9:B0:48:21:FA:C3:53:C4:F8:E2:44:BB:65:AC:B3:D6:D4
X509v3 Authority Key Identifier:
keyid:95:E8:3C:1E:C2:9F:82:51:CA:03:5F:58:1B:61:B8:08:60:4E:C5:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/323830343a343334633a3a2f33332d3333203d3e20323637353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:434c::/33
Signature Algorithm: sha256WithRSAEncryption
c0:ba:ed:05:1e:63:cf:dd:fd:ca:62:e5:ff:cb:4c:f1:93:e0:
32:b0:48:48:8c:20:4e:9b:31:f4:c6:b0:6f:83:d2:d3:7a:46:
37:be:15:5c:0b:5a:72:ca:38:ec:51:69:d2:01:d9:17:d5:47:
cd:93:73:bc:45:5a:7c:19:38:69:58:0b:7b:14:dc:cf:af:f6:
fe:bb:2d:e4:f4:94:12:db:18:91:a7:0f:1a:58:f4:ce:cc:fb:
0e:00:db:cc:a8:99:25:cc:14:4d:1f:19:d0:a2:df:59:97:05:
bd:06:7a:92:9c:cd:b1:fd:63:36:aa:9b:de:f9:91:09:52:b0:
88:f8:f3:85:99:35:44:11:8d:b2:58:26:2e:40:cf:31:78:ab:
1c:1b:45:8d:ad:2f:2d:3d:8c:3d:52:83:60:9d:19:5a:ed:4e:
1b:a4:7d:6a:6c:64:4c:b0:cf:54:69:35:13:f0:0d:4c:09:bd:
c8:37:54:85:5e:bc:33:b3:41:e4:dd:26:49:00:65:6e:35:5b:
35:74:83:8b:d9:8a:5a:5e:8a:cc:57:76:7c:30:2f:1c:97:a7:
fa:0a:83:e3:07:c3:f8:b9:63:76:b6:47:6b:bc:13:e0:22:52:
58:6f:a3:d5:24:d6:d0:bf:c2:d9:32:bf:4c:50:80:f3:78:38:
9b:6a:bd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:03 2025 by rpki-client