Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa
File: 323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier: 3tRbKjpHFYlnhsQzjR88yPZkrnlknES3a/MZecwaEH4=
Subject key identifier: DF:28:F1:2D:C3:C3:E2:1B:22:52:39:4C:C7:96:15:44:6A:8F:61:FA
Certificate issuer: /CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
Certificate serial: 4225E479BDA1776A6FF686A72422DA755C7E1113
Authority key identifier: A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa
Signing time: Fri 08 Aug 2025 13:27:42 +0000
ROA not before: Fri 08 Aug 2025 13:22:42 +0000
ROA not after: Fri 07 Aug 2026 13:27:42 +0000
asID: 270440
IP address blocks: 2804:6c04:c800::/37 maxlen: 37
Validation: Failed, certificate revoked on Mon 11 Aug 2025 14:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:25:e4:79:bd:a1:77:6a:6f:f6:86:a7:24:22:da:75:5c:7e:11:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
Validity
Not Before: Aug 8 13:22:42 2025 GMT
Not After : Aug 7 13:27:42 2026 GMT
Subject: CN=DF28F12DC3C3E21B2252394CC79615446A8F61FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:f1:21:d7:aa:53:78:9b:57:5e:9b:3a:47:
a3:b5:fe:34:1f:01:1c:93:de:88:fc:47:86:d1:d0:
d1:01:e1:0b:6a:cd:90:52:c2:f5:1a:80:39:df:a0:
ad:2e:95:5c:b5:4a:70:47:c9:fc:39:d9:10:5c:ec:
8d:3f:76:e1:71:01:29:81:44:03:9a:75:70:69:1b:
f5:2a:81:39:73:57:76:ae:0d:f5:47:38:12:7c:78:
6d:3c:ca:e8:cf:0f:84:93:5c:00:8e:0d:aa:b7:84:
2a:9c:3a:30:5c:53:ef:5b:6d:7f:66:af:82:e2:0e:
2a:c7:3f:11:14:6b:cd:68:e9:3e:0e:39:4d:ae:50:
7c:e4:6f:d2:7f:65:a4:3f:f5:14:bd:a1:44:cb:5a:
0f:2b:4f:77:c0:b5:9f:03:2f:15:73:5b:8a:ea:bb:
ae:60:d9:3a:44:0d:f1:d1:aa:0a:6b:b2:f1:2b:52:
93:de:ea:33:3b:30:45:21:e4:b2:85:54:0e:62:26:
d9:ef:b3:ba:3c:1a:b1:12:56:23:8c:c1:e4:19:0b:
06:5b:21:a9:7b:2f:89:a0:6e:44:f0:c4:6f:f8:21:
0c:39:92:c3:39:f9:b8:7a:fb:82:f3:c9:ac:ec:93:
54:69:b6:d0:a4:bd:6d:20:ea:2a:7b:a3:0b:fd:d9:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:28:F1:2D:C3:C3:E2:1B:22:52:39:4C:C7:96:15:44:6A:8F:61:FA
X509v3 Authority Key Identifier:
keyid:A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6c04:c800::/37
Signature Algorithm: sha256WithRSAEncryption
9b:bc:82:c1:0d:10:ff:86:30:be:ce:67:f2:80:b0:28:a7:08:
97:f9:37:c7:43:83:0d:24:d3:0a:54:e7:e5:cb:40:e4:b1:75:
13:95:d4:3b:fe:3e:87:fc:e8:11:68:c2:b0:50:8c:5e:7e:47:
2a:24:d9:51:f8:16:34:d7:06:05:6c:2d:0e:42:d1:81:d4:ac:
3e:4f:0a:62:31:5f:c5:54:d9:04:53:ae:46:ba:a0:d2:a3:0f:
80:1c:09:0a:ee:72:22:2a:d3:0c:dc:3c:ca:de:82:6b:29:6d:
c0:a8:54:87:e2:49:3e:63:94:d8:2a:d1:e3:72:1f:91:44:35:
2f:5a:02:75:e2:9b:b0:4a:ae:f7:26:95:dc:09:51:d4:56:b5:
e2:68:95:cc:9d:03:0c:8c:99:c9:34:e7:0c:e3:4c:1c:16:6a:
5c:ad:fb:c8:44:a0:02:61:74:b8:00:b3:80:13:ad:f8:85:7c:
4f:55:e4:bd:6e:54:c7:2a:26:9a:1c:f0:72:a4:a6:40:d6:7d:
83:a7:cd:c0:18:0b:2f:26:d1:44:64:b9:1b:26:eb:41:50:fb:
aa:57:bf:25:bd:6e:01:48:3a:4f:95:39:44:eb:97:a2:32:5e:
f6:92:2f:a5:fa:23:dc:6d:be:4e:1d:e4:29:4e:3e:45:7b:d1:
a5:68:a4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:36 2025 by rpki-client