Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a3a2f33322d3430203d3e203238363035.roa
File: 323830343a3363303a3a2f33322d3430203d3e203238363035.roa (raw, json)
Hash identifier: REi8yOg6BuAQ/oKysVzHIefvStoMfstW8c2Dxxpmv/s=
Subject key identifier: FF:86:28:D0:7B:63:C0:BC:8E:60:45:04:C4:AE:56:57:79:8C:D4:81
Certificate issuer: /CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
Certificate serial: 1FA74B6CAB2FBFDB53005738121C06BF8FB6ED57
Authority key identifier: 5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a3a2f33322d3430203d3e203238363035.roa
Signing time: Tue 08 Apr 2025 16:20:03 +0000
ROA not before: Tue 08 Apr 2025 16:15:03 +0000
ROA not after: Tue 07 Apr 2026 16:20:03 +0000
asID: 28605
IP address blocks: 2804:3c0::/32 maxlen: 40
Validation: Failed, certificate revoked on Tue 08 Apr 2025 19:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a7:4b:6c:ab:2f:bf:db:53:00:57:38:12:1c:06:bf:8f:b6:ed:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
Validity
Not Before: Apr 8 16:15:03 2025 GMT
Not After : Apr 7 16:20:03 2026 GMT
Subject: CN=FF8628D07B63C0BC8E604504C4AE5657798CD481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:ff:78:3e:a1:58:59:c6:bf:5d:56:ca:92:
9a:e8:9f:b4:78:6d:0a:bc:a9:21:26:28:34:7c:7a:
02:47:30:56:6a:67:ce:3a:e5:e3:61:25:37:73:d9:
e5:0b:3b:7c:4a:2a:76:67:2a:de:2f:3d:2f:97:7f:
00:c6:cf:d4:c3:35:1f:d6:09:b2:ca:ad:05:04:7a:
62:30:e5:21:f6:44:f1:2a:a6:c5:ca:e9:a0:6e:89:
c3:52:30:5b:9b:a9:5f:4a:9e:1f:55:d8:a9:d7:26:
81:65:ce:e6:02:15:ba:e9:9b:4c:80:67:0e:59:7a:
86:47:15:4a:49:b2:ad:e1:ec:12:12:c1:61:c1:92:
f7:dd:35:0f:fd:d8:8e:2d:14:e8:ca:b1:af:90:dc:
d7:c0:fe:02:17:74:92:1f:50:f9:8a:25:55:80:db:
43:4e:fc:4c:11:78:0f:9e:a4:d2:94:fe:27:84:0b:
f6:9d:49:6c:e4:d1:f6:b1:06:fe:89:32:41:a9:1c:
04:a3:66:48:1e:6f:23:05:71:63:0a:8e:9e:59:97:
8f:c4:9b:ec:e6:61:62:90:cd:f2:a0:2b:1d:af:db:
e7:38:8a:3d:01:80:e8:22:c1:64:29:67:ae:54:95:
9f:09:9c:df:ec:32:ec:60:30:63:e4:7d:87:a7:1a:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:28:D0:7B:63:C0:BC:8E:60:45:04:C4:AE:56:57:79:8C:D4:81
X509v3 Authority Key Identifier:
keyid:5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a3a2f33322d3430203d3e203238363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3c0::/32
Signature Algorithm: sha256WithRSAEncryption
ba:1f:18:57:78:f0:e1:7f:87:8b:a6:ed:71:06:bd:8b:a6:9c:
aa:9c:3b:ff:db:29:d4:94:d3:5a:76:b5:15:df:92:76:93:8c:
a9:55:df:22:b5:bc:d5:20:88:a2:a7:00:46:38:77:61:22:3b:
2c:e2:2d:56:79:e3:04:c5:fe:22:be:3f:fb:4e:03:7c:3c:bd:
4b:50:85:e2:cb:0e:16:0e:a2:53:b4:9e:9a:d4:d2:4b:db:ab:
b6:ff:28:c9:9f:ce:84:02:8c:0b:65:6e:6a:10:41:71:e9:e8:
01:37:01:73:74:24:c1:4d:3f:26:61:a0:e5:d2:57:87:1a:9e:
ef:5e:01:0e:f4:6b:35:e3:32:ad:e8:25:f9:93:d6:c6:28:02:
f5:d8:11:a8:2b:5d:a6:e1:ee:78:5b:98:cf:a8:4e:0f:4c:d2:
38:fe:7a:bf:55:d9:f2:76:71:da:61:ff:87:ad:01:30:af:79:
fd:c2:02:1c:8e:a3:6f:18:29:95:fd:ec:e8:fa:ce:c9:d0:6d:
e3:a9:94:9e:04:de:9c:6d:11:bf:fd:98:22:15:d1:ae:ea:2b:
b6:d6:38:8c:55:62:99:a3:ff:a9:91:fd:2a:be:85:14:66:42:
a4:a8:56:be:81:b4:04:fc:32:98:5c:4a:f0:a3:8a:75:9e:ba:
0c:7b:60:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:42:08 2025 by rpki-client