Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3230303a3a2f34302d3430203d3e20323730363834.roa
File: 323830343a366663383a3230303a3a2f34302d3430203d3e20323730363834.roa (raw, json)
Hash identifier: UkDK+kTomb9aawcMzFB+MNb3ppZoe/MObhfWFJdJ+zk=
Subject key identifier: 19:EC:7E:E5:3E:99:85:71:EE:E1:C3:2A:65:41:2C:0B:E4:94:BA:CE
Certificate issuer: /CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Certificate serial: 11AA7E9D14B5541618F4EA270D247C2C1B27A9F2
Authority key identifier: 89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3230303a3a2f34302d3430203d3e20323730363834.roa
Signing time: Tue 08 Oct 2024 11:00:26 +0000
ROA not before: Tue 08 Oct 2024 10:55:26 +0000
ROA not after: Tue 07 Oct 2025 11:00:26 +0000
asID: 270684
IP address blocks: 2804:6fc8:200::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 08 Oct 2024 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:aa:7e:9d:14:b5:54:16:18:f4:ea:27:0d:24:7c:2c:1b:27:a9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Validity
Not Before: Oct 8 10:55:26 2024 GMT
Not After : Oct 7 11:00:26 2025 GMT
Subject: CN=19EC7EE53E998571EEE1C32A65412C0BE494BACE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:98:cb:ec:32:97:95:2e:23:4e:27:f6:4a:
52:c7:4d:b1:e3:fe:c7:c9:42:6c:a4:76:39:9a:90:
a1:27:98:88:b6:21:70:0e:9a:e8:5d:9b:ea:ba:00:
ea:b8:fe:5e:b8:46:71:f1:14:41:8f:05:15:2a:a4:
f1:02:02:08:bb:d9:1c:e3:9b:c1:42:ad:30:7e:9e:
be:81:71:b4:4d:8d:79:b3:4b:21:c3:1a:cf:54:de:
7d:e4:85:07:a5:f5:4f:b2:c5:03:8c:e7:7b:2e:19:
5d:49:e1:9b:f0:f6:21:23:51:18:19:98:79:b1:aa:
51:f7:40:9d:90:b9:aa:ef:51:91:f2:d5:e5:d7:18:
6b:76:79:6c:88:e1:c6:f4:44:75:c3:31:e0:d4:4c:
f5:c3:d7:f0:14:c0:7a:1b:0b:12:ef:b4:c8:10:37:
ed:36:c4:a5:cd:ff:80:c5:e2:a3:07:54:e8:82:68:
d4:cd:13:a0:af:b9:6a:86:5c:78:09:ef:c2:be:de:
8e:23:ba:5b:13:3b:4f:f5:b2:4c:22:85:e5:07:c5:
c7:c3:fd:2e:b6:38:48:ad:16:77:6a:49:e7:00:ff:
a5:3e:31:94:15:5d:d8:db:92:d5:09:ff:f0:5c:dd:
fc:08:3f:a4:b8:c0:95:33:70:b1:76:49:8f:13:4f:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EC:7E:E5:3E:99:85:71:EE:E1:C3:2A:65:41:2C:0B:E4:94:BA:CE
X509v3 Authority Key Identifier:
keyid:89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3230303a3a2f34302d3430203d3e20323730363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6fc8:200::/40
Signature Algorithm: sha256WithRSAEncryption
46:5d:c0:f4:f3:53:cf:25:6e:f9:c3:14:42:88:d0:84:3e:e4:
0f:a1:c0:f8:6b:9d:6f:94:d5:8f:90:b7:a8:eb:c4:1c:8f:c8:
82:b6:19:4b:76:c0:8b:52:1e:d0:04:b1:d5:ed:61:aa:5d:dd:
92:7e:f1:9e:6c:d7:9d:0a:f0:12:7f:8e:f2:e2:85:34:7c:37:
92:67:39:f1:d1:bc:68:ad:ee:0f:b8:83:7f:36:48:4f:d1:d2:
d0:bf:69:21:ce:61:d9:c7:ca:91:99:85:18:85:70:d2:72:78:
eb:81:f4:ee:8f:d4:91:8a:73:a5:c0:91:48:5e:4f:df:a4:e2:
e6:ba:71:54:b2:0a:0b:9e:44:0b:cc:19:32:7c:1c:31:da:53:
e9:2a:90:5b:fe:b1:65:02:e4:22:b6:36:e9:98:eb:67:7b:2c:
2d:bd:1e:3c:bf:14:3a:f6:c1:e9:47:a6:22:f2:bb:14:3d:e5:
fc:47:66:eb:42:40:fb:98:a2:88:62:c3:9e:08:7f:df:9d:c1:
2c:50:76:35:f2:58:46:73:b8:6c:f8:df:89:9a:07:89:20:19:
72:54:5a:da:62:49:2a:86:58:08:b7:22:c6:59:4d:e0:9d:e3:
cf:45:ed:e3:c9:91:dc:49:3e:1c:08:50:89:02:05:ca:a7:04:
fa:61:e1:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEap+nRS1VBYY9OonDSR8LBsnqfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk2RDU2MUQ0NjZBNTY2MzdDQ0E0RTQ5QjQzRjVBQTk5
QTNDRjg0MDAeFw0yNDEwMDgxMDU1MjZaFw0yNTEwMDcxMTAwMjZaMDMxMTAvBgNV
BAMTKDE5RUM3RUU1M0U5OTg1NzFFRUUxQzMyQTY1NDEyQzBCRTQ5NEJBQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZJJjL7DKXlS4jTif2SlLHTbHj
/sfJQmykdjmakKEnmIi2IXAOmuhdm+q6AOq4/l64RnHxFEGPBRUqpPECAgi72Rzj
m8FCrTB+nr6BcbRNjXmzSyHDGs9U3n3khQel9U+yxQOM53suGV1J4Zvw9iEjURgZ
mHmxqlH3QJ2QuarvUZHy1eXXGGt2eWyI4cb0RHXDMeDUTPXD1/AUwHobCxLvtMgQ
N+02xKXN/4DF4qMHVOiCaNTNE6CvuWqGXHgJ78K+3o4julsTO0/1skwiheUHxcfD
/S62OEitFndqSecA/6U+MZQVXdjbktUJ//Bc3fwIP6S4wJUzcLF2SY8TT4PfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGex+5T6ZhXHu4cMqZUEsC+SUus4wHwYDVR0j
BBgwFoAUiW1WHUZqVmN8yk5JtD9aqZo8+EAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlhcTR1VFFLUXpMZHV5eHRSdXFucGZUMlF3QndOMmM1b2NMUXBZQnpp
NnYvMC84OTZENTYxRDQ2NkE1NjYzN0NDQTRFNDlCNDNGNUFBOTlBM0NGODQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5NkQ1NjFENDY2QTU2NjM3
Q0NBNEU0OUI0M0Y1QUE5OUEzQ0Y4NDAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZYXE0dVRRS1F6TGR1eXh0UnVxbnBmVDJRd0J3TjJjNW9jTFFwWUJ6aTZ2LzAv
MzIzODMwMzQzYTM2NjY2MzM4M2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM3MzAzNjM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBG/IAjANBgkqhkiG9w0BAQsFAAOC
AQEARl3A9PNTzyVu+cMUQojQhD7kD6HA+Gudb5TVj5C3qOvEHI/IgrYZS3bAi1Ie
0ASx1e1hql3dkn7xnmzXnQrwEn+O8uKFNHw3kmc58dG8aK3uD7iDfzZIT9HS0L9p
Ic5h2cfKkZmFGIVw0nJ464H07o/UkYpzpcCRSF5P36Ti5rpxVLIKC55EC8wZMnwc
MdpT6SqQW/6xZQLkIrY26ZjrZ3ssLb0ePL8UOvbB6UemIvK7FD3l/Edm60JA+5ii
iGLDngh/353BLFB2NfJYRnO4bPjfiZoHiSAZclRa2mJJKoZYCLcixllN4J3jz0Xt
48mR3Ek+HAhQiQIFyqcE+mHhbw==
-----END CERTIFICATE-----
Generated at Tue Oct 8 15:29:17 2024 by rpki-client on console.sobornost.net