Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/323830343a353762303a633030303a3a2f33342d3334203d3e20323638303830.roa
File: 323830343a353762303a633030303a3a2f33342d3334203d3e20323638303830.roa (raw, json)
Hash identifier: vsJ7JYgG7gidWEd/kF0h02n+k8tsnMVC4GdwCBgqDRY=
Subject key identifier: B2:D4:9C:73:0A:97:A9:B3:0C:1A:BC:F4:B5:AA:B4:E9:73:41:21:AB
Certificate issuer: /CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
Certificate serial: 0B0E589C005EF79DAAD39F366B8723F47EA85413
Authority key identifier: 84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/323830343a353762303a633030303a3a2f33342d3334203d3e20323638303830.roa
Signing time: Wed 19 Feb 2025 11:44:01 +0000
ROA not before: Wed 19 Feb 2025 11:39:01 +0000
ROA not after: Wed 18 Feb 2026 11:44:01 +0000
asID: 268080
IP address blocks: 2804:57b0:c000::/34 maxlen: 34
Validation: Failed, certificate revoked on Sat 22 Feb 2025 14:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:0e:58:9c:00:5e:f7:9d:aa:d3:9f:36:6b:87:23:f4:7e:a8:54:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
Validity
Not Before: Feb 19 11:39:01 2025 GMT
Not After : Feb 18 11:44:01 2026 GMT
Subject: CN=B2D49C730A97A9B30C1ABCF4B5AAB4E9734121AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:72:cc:08:b1:32:d1:d2:d5:49:01:1d:cd:
99:57:1a:45:6c:f2:77:0b:d2:2e:29:64:26:c4:1f:
21:2c:f5:3f:8e:40:6d:7d:d8:f9:ba:00:23:69:8e:
3e:03:f3:8c:10:f4:1d:8c:b7:88:d1:ff:bc:73:1d:
54:e8:2e:47:89:26:43:23:fd:a0:61:72:b6:c2:d1:
ca:fb:c8:e1:52:94:8e:7c:ea:78:af:16:87:f0:77:
d0:81:80:d2:5d:ab:d8:dd:4d:55:e5:29:96:21:45:
86:94:e4:1d:43:65:53:c6:d1:3e:9c:5f:95:ce:87:
11:44:1a:57:ca:15:75:a2:c4:19:98:66:02:84:f2:
ce:9c:36:d1:c6:c1:3f:17:a7:1d:bc:0d:36:11:15:
f0:01:3c:e9:75:d5:58:d9:0d:79:1e:e3:f1:c3:40:
f7:92:a1:bd:58:a7:af:f3:b6:30:f4:ae:28:ef:e2:
22:e5:9c:8f:cb:27:2b:96:30:31:52:2f:7b:51:6f:
77:39:49:d7:2d:96:2f:6c:ff:ae:d9:65:bd:79:38:
82:b5:5e:b3:d5:31:5c:6f:42:4f:4e:6a:12:b1:20:
81:12:0b:f0:a9:20:01:64:fa:8a:95:9c:55:1b:c9:
3e:87:bc:0f:e9:05:78:c6:b7:ed:cd:64:12:a6:2b:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D4:9C:73:0A:97:A9:B3:0C:1A:BC:F4:B5:AA:B4:E9:73:41:21:AB
X509v3 Authority Key Identifier:
keyid:84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/323830343a353762303a633030303a3a2f33342d3334203d3e20323638303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:57b0:c000::/34
Signature Algorithm: sha256WithRSAEncryption
39:f9:3d:9e:8c:d5:73:93:d2:34:95:1b:00:56:43:42:1b:90:
de:3c:ab:9e:1e:07:1e:f3:b4:be:99:cd:9b:45:6f:92:06:fb:
70:a4:fa:d8:15:ef:34:c0:a1:9c:9a:d0:d8:93:05:8b:9c:a1:
da:2c:19:04:af:09:71:54:d3:be:db:1e:eb:f3:75:60:e3:c2:
cd:18:0b:1c:e5:7a:ab:78:a2:f1:79:42:f6:33:f6:a2:90:33:
3f:da:7a:45:8b:c3:7b:52:7d:67:b3:c7:c2:3d:e8:c0:9d:c9:
d2:4e:1f:dd:fb:c8:cf:52:d7:14:28:b9:13:81:d9:1f:72:6a:
4e:40:a9:af:40:9d:bb:b2:c7:bf:63:cb:0a:40:58:c2:21:4b:
f0:50:0b:f2:95:1a:d2:30:39:41:58:ab:20:31:79:6a:9d:3c:
21:6f:9e:8b:5c:97:af:99:d7:12:f2:32:4a:f4:2a:44:1e:60:
14:2a:78:22:2c:bc:5d:39:8b:14:72:bc:45:e8:0f:85:3e:b6:
2d:9a:4e:a0:65:38:96:9b:c1:44:1d:98:c9:87:27:28:0b:d1:
1a:a2:90:a8:5b:f0:f1:19:66:1c:80:cf:b9:b0:8d:68:d0:30:
23:65:ee:2e:13:38:ad:70:cb:2b:f3:9c:0e:43:0b:84:a0:35:
f1:45:08:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 18:18:28 2025 by rpki-client