Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/323830343a373564343a633030303a3a2f33342d3438203d3e20323731303732.roa
File: 323830343a373564343a633030303a3a2f33342d3438203d3e20323731303732.roa (raw, json)
Hash identifier: 8ViQ2I3rqypklpw7mJl59BFcXsEBoUjecJg9HXTG3ns=
Subject key identifier: 1C:FA:57:88:EB:9B:A0:D3:E7:10:83:4A:4D:54:4E:8B:85:E7:3B:F4
Certificate issuer: /CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
Certificate serial: 74DF4503CFD3DD3E43263A09459F584AD1C50021
Authority key identifier: D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/323830343a373564343a633030303a3a2f33342d3438203d3e20323731303732.roa
Signing time: Fri 20 Dec 2024 17:24:46 +0000
ROA not before: Fri 20 Dec 2024 17:19:46 +0000
ROA not after: Fri 19 Dec 2025 17:24:46 +0000
asID: 271072
IP address blocks: 2804:75d4:c000::/34 maxlen: 48
Validation: Failed, certificate revoked on Fri 20 Dec 2024 17:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:df:45:03:cf:d3:dd:3e:43:26:3a:09:45:9f:58:4a:d1:c5:00:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
Validity
Not Before: Dec 20 17:19:46 2024 GMT
Not After : Dec 19 17:24:46 2025 GMT
Subject: CN=1CFA5788EB9BA0D3E710834A4D544E8B85E73BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:4b:6b:be:09:a9:d4:8b:97:87:15:a5:43:
99:50:f8:91:37:28:15:6b:28:5c:ce:fa:c6:9d:0d:
69:c6:99:db:24:93:0f:53:4d:fc:29:0f:7a:61:c3:
4b:f0:a5:82:a1:2e:23:25:c3:a1:b3:10:7a:41:eb:
4d:92:21:ee:bc:f8:4f:18:1d:0f:4f:59:55:8e:15:
bc:88:cd:3f:7b:f9:8e:36:ee:4e:b6:c2:c3:47:04:
9c:9d:85:8a:79:04:a6:07:52:87:6b:34:ca:e2:e5:
99:da:c2:43:f1:85:65:e0:06:f7:df:ca:16:cd:2f:
31:3b:2b:69:84:f9:a8:e5:d7:2d:3d:46:b0:e5:93:
cf:40:1e:f3:f4:18:59:4f:c6:bf:42:65:47:d6:9b:
8b:13:e0:3c:6b:38:c7:d9:60:63:67:73:fd:d0:4c:
1e:62:ff:3b:c2:d1:2c:f5:ad:2e:f0:13:84:43:73:
1e:1f:14:b9:e5:70:24:da:29:51:67:5e:36:6b:ce:
bc:1f:0e:e7:0f:25:78:fc:f3:86:cf:9d:76:f6:06:
00:57:c3:50:92:12:5b:67:6f:ac:6d:0f:31:44:8f:
ec:c9:30:5b:50:b9:a8:64:ee:44:d6:16:bf:ad:38:
09:a5:01:8f:de:b0:ca:ce:1b:21:12:e2:6b:f0:7e:
f7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:57:88:EB:9B:A0:D3:E7:10:83:4A:4D:54:4E:8B:85:E7:3B:F4
X509v3 Authority Key Identifier:
keyid:D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/323830343a373564343a633030303a3a2f33342d3438203d3e20323731303732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:75d4:c000::/34
Signature Algorithm: sha256WithRSAEncryption
7f:65:e5:5c:a0:a0:ec:19:06:a4:52:33:97:3c:8e:6c:de:a2:
cc:18:34:76:78:88:d1:9f:1b:d4:51:50:e9:a5:f7:29:3b:6f:
d4:7e:9f:bc:2b:54:8c:ad:c1:ed:ed:8b:60:fb:11:56:30:15:
af:2e:2f:b9:fc:08:c0:ce:63:a4:74:2e:10:c2:5e:53:e6:8d:
01:db:9b:6b:74:4a:12:4a:5f:13:a4:31:01:8a:dc:fb:f0:96:
b0:63:ac:2c:56:4d:ba:49:c3:1a:1c:77:32:55:32:1e:87:e5:
91:2f:84:f1:93:6f:c7:fb:8a:42:85:fb:00:49:26:d6:15:5b:
b7:6e:da:76:e4:10:0d:e5:07:cd:ba:1c:d4:ea:b2:1b:95:f4:
28:7d:d4:f9:88:7e:c1:b4:2a:66:b4:98:c9:0e:68:13:f0:28:
7c:af:1d:57:46:92:06:bb:e6:a2:36:8e:21:de:90:38:f9:9b:
8f:16:dd:f2:93:11:b0:53:4d:a8:0b:94:02:16:34:0d:6c:4c:
36:ed:88:cc:96:89:cb:8e:ad:02:1a:03:12:3d:60:fb:89:5f:
8e:58:cd:8c:be:30:6e:44:ad:58:01:ba:24:a0:73:1d:f0:a6:
7e:d8:ec:cb:ff:61:1a:f8:55:f9:3c:b3:60:e4:d4:00:11:e4:
b8:35:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:39:50 2025 by rpki-client