Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a623030303a3a2f33362d3336203d3e20323632313431.roa
File: 323830343a316530633a623030303a3a2f33362d3336203d3e20323632313431.roa (raw, json)
Hash identifier: SW2e7K8oIrl5wufhLJASvEoVR0k6W7bWxb4yg6vKa0Q=
Subject key identifier: 05:F9:A1:A1:25:49:E7:03:06:58:F5:52:6C:A8:F6:5E:F2:5B:5C:B1
Certificate issuer: /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial: 152C491E363F7A4A8209D2326424A0C9D5066E91
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a623030303a3a2f33362d3336203d3e20323632313431.roa
Signing time: Thu 02 Jan 2025 20:10:34 +0000
ROA not before: Thu 02 Jan 2025 20:05:34 +0000
ROA not after: Thu 01 Jan 2026 20:10:34 +0000
asID: 262141
IP address blocks: 2804:1e0c:b000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 02 Jan 2025 22:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2c:49:1e:36:3f:7a:4a:82:09:d2:32:64:24:a0:c9:d5:06:6e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Validity
Not Before: Jan 2 20:05:34 2025 GMT
Not After : Jan 1 20:10:34 2026 GMT
Subject: CN=05F9A1A12549E7030658F5526CA8F65EF25B5CB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:c9:b0:17:9d:2e:3d:b4:c7:55:5a:d2:05:
7c:88:3f:ca:e2:28:8e:c5:e8:70:63:20:77:01:64:
45:06:c9:d7:4b:0d:84:c7:0e:a4:9c:34:ee:c6:2b:
9e:0f:c6:d4:e0:dd:59:28:91:e4:1a:85:c2:e1:9c:
90:c6:b4:32:b9:9c:03:7e:d1:e5:73:36:61:a9:dd:
d3:3c:e1:02:a9:0a:a9:d5:03:ea:50:1d:2b:1c:12:
69:01:29:72:85:d2:a6:53:3a:d2:08:26:ba:10:9f:
9d:f3:6b:e5:b9:42:b6:38:67:53:23:ca:a4:2f:9b:
68:ed:9e:d1:a7:6a:4c:67:e9:3e:ca:52:8b:77:26:
4f:26:07:ad:d8:ee:b6:11:47:1e:06:49:6c:a2:36:
72:78:9c:ea:cf:86:a5:d7:ec:24:cf:31:4b:ce:b3:
d1:8f:b4:4d:da:77:a6:17:c1:1f:2a:ee:5f:09:42:
c9:16:43:e3:48:09:30:f9:78:45:6e:79:ce:6d:60:
3a:68:20:c1:0f:2e:01:40:2e:2b:4a:14:c8:5f:e8:
95:18:27:54:04:8f:81:d1:9f:cd:91:99:a5:86:bb:
9b:13:f1:70:4a:97:c8:d5:5a:b7:1c:89:60:f5:2e:
b4:6d:04:2f:d6:69:c8:5b:6c:d0:18:2a:02:8f:b6:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F9:A1:A1:25:49:E7:03:06:58:F5:52:6C:A8:F6:5E:F2:5B:5C:B1
X509v3 Authority Key Identifier:
keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a623030303a3a2f33362d3336203d3e20323632313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e0c:b000::/36
Signature Algorithm: sha256WithRSAEncryption
68:2e:59:d1:d5:c0:bf:34:ca:4f:c5:b7:f6:b5:c3:ea:54:7f:
f7:a8:44:dc:ab:9d:14:58:95:33:70:c8:50:c5:6b:d5:71:2f:
29:7f:3b:10:b0:a6:fc:1f:5b:de:17:5d:8e:a0:ad:1b:5a:24:
52:e7:97:03:9e:c9:00:86:8c:12:5c:43:66:ca:a8:3b:bf:d8:
d5:3e:6f:c5:09:24:c6:b0:af:85:19:55:79:5c:3c:03:c6:17:
67:eb:29:7a:91:b1:03:a9:3d:78:6b:46:93:28:fe:eb:8b:85:
60:94:d7:ab:00:49:e0:a8:a9:53:8c:07:ab:38:07:c4:9a:3f:
98:e6:76:0c:11:b1:5b:be:62:5f:2b:72:d2:59:07:84:c3:15:
0c:04:c6:1d:99:c2:cc:f9:eb:05:b8:06:32:32:dc:f3:37:26:
d4:58:0a:e0:de:2e:da:6d:70:03:bf:01:48:8e:c3:be:a4:45:
c8:f4:f2:9e:61:fc:2d:43:60:60:78:44:7a:a9:01:d3:bd:62:
2a:63:95:1e:35:c7:a6:be:e5:52:78:a5:0f:77:e5:72:bc:c1:
57:6b:3b:3b:10:3d:d6:26:0c:de:80:98:eb:09:e5:c2:f0:99:
be:a4:95:14:95:db:23:59:37:2a:31:e8:fa:ff:64:0e:e3:4e:
ee:2d:e2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 3 01:36:50 2025 by rpki-client on console.sobornost.net