Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a3931383a3a2f33322d3332203d3e203238353834.roa
File: 323830343a3931383a3a2f33322d3332203d3e203238353834.roa (raw, json)
Hash identifier: riEBRriKOBF2/PA/m4veXeQwmBoHpVgIm6qt9lJ9RcM=
Subject key identifier: C3:87:A3:34:32:F3:A8:A9:24:07:97:73:86:5D:E4:51:B7:FA:3F:06
Certificate issuer: /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial: 26956AEEB3B0A7175CD6A9BC51FCD764E06366DF
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a3931383a3a2f33322d3332203d3e203238353834.roa
Signing time: Tue 08 Apr 2025 16:22:48 +0000
ROA not before: Tue 08 Apr 2025 16:17:48 +0000
ROA not after: Tue 07 Apr 2026 16:22:48 +0000
asID: 28584
IP address blocks: 2804:918::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 08 Apr 2025 19:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:95:6a:ee:b3:b0:a7:17:5c:d6:a9:bc:51:fc:d7:64:e0:63:66:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
Validity
Not Before: Apr 8 16:17:48 2025 GMT
Not After : Apr 7 16:22:48 2026 GMT
Subject: CN=C387A33432F3A8A924079773865DE451B7FA3F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:42:1f:5a:75:d9:cd:c6:2a:eb:e0:7b:96:
bd:bf:da:76:e0:2e:8d:de:b1:78:25:4f:b1:f1:b5:
a4:42:15:51:9b:0d:63:28:bf:3b:05:2e:a6:33:a1:
f7:9b:76:04:1b:a8:d1:51:f6:8b:f2:44:ed:4f:f1:
99:55:d8:46:37:58:0a:6d:5f:94:ea:13:0e:e4:44:
cd:3b:8c:6c:ed:fb:2f:95:2b:d4:94:11:e3:1f:58:
33:da:e5:76:2b:b3:5f:60:a6:0b:35:e3:75:d2:2d:
e8:2e:30:d0:c1:81:49:ff:65:99:e7:5b:14:30:3e:
36:ff:ee:dd:ef:55:4d:ec:22:7d:d5:dd:27:a9:0a:
f2:54:4d:a0:0c:9d:ea:7a:64:68:64:b2:20:dc:2e:
66:af:18:b0:1e:74:fa:11:5a:35:6a:7b:82:74:17:
b3:e2:f1:51:50:d6:bc:29:e7:17:8f:cf:22:c8:4a:
d5:d0:12:cb:c1:f3:2d:ac:3d:16:77:de:e8:79:37:
63:1e:be:5c:29:15:3b:bc:c7:13:db:ae:87:f6:3e:
1d:d1:50:5e:0b:88:9b:89:f4:a2:70:9a:09:52:b2:
bc:3f:42:a3:c3:61:d1:15:1e:49:71:4c:38:93:8b:
97:39:ae:79:ad:06:53:f5:c0:1b:ea:a8:97:2d:0c:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:87:A3:34:32:F3:A8:A9:24:07:97:73:86:5D:E4:51:B7:FA:3F:06
X509v3 Authority Key Identifier:
keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a3931383a3a2f33322d3332203d3e203238353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:918::/32
Signature Algorithm: sha256WithRSAEncryption
05:89:af:59:02:8a:3e:dd:45:03:24:14:52:f7:fd:2d:3c:a9:
ab:36:09:f4:d3:76:84:bd:df:51:d2:72:e1:6a:54:4f:f6:00:
49:10:93:40:e4:76:97:3d:93:6e:a7:06:61:06:81:a7:d1:ff:
c3:9b:73:ed:0b:4b:49:29:22:1e:36:52:82:3e:eb:7f:50:5b:
6a:83:f5:38:45:68:ca:d5:29:71:98:a7:e7:3a:5a:ae:53:b3:
5f:a1:37:5c:c7:63:d7:90:35:d2:d8:54:94:88:ac:84:67:88:
f2:24:33:52:66:0b:f2:dc:85:11:7c:c4:36:45:78:75:4c:dd:
91:ca:0b:28:b4:00:83:d8:68:40:26:1c:2d:ee:e2:70:10:22:
bc:43:e6:76:11:9f:18:0a:78:32:e5:9c:9c:12:2d:62:14:cd:
cc:e5:9b:88:dc:8a:50:f5:b0:f9:6c:c8:20:b0:cb:6c:8e:aa:
39:bb:7f:7d:a1:99:ac:20:aa:72:79:2c:d6:7d:63:d6:ac:e7:
7f:cf:ca:cd:16:43:1c:3c:09:90:be:e7:2d:8c:4b:41:2e:73:
ac:f6:f7:c8:1a:4c:9d:67:ae:09:7f:86:a8:a8:b9:e1:09:aa:
8b:13:90:15:a2:02:4f:ec:b9:e8:67:7e:08:5b:5f:14:8f:d0:
72:90:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:20:41 2025 by rpki-client