Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a3a2f33342d3334203d3e20323633303236.roa
File: 323830343a6132383a3a2f33342d3334203d3e20323633303236.roa (raw, json)
Hash identifier: DVvBVIAIySHS1GObyEfDJGU6QbSvN68jppVBi1JAZ7U=
Subject key identifier: F4:88:4B:54:4E:D9:35:EB:C4:84:20:85:7B:5F:3E:49:56:AE:AD:FF
Certificate issuer: /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial: 12BE83ADB339BB4B2FDF379D3CFF031588D9B897
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a3a2f33342d3334203d3e20323633303236.roa
Signing time: Sun 19 May 2024 02:59:58 +0000
ROA not before: Sun 19 May 2024 02:54:58 +0000
ROA not after: Sun 18 May 2025 02:59:58 +0000
asID: 263026
IP address blocks: 2804:a28::/34 maxlen: 34
Validation: Failed, certificate revoked on Wed 07 Aug 2024 14:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:be:83:ad:b3:39:bb:4b:2f:df:37:9d:3c:ff:03:15:88:d9:b8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Validity
Not Before: May 19 02:54:58 2024 GMT
Not After : May 18 02:59:58 2025 GMT
Subject: CN=F4884B544ED935EBC48420857B5F3E4956AEADFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f3:75:f3:22:e9:99:81:95:7e:f3:93:95:7d:
9d:6e:b7:b2:0a:d2:b5:aa:df:23:ac:fb:90:fe:54:
f5:fe:58:af:c4:84:c8:20:4b:e8:fa:24:09:b7:a1:
45:39:75:21:e7:7e:b9:a1:2f:83:da:98:0c:db:7a:
8d:49:c5:1e:e0:aa:48:20:e7:4c:5a:33:2a:2a:cf:
ab:22:04:9a:4b:88:79:d1:1c:4f:bc:c5:5b:e5:93:
7d:98:8c:d1:e2:34:45:33:3b:d2:18:a1:83:13:59:
de:d3:81:b4:48:6e:b7:17:d1:86:92:e8:fc:9d:aa:
d1:d4:9a:f6:13:0f:de:16:32:72:80:56:f8:44:75:
e9:73:01:a6:91:7f:b3:00:08:09:84:88:79:3f:8d:
7d:4e:5c:4d:d3:3d:45:7f:04:9f:15:22:6a:26:fd:
b8:75:e0:92:a0:25:46:5f:b6:0d:a9:9a:4d:5a:f5:
24:7d:d6:83:f3:bd:bb:a8:1a:f8:04:7d:46:41:4b:
20:8f:85:27:ce:39:13:c6:2b:08:f9:02:de:ac:6c:
74:e0:ff:0b:b9:9e:4c:4c:96:4a:e3:41:28:ae:3d:
9b:c4:d6:f9:28:7e:13:7e:e7:31:17:8a:df:3e:53:
c8:e7:33:fc:32:18:52:74:20:12:5b:8d:08:e0:3d:
20:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:88:4B:54:4E:D9:35:EB:C4:84:20:85:7B:5F:3E:49:56:AE:AD:FF
X509v3 Authority Key Identifier:
keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a3a2f33342d3334203d3e20323633303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a28::/34
Signature Algorithm: sha256WithRSAEncryption
4d:ea:ec:e8:e5:25:30:95:84:fc:bc:ba:9d:88:9f:b7:62:a8:
48:c5:b4:37:82:3c:91:ba:00:df:f6:f5:b3:fd:2b:89:10:67:
28:49:41:0d:10:2a:c1:4e:9f:1b:94:de:4a:da:83:76:aa:06:
fc:a0:b9:c3:ea:09:f3:d0:c9:94:cd:7e:b4:a2:49:2d:4c:43:
7d:8e:86:33:53:fb:e7:25:f9:81:a6:0b:02:62:16:64:a0:cb:
01:61:c6:26:03:4c:30:cc:e8:39:fb:21:9b:9a:fd:56:32:27:
43:04:75:2c:31:2f:3b:ae:08:66:3f:8d:59:80:1f:c7:26:87:
a2:a0:6e:03:11:fd:ca:87:77:ee:0f:84:97:91:85:a9:e5:78:
56:80:79:aa:a8:37:ad:8d:4a:b4:36:10:50:79:b5:7d:30:fe:
95:e9:45:9e:cf:21:4d:b9:0a:84:2b:91:79:de:c4:d3:57:f6:
19:2f:87:b1:9a:ba:18:3b:0a:02:7c:29:44:75:e8:13:78:2e:
d5:f1:21:58:b5:e3:ff:73:88:06:c3:d3:4c:19:67:d3:72:a6:
65:11:40:88:d6:0a:38:98:8c:0f:d4:e1:54:33:c9:45:55:b1:
be:13:68:a8:a4:55:1a:36:e2:0f:11:5c:dd:8d:d5:2a:58:5a:
c0:2a:c0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org