Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33322d3332203d3e20323635393335.roa
File: 323830343a343031633a3a2f33322d3332203d3e20323635393335.roa (raw, json)
Hash identifier: 29Aue8exGA1UBNjUd0194udRkDUN91FUxvTCXMnURsY=
Subject key identifier: 50:E1:99:EB:CA:4C:2F:A2:81:4C:89:7E:06:46:24:57:98:4C:AD:00
Certificate issuer: /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial: 14000B06BADA4BC57EA385C1D05DA13FF8C3B043
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33322d3332203d3e20323635393335.roa
Signing time: Thu 06 Mar 2025 07:52:47 +0000
ROA not before: Thu 06 Mar 2025 07:47:47 +0000
ROA not after: Thu 05 Mar 2026 07:52:47 +0000
asID: 265935
IP address blocks: 2804:401c::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 14 Apr 2025 21:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:00:0b:06:ba:da:4b:c5:7e:a3:85:c1:d0:5d:a1:3f:f8:c3:b0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Validity
Not Before: Mar 6 07:47:47 2025 GMT
Not After : Mar 5 07:52:47 2026 GMT
Subject: CN=50E199EBCA4C2FA2814C897E06462457984CAD00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:2a:0c:77:e5:f8:84:ff:a1:1a:63:33:56:
dd:1f:71:85:20:b8:c8:b9:9a:03:1b:78:98:fa:39:
a8:26:90:50:e8:83:f3:7e:02:34:53:a8:9d:96:96:
bd:8c:ae:dd:ba:45:58:47:51:c2:ae:d3:cc:81:56:
43:3d:e9:c9:db:77:20:ef:b6:cd:f0:e7:84:c3:7e:
d7:61:3e:39:4e:7f:71:6d:4f:21:f7:86:ea:31:de:
b6:64:17:4c:d8:1c:e7:01:e6:3f:06:f2:2a:95:fb:
6e:04:2d:9c:45:1f:ee:e1:1c:cc:36:64:aa:4d:88:
ed:eb:43:83:05:bd:a6:10:c1:e6:19:96:2e:fc:b4:
a6:bf:8e:22:55:6c:b3:13:b3:36:64:db:13:ab:da:
9b:0a:3e:f6:02:de:01:54:12:d1:79:44:48:99:02:
da:fb:19:81:40:29:15:fd:80:48:33:4e:1b:0f:f7:
9b:90:d5:38:df:30:4e:ec:dc:b4:52:e8:d1:fe:f2:
6b:fc:bd:17:a4:b5:ec:37:43:74:b4:3c:18:2f:8d:
c4:12:02:d4:7c:96:56:90:ca:bd:e3:3a:f7:bb:15:
97:71:cb:5c:2d:c0:af:c7:a5:7b:ab:1c:8f:0f:66:
15:09:0b:4c:f8:52:1f:e6:c8:0d:5b:69:14:da:39:
fc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E1:99:EB:CA:4C:2F:A2:81:4C:89:7E:06:46:24:57:98:4C:AD:00
X509v3 Authority Key Identifier:
keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33322d3332203d3e20323635393335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:401c::/32
Signature Algorithm: sha256WithRSAEncryption
4a:8e:69:65:f1:de:f8:a3:a1:a0:9a:ca:8b:15:e7:0f:d5:47:
0a:8b:37:dc:f0:ca:02:89:4a:b2:96:1a:7d:41:84:91:5a:03:
01:af:85:03:65:fa:e7:e6:7e:91:e2:d3:70:df:2a:80:00:fd:
41:85:25:39:69:3e:22:61:49:55:8a:66:e3:e5:61:a8:70:e8:
8c:fc:4f:71:21:e1:9e:75:a4:05:dc:59:b3:1e:4c:0b:e6:84:
fc:a1:80:bb:96:d4:8b:46:67:20:29:bb:81:46:87:8a:d4:04:
e6:ad:a1:d7:fd:77:2c:e6:6c:64:9f:35:ca:b4:a0:f5:fb:59:
43:ef:fe:a4:e6:e2:b4:55:f4:ad:63:81:5f:1e:82:7a:91:f8:
5c:e4:84:dc:48:da:f6:ee:3b:84:83:18:c5:e7:8b:58:94:44:
d0:a4:c5:fc:38:7e:75:07:86:af:e2:fa:90:dc:a7:9b:a7:e3:
4c:c1:09:8f:3a:c5:e5:25:bc:8d:0a:44:0f:a5:02:30:f0:31:
bd:d2:a6:24:4f:0b:53:33:9f:5c:4f:5a:fb:94:80:9b:63:e0:
a1:79:2d:d7:df:cc:36:a4:c1:f1:1d:4b:3d:f0:84:73:84:f7:
f4:13:69:68:a0:b7:dd:d6:c5:03:e4:dc:29:72:d7:f0:62:cf:
19:9b:32:0a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFAALBrraS8V+o4XB0F2hP/jDsEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGM0JFQUM1NzVENkI2N0JGMkYyODYzMjhDNjgwQzQ0
NjdGNUJEMzAeFw0yNTAzMDYwNzQ3NDdaFw0yNjAzMDUwNzUyNDdaMDMxMTAvBgNV
BAMTKDUwRTE5OUVCQ0E0QzJGQTI4MTRDODk3RTA2NDYyNDU3OTg0Q0FEMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGECoMd+X4hP+hGmMzVt0fcYUg
uMi5mgMbeJj6OagmkFDog/N+AjRTqJ2Wlr2Mrt26RVhHUcKu08yBVkM96cnbdyDv
ts3w54TDftdhPjlOf3FtTyH3huox3rZkF0zYHOcB5j8G8iqV+24ELZxFH+7hHMw2
ZKpNiO3rQ4MFvaYQweYZli78tKa/jiJVbLMTszZk2xOr2psKPvYC3gFUEtF5REiZ
Atr7GYFAKRX9gEgzThsP95uQ1TjfME7s3LRS6NH+8mv8vRektew3Q3S0PBgvjcQS
AtR8llaQyr3jOve7FZdxy1wtwK/HpXurHI8PZhUJC0z4Uh/myA1baRTaOfxnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUOGZ68pML6KBTIl+BkYkV5hMrQAwHwYDVR0j
BBgwFoAUOPO+rFdda2e/LyhjKMaAxEZ/W9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQ
NmovMS8zOEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjNCRUFDNTc1RDZCNjdC
RjJGMjg2MzI4QzY4MEM0NDY3RjVCRDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiN2JlWndMYlRqVEIzR1BSdEJoek1Seld4RW5ZTUJZR1ZNQXRzRXp3UDZqLzEv
MzIzODMwMzQzYTM0MzAzMTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzkzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARAHDANBgkqhkiG9w0BAQsFAAOCAQEASo5pZfHe
+KOhoJrKixXnD9VHCos33PDKAolKspYafUGEkVoDAa+FA2X65+Z+keLTcN8qgAD9
QYUlOWk+ImFJVYpm4+VhqHDojPxPcSHhnnWkBdxZsx5MC+aE/KGAu5bUi0ZnICm7
gUaHitQE5q2h1/13LOZsZJ81yrSg9ftZQ+/+pObitFX0rWOBXx6CepH4XOSE3Eja
9u47hIMYxeeLWJRE0KTF/Dh+dQeGr+L6kNynm6fjTMEJjzrF5SW8jQpED6UCMPAx
vdKmJE8LUzOfXE9a+5SAm2PgoXkt19/MNqTB8R1LPfCEc4T39BNpaKC33dbFA+Tc
KXLX8GLPGZsyCg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net