Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/323830343a336662303a666630303a3a2f34302d3430203d3e20323635393037.roa
File: 323830343a336662303a666630303a3a2f34302d3430203d3e20323635393037.roa (raw, json)
Hash identifier: 1Lq/7pSwOmOtCkFtb6++HvT347xRkh1OflaGa1pdydo=
Subject key identifier: F0:BF:23:3A:18:A0:C5:D2:A5:2C:A9:ED:F2:4A:1A:C0:56:6E:D9:AB
Certificate issuer: /CN=A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78
Certificate serial: 3430896178A1822724B3FF4D2D9222E1BF35F76B
Authority key identifier: A2:ED:72:0D:77:9C:3C:48:35:6C:6B:5A:3D:EA:2A:10:CB:0F:9F:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.cer
Subject info access: rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/323830343a336662303a666630303a3a2f34302d3430203d3e20323635393037.roa
Signing time: Tue 29 Apr 2025 14:11:51 +0000
ROA not before: Tue 29 Apr 2025 14:06:51 +0000
ROA not after: Tue 28 Apr 2026 14:11:51 +0000
asID: 265907
IP address blocks: 2804:3fb0:ff00::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 05 May 2025 12:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:30:89:61:78:a1:82:27:24:b3:ff:4d:2d:92:22:e1:bf:35:f7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78
Validity
Not Before: Apr 29 14:06:51 2025 GMT
Not After : Apr 28 14:11:51 2026 GMT
Subject: CN=F0BF233A18A0C5D2A52CA9EDF24A1AC0566ED9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:6c:73:19:a6:11:2b:1f:ba:42:59:4d:ee:
28:46:4b:b4:a8:c7:84:9b:11:c0:71:2a:34:e6:9d:
a2:e7:63:6b:44:50:c7:08:c2:68:10:93:0e:90:10:
bd:87:09:bb:08:1c:85:18:97:9e:5b:45:d3:33:ea:
b5:84:94:aa:bd:05:b7:fd:ba:b4:53:eb:66:b3:ba:
51:97:61:53:af:f4:83:c6:a8:74:13:7e:10:5e:e3:
e5:4f:57:93:89:cd:56:7f:ff:4c:16:61:1e:d4:a5:
7e:32:6a:96:47:d1:58:ab:b1:40:ea:df:fe:df:b6:
70:e5:50:f1:7b:92:ba:4d:ab:7f:5e:59:9f:a2:89:
05:ba:19:e3:ed:40:d6:28:30:f3:c3:f8:84:d6:9a:
52:f9:d2:bd:aa:b8:72:52:1d:f3:7a:fb:66:0d:11:
7b:a1:e9:73:5a:32:53:5c:4a:50:28:d9:5d:68:f8:
41:eb:a3:1e:01:17:fd:ab:11:73:a3:ab:47:50:de:
a9:d1:6f:b1:7e:09:bb:ea:d8:bd:3f:16:97:30:7b:
c1:a3:59:40:54:6d:d5:83:f9:38:7a:fd:98:d1:36:
d3:d8:a4:9e:80:7a:ab:b4:d4:d8:92:80:8a:20:76:
8f:d3:f5:9c:cd:2e:94:16:68:cf:99:27:6c:00:12:
94:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BF:23:3A:18:A0:C5:D2:A5:2C:A9:ED:F2:4A:1A:C0:56:6E:D9:AB
X509v3 Authority Key Identifier:
keyid:A2:ED:72:0D:77:9C:3C:48:35:6C:6B:5A:3D:EA:2A:10:CB:0F:9F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/323830343a336662303a666630303a3a2f34302d3430203d3e20323635393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3fb0:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
08:e6:20:a4:04:a9:10:a8:e8:e6:90:18:81:fb:43:1d:4e:08:
c5:aa:8d:0e:be:4c:3f:b3:9e:a1:86:4a:41:27:da:34:2c:54:
47:0e:ab:1a:4c:ab:a2:57:43:cc:cc:42:a1:d9:66:a8:74:f7:
69:c8:d2:5e:d5:c7:f3:7e:60:78:f7:e1:e4:dd:90:b4:11:9c:
12:fe:13:82:e2:08:0b:33:bc:96:12:9c:25:1c:43:37:6d:05:
63:f2:38:0f:cc:51:24:5f:b5:93:e0:ca:a4:fa:04:ac:9c:57:
ae:23:10:75:da:d7:78:a7:1d:bb:c8:be:b4:09:ca:60:e0:b8:
48:b0:46:42:94:5b:2d:48:b4:a4:4b:4f:49:6f:fd:01:8b:a0:
d4:fe:b8:54:67:e7:05:3e:1c:5a:53:6f:70:b7:27:fe:84:0c:
d9:e8:61:fb:a5:91:03:21:b0:8c:de:55:9e:43:c6:ef:a4:14:
e9:a3:7f:dc:94:04:a6:a7:bd:5f:ed:7d:f9:e8:27:cb:9c:f9:
6f:f4:1b:17:02:20:a6:35:c3:4a:96:56:1c:02:c4:84:16:4f:
58:e7:e7:c3:69:15:b8:bc:a3:b0:fc:75:ee:1f:ae:f2:1f:d4:
55:e2:d0:d0:d2:d4:e9:d4:91:1f:0a:64:7f:b9:aa:ba:44:d9:
ee:1f:9f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:10:40 2025 by rpki-client