Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/323830343a313537633a3a2f33322d3336203d3e20323633333930.roa
File: 323830343a313537633a3a2f33322d3336203d3e20323633333930.roa (raw, json)
Hash identifier: y+sq4VJUxR3bqFPpU1lDX0HPdfZZHiK6tbjBF4A+7s0=
Subject key identifier: AF:FC:E0:7F:37:8C:0A:6E:66:1F:BD:B7:09:74:2F:85:D8:8F:11:A1
Certificate issuer: /CN=815CD92DD5F19C6193766831C396FE65A0CF9E73
Certificate serial: 0D5DB07B4632CC3590BF3C2B516AECF14FBE43FD
Authority key identifier: 81:5C:D9:2D:D5:F1:9C:61:93:76:68:31:C3:96:FE:65:A0:CF:9E:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815CD92DD5F19C6193766831C396FE65A0CF9E73.cer
Subject info access: rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/323830343a313537633a3a2f33322d3336203d3e20323633333930.roa
Signing time: Wed 08 Jan 2025 20:42:21 +0000
ROA not before: Wed 08 Jan 2025 20:37:21 +0000
ROA not after: Wed 07 Jan 2026 20:42:21 +0000
asID: 263390
IP address blocks: 2804:157c::/32 maxlen: 36
Validation: Failed, certificate revoked on Sat 24 May 2025 16:12:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:5d:b0:7b:46:32:cc:35:90:bf:3c:2b:51:6a:ec:f1:4f:be:43:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815CD92DD5F19C6193766831C396FE65A0CF9E73
Validity
Not Before: Jan 8 20:37:21 2025 GMT
Not After : Jan 7 20:42:21 2026 GMT
Subject: CN=AFFCE07F378C0A6E661FBDB709742F85D88F11A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:56:ad:8a:7a:55:50:86:dd:17:82:5c:97:
6b:e6:6c:84:17:d3:2e:7b:88:73:1f:60:57:52:c7:
15:de:e9:ba:67:f2:22:d2:bb:f6:2d:65:cc:b6:e5:
d4:7b:39:c1:09:3e:7d:22:2a:99:b0:9d:cd:15:ca:
6c:4c:12:94:b8:e9:cb:71:8e:ab:25:39:93:77:a5:
ed:b3:be:67:6e:77:ca:a2:28:ae:4e:6f:db:2e:37:
87:f0:27:ad:39:1a:1a:2b:13:25:48:0f:ff:8a:ea:
53:57:df:20:1d:8f:fb:fd:67:31:1b:6a:88:18:d4:
f6:14:5d:db:c0:e5:0e:f9:cc:a2:b8:aa:aa:c0:48:
ac:04:13:96:67:bb:f5:ea:d4:4a:0d:d2:ad:94:3c:
a8:0c:64:ad:74:30:94:77:aa:fb:a6:29:24:3d:aa:
5f:2f:59:54:5f:86:22:89:04:19:35:be:25:b5:f3:
57:72:51:c1:25:27:84:e1:8a:9c:08:9e:6f:32:0f:
14:4d:84:29:05:8e:fe:d2:3d:b8:92:46:51:b2:16:
55:89:6f:12:b6:1b:78:85:40:18:5c:58:72:0a:c3:
be:9d:07:01:d0:4d:30:ba:c8:dd:58:7a:ea:5b:e5:
01:14:f7:0f:2a:6a:54:bd:c2:b9:43:76:c7:76:3f:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FC:E0:7F:37:8C:0A:6E:66:1F:BD:B7:09:74:2F:85:D8:8F:11:A1
X509v3 Authority Key Identifier:
keyid:81:5C:D9:2D:D5:F1:9C:61:93:76:68:31:C3:96:FE:65:A0:CF:9E:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/815CD92DD5F19C6193766831C396FE65A0CF9E73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815CD92DD5F19C6193766831C396FE65A0CF9E73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/323830343a313537633a3a2f33322d3336203d3e20323633333930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:157c::/32
Signature Algorithm: sha256WithRSAEncryption
24:d8:41:ee:41:3e:7e:74:18:f8:1d:f7:80:da:8c:94:1a:28:
20:48:a1:c1:ec:74:03:c5:a3:9c:ad:df:69:cf:d7:d9:50:8b:
83:46:75:95:44:d7:92:8e:b9:12:9e:4c:35:c0:06:0a:f8:d3:
a3:63:70:2b:98:0e:dd:9f:86:59:b8:e4:ed:34:d7:16:ee:d7:
2e:89:4f:c5:a4:b5:7a:72:83:ef:63:eb:6d:9e:a9:90:2c:39:
37:b8:c6:e7:df:17:59:83:e8:d1:38:fa:75:67:81:2f:03:ea:
bd:a4:1f:06:e7:f1:59:13:b9:05:67:04:25:1d:50:a3:13:3a:
d1:bd:ef:61:4d:87:00:e2:9d:e4:93:a4:0d:fd:0b:23:17:82:
13:9c:2e:28:98:b9:c8:f3:e6:c9:97:e0:c8:97:bb:f5:f8:9a:
4a:58:c9:a5:33:88:66:97:5b:08:25:6a:98:dd:12:ec:ec:51:
ea:4b:08:0c:72:86:75:bf:d3:32:c0:a1:0c:fa:64:89:75:d5:
87:e3:12:5a:7a:26:e1:6c:56:9d:2e:81:fc:25:f2:a7:1a:09:
c5:94:a7:15:30:6b:c0:08:4d:84:47:33:ed:56:0c:b1:17:5d:
76:a6:80:09:74:e1:4a:ff:57:ac:16:f8:45:cc:67:ca:68:59:
fe:9d:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:44:49 2025 by rpki-client