Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/323830343a326365343a3a2f33322d3332203d3e20323635323439.roa
File: 323830343a326365343a3a2f33322d3332203d3e20323635323439.roa (raw, json)
Hash identifier: xgR3GY4oFRtnCwTmsg0Nvjpg3+yuv2+n+FQNsDoyjBs=
Subject key identifier: 49:57:C0:F6:23:4B:93:5E:4C:D3:17:2B:DC:6F:98:BB:3B:40:37:78
Certificate issuer: /CN=7F41F2DF45380ED28EBC66827733788836A8955D
Certificate serial: 1F738E992CED7C5AF3D52AE83D06718C4E73D97C
Authority key identifier: 7F:41:F2:DF:45:38:0E:D2:8E:BC:66:82:77:33:78:88:36:A8:95:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F41F2DF45380ED28EBC66827733788836A8955D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/323830343a326365343a3a2f33322d3332203d3e20323635323439.roa
Signing time: Tue 10 Jun 2025 12:02:19 +0000
ROA not before: Tue 10 Jun 2025 11:57:19 +0000
ROA not after: Tue 09 Jun 2026 12:02:19 +0000
asID: 265249
IP address blocks: 2804:2ce4::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 14 Jun 2025 03:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:73:8e:99:2c:ed:7c:5a:f3:d5:2a:e8:3d:06:71:8c:4e:73:d9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F41F2DF45380ED28EBC66827733788836A8955D
Validity
Not Before: Jun 10 11:57:19 2025 GMT
Not After : Jun 9 12:02:19 2026 GMT
Subject: CN=4957C0F6234B935E4CD3172BDC6F98BB3B403778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:a4:85:1e:e6:0d:a1:d1:f4:52:dd:84:1d:
74:d7:36:02:6a:fb:53:14:8d:57:92:75:b6:00:0b:
0d:0f:bd:76:37:87:af:1f:85:bc:4f:4e:50:20:1a:
fc:f4:6c:1d:58:d5:20:0e:1c:bb:6c:94:fe:9e:fd:
6a:62:3e:1e:0d:18:8a:e4:0f:a9:99:96:f1:8c:07:
6f:e4:a9:18:f2:e0:da:de:b6:d1:3c:4e:50:ca:ff:
b6:99:29:6f:5e:42:c4:54:3a:58:9d:96:ef:e6:07:
e1:ad:50:6f:a0:ed:8c:95:90:38:1d:dd:65:01:da:
8a:04:bc:c4:a3:e9:29:d4:43:22:5d:88:12:1a:b5:
cc:d2:80:49:d9:31:cc:65:e3:52:fa:13:da:60:8f:
3e:a3:a8:c9:53:8a:31:29:d4:9f:9d:ce:af:ce:b3:
94:b3:37:42:f8:b2:ea:96:fa:3b:50:ac:16:1a:c8:
2a:54:03:57:f6:86:bc:fd:f6:67:91:8d:3b:6f:d4:
3e:e1:5d:75:3f:0b:19:9e:af:3e:e6:e4:20:a2:14:
10:92:39:d2:4a:4a:62:11:7a:82:fd:c1:9d:59:ee:
3f:b7:24:f2:2f:42:21:38:65:29:c6:dc:29:8f:70:
ff:f8:c8:40:7f:56:4e:ef:f4:24:31:dd:22:69:16:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:57:C0:F6:23:4B:93:5E:4C:D3:17:2B:DC:6F:98:BB:3B:40:37:78
X509v3 Authority Key Identifier:
keyid:7F:41:F2:DF:45:38:0E:D2:8E:BC:66:82:77:33:78:88:36:A8:95:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/7F41F2DF45380ED28EBC66827733788836A8955D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F41F2DF45380ED28EBC66827733788836A8955D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/323830343a326365343a3a2f33322d3332203d3e20323635323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2ce4::/32
Signature Algorithm: sha256WithRSAEncryption
56:e4:af:7a:4d:00:84:4b:05:df:6e:ee:1c:49:98:61:2a:42:
06:ad:59:ce:12:82:bd:01:4e:56:23:9c:ca:e4:cf:51:ac:79:
5f:ec:bc:0c:dd:e1:e1:71:4d:f6:6a:46:9e:76:40:3b:12:ca:
b0:4e:43:41:b0:f5:5a:8d:9f:a1:ff:d7:65:e4:31:7c:97:5e:
88:7c:f7:d9:0b:8e:ba:4d:43:e2:2e:69:ee:89:26:8d:d9:f3:
f2:3a:ae:0a:ba:bf:57:bf:e3:fe:d5:0f:b3:e5:ca:86:43:c0:
90:65:b6:a2:d7:8c:6f:0c:ed:15:4a:a1:9b:a5:e9:46:3c:19:
62:f1:5d:c3:4e:a6:24:89:4f:75:f0:14:ff:11:62:e4:dc:1f:
a5:20:d0:59:84:eb:c1:67:60:86:b1:1a:9f:46:4d:68:a6:6b:
c6:48:ab:fa:65:26:04:b4:b7:ad:a4:b9:09:a2:60:bf:b7:c3:
b5:dc:00:2f:48:38:47:8f:56:f9:57:d5:c1:d4:a5:c0:d8:0d:
80:d7:4d:2c:0d:55:c7:ab:6b:88:f6:a4:1b:e1:e8:b2:ef:78:
4f:e4:7f:f6:1f:b8:57:13:42:6f:52:3b:88:c2:93:e7:5f:85:
b6:1a:41:b9:ea:4c:27:0c:66:52:e6:03:0f:f3:fd:d7:06:a0:
88:94:5e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 04:52:06 2025 by rpki-client