Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a633a3a2f33322d3438203d3e203238333433.roa
File: 323830343a633a3a2f33322d3438203d3e203238333433.roa (raw, json)
Hash identifier: NHXRU9JJ/etxqRbnOBuoq+GMPSV+jt8f9PlW2Xk+k2g=
Subject key identifier: A9:7C:3C:EB:EC:DA:13:02:40:8E:2B:03:D5:AF:F8:21:60:0B:04:42
Certificate issuer: /CN=0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80
Certificate serial: 768F0FC04244B6C9F10D805B792115681B79EAE5
Authority key identifier: 0A:09:45:5F:3B:85:C8:20:AD:F8:A8:A5:B0:0E:6B:24:E5:2D:9D:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a633a3a2f33322d3438203d3e203238333433.roa
Signing time: Thu 03 Apr 2025 20:53:31 +0000
ROA not before: Thu 03 Apr 2025 20:48:31 +0000
ROA not after: Thu 02 Apr 2026 20:53:31 +0000
asID: 28343
IP address blocks: 2804:c::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Apr 2025 11:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8f:0f:c0:42:44:b6:c9:f1:0d:80:5b:79:21:15:68:1b:79:ea:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80
Validity
Not Before: Apr 3 20:48:31 2025 GMT
Not After : Apr 2 20:53:31 2026 GMT
Subject: CN=A97C3CEBECDA1302408E2B03D5AFF821600B0442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:6c:81:a1:5c:45:cc:52:8c:01:cb:14:5f:
2f:2f:a6:22:ed:d5:27:a4:51:63:f0:8a:55:bc:88:
d5:bf:f0:51:16:16:75:d3:81:89:73:8a:ad:4c:27:
3f:03:5a:c1:d6:9b:28:d6:b3:47:35:ee:ff:25:9d:
e4:2a:15:ef:0c:9a:0f:dc:bf:c0:da:a2:35:0a:a0:
a1:2f:01:cc:fa:cb:0f:6d:4c:d4:50:81:48:18:15:
cd:51:46:b4:00:90:eb:8c:d9:00:19:85:21:42:12:
74:99:bf:b8:b1:95:fd:79:0e:a2:5e:78:b5:44:72:
e0:4f:4e:0c:de:4c:c0:f2:43:76:e3:81:f9:e3:de:
0b:c7:ba:f4:20:44:69:b2:a7:5c:98:41:95:0b:97:
b3:6f:2d:3b:c7:a5:a3:bd:80:46:71:e4:c5:94:f0:
08:ad:3a:58:83:9e:f5:6f:90:f4:34:52:1f:63:5d:
b3:6c:04:b1:8f:27:b9:55:0b:ed:42:7e:16:86:8d:
9d:fa:77:47:59:49:70:e4:dd:85:12:51:0a:4b:6d:
eb:91:60:be:1c:ad:8f:44:9c:c9:48:dd:24:82:50:
6a:69:ba:31:58:bc:df:d8:1f:57:6d:40:cb:f6:68:
81:df:d0:d1:01:dc:8b:97:24:c8:36:46:85:95:d3:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7C:3C:EB:EC:DA:13:02:40:8E:2B:03:D5:AF:F8:21:60:0B:04:42
X509v3 Authority Key Identifier:
keyid:0A:09:45:5F:3B:85:C8:20:AD:F8:A8:A5:B0:0E:6B:24:E5:2D:9D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A09455F3B85C820ADF8A8A5B00E6B24E52D9D80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a633a3a2f33322d3438203d3e203238333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:c::/32
Signature Algorithm: sha256WithRSAEncryption
5b:d0:87:67:b0:a0:56:c4:25:29:4c:8d:60:f4:11:7d:c1:39:
e3:35:4d:c0:53:a9:4d:89:89:0a:99:12:e1:a8:c1:4e:db:db:
45:fb:7a:9f:fa:18:1a:11:31:48:ac:75:97:73:ac:d5:3b:51:
8d:c6:12:5e:8c:77:96:a6:be:bb:c6:22:0f:ca:13:d7:03:a7:
d8:b1:40:f4:83:47:5a:35:f3:a1:b8:9d:47:a5:75:f8:6d:4f:
30:06:a5:af:e4:ac:5f:ef:c3:93:ca:33:45:f2:bd:75:d0:ce:
3a:7d:d5:31:53:a5:5c:59:9e:fb:86:32:d0:8b:f6:42:13:a7:
3c:c3:eb:cd:fb:bd:67:18:1a:a6:f7:a5:0d:7f:d1:85:71:19:
c1:90:90:13:b4:3a:6f:1d:0e:e6:c1:28:2f:64:14:f3:0b:73:
0e:13:96:72:33:b6:9e:c4:eb:bf:52:c1:0e:3b:73:66:0b:6f:
ed:6e:07:a3:62:49:27:8f:a2:0d:d3:8f:00:79:b7:4d:6a:07:
5b:7f:bf:14:43:19:0b:b2:c2:96:f6:cf:3c:a5:85:b1:28:f7:
d4:f8:81:2d:64:5a:ef:4a:c5:40:61:a6:4b:29:2d:e8:e2:67:
a1:52:d1:a1:72:51:21:a6:f7:6b:c0:9b:a7:42:e3:82:3a:27:
13:6a:ff:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:05:49 2025 by rpki-client