Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/323830343a326635633a633030303a3a2f34382d3438203d3e20323634383836.roa
File: 323830343a326635633a633030303a3a2f34382d3438203d3e20323634383836.roa (raw, json)
Hash identifier: 2eGgCvGItK/PSrO0VFvh2f6NIV8TPMqh/fbo5Vv3nAQ=
Subject key identifier: B8:22:CF:66:6F:1E:3B:53:71:55:C1:6F:52:BC:ED:24:82:E7:96:1F
Certificate issuer: /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial: 2AFFA2DA7A978CA97B8378F05652422D1FD38041
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/323830343a326635633a633030303a3a2f34382d3438203d3e20323634383836.roa
Signing time: Mon 13 Jan 2025 14:15:21 +0000
ROA not before: Mon 13 Jan 2025 14:10:21 +0000
ROA not after: Mon 12 Jan 2026 14:15:21 +0000
asID: 264886
IP address blocks: 2804:2f5c:c000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Feb 2025 16:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ff:a2:da:7a:97:8c:a9:7b:83:78:f0:56:52:42:2d:1f:d3:80:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Validity
Not Before: Jan 13 14:10:21 2025 GMT
Not After : Jan 12 14:15:21 2026 GMT
Subject: CN=B822CF666F1E3B537155C16F52BCED2482E7961F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:06:99:e9:dc:18:c1:0b:af:0e:63:d5:68:
49:dd:45:e2:44:a7:1e:31:fa:60:a3:32:b4:44:80:
84:79:6b:7e:40:52:7a:d4:24:cd:6e:f4:d3:b6:1f:
13:e2:c9:25:1b:34:98:ea:f2:2d:b4:d0:52:64:e7:
dd:3b:5e:dc:6e:e8:6d:5b:de:aa:b5:f2:6f:f5:41:
e3:32:4f:1f:af:5f:47:b5:86:31:91:d9:6d:26:01:
50:e6:6a:5e:91:af:c9:bd:f7:59:78:8c:8e:5f:28:
8b:d6:39:7c:0e:65:17:02:be:4f:a8:32:a8:95:fe:
be:62:d5:70:2e:c9:9e:24:26:d7:e2:70:38:3c:8e:
34:2c:06:72:61:87:c0:c7:86:01:00:ed:79:fa:77:
12:26:d4:9e:1b:63:a6:76:31:7c:ce:00:9c:a9:77:
ff:8f:31:3c:20:05:29:d6:89:27:da:6b:b8:82:3b:
1f:dd:8c:30:db:7a:86:00:d4:dd:1f:c1:93:f4:1a:
61:53:e9:74:58:85:7a:3f:3f:1a:2a:b7:c4:df:ef:
b9:63:87:8b:16:a5:c8:0b:b1:68:a2:c8:1b:28:9c:
46:92:2d:90:a3:85:f3:45:d3:81:3f:f6:ca:d9:cf:
7e:0d:21:92:70:79:62:d4:eb:0a:17:c5:73:4b:45:
93:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:22:CF:66:6F:1E:3B:53:71:55:C1:6F:52:BC:ED:24:82:E7:96:1F
X509v3 Authority Key Identifier:
keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/323830343a326635633a633030303a3a2f34382d3438203d3e20323634383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2f5c:c000::/48
Signature Algorithm: sha256WithRSAEncryption
07:a8:f1:ce:c0:b3:b2:0c:68:49:81:bd:d6:51:f7:52:cb:3b:
4b:ab:16:8e:3f:8a:bd:7b:59:b0:75:1b:95:2f:9a:0d:8e:49:
ee:4a:da:c8:5d:b2:38:6d:3d:60:67:43:3f:76:0e:23:12:d0:
bc:6f:64:91:8a:4c:5b:af:b2:b6:68:84:64:66:6d:d0:cb:e0:
50:d2:1e:15:d2:7a:94:71:0d:da:e2:6a:5a:2c:ee:6f:11:b7:
8c:c0:12:97:46:32:32:64:d4:5f:ca:ee:0f:3a:37:02:2c:1f:
e5:3d:b7:1d:28:fe:48:6d:11:f1:f8:a7:50:ae:6b:8c:81:cb:
cd:6b:59:94:3d:fb:28:13:4b:5b:5a:2d:f4:ed:f1:8d:f0:0a:
02:d2:e4:77:97:f8:3c:85:3a:a5:bb:58:a0:63:af:bb:77:3f:
79:b1:fe:49:5c:97:a5:41:65:aa:e6:7d:2a:a5:be:e9:e7:b1:
04:ab:64:8d:8f:25:1a:93:24:16:7e:84:21:63:fa:4e:c2:7d:
02:0d:85:a1:95:6a:56:17:72:3f:fe:90:8f:9e:04:c9:ed:2b:
6e:0c:a9:5f:a5:e7:cd:02:6c:36:e1:1e:ad:90:5d:63:94:4e:
5f:1e:69:97:74:6e:b8:9f:f4:50:7f:00:0e:21:b7:ef:de:77:
13:6d:49:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 03:49:24 2025 by rpki-client on console.sobornost.net