Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3232203d3e20323634343034.roa
File: 3133312e3136312e3232382e302f32322d3232203d3e20323634343034.roa (raw, json)
Hash identifier: qwhVQ4+v3Tbzr5fM8XdYpvjpJReIQalorGQDAQ0pEzM=
Subject key identifier: 70:50:85:6C:41:14:7A:29:0C:38:AB:A8:7D:80:BF:A5:22:EA:9D:A8
Certificate issuer: /CN=9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6
Certificate serial: 3BC8C9BA4F106B8607EA165435E03FE18E646225
Authority key identifier: 9E:7F:85:E6:64:5B:79:3C:FE:0D:1D:98:7C:09:FB:13:7B:FB:F7:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3232203d3e20323634343034.roa
Signing time: Fri 20 Oct 2023 14:40:13 +0000
ROA not before: Fri 20 Oct 2023 14:35:13 +0000
ROA not after: Fri 18 Oct 2024 14:40:13 +0000
asID: 264404
IP address blocks: 131.161.228.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c8:c9:ba:4f:10:6b:86:07:ea:16:54:35:e0:3f:e1:8e:64:62:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6
Validity
Not Before: Oct 20 14:35:13 2023 GMT
Not After : Oct 18 14:40:13 2024 GMT
Subject: CN=7050856C41147A290C38ABA87D80BFA522EA9DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:af:46:8f:02:c1:09:a7:c2:43:7c:10:cd:
11:2e:c9:47:99:02:e6:ec:0c:ae:ba:99:82:62:86:
b3:94:c0:92:18:ae:44:db:2d:ba:a6:5c:ab:ed:b9:
66:a0:41:4e:c2:a4:c5:c7:9e:d8:2c:e5:c9:f0:fc:
80:66:61:0b:75:14:a6:09:e8:06:4b:4e:8c:9b:17:
c7:f2:db:d4:b0:a9:40:35:68:24:10:db:94:78:3b:
ec:2c:fb:ff:b2:f9:c2:dc:81:3f:4c:4a:ea:aa:89:
df:6c:36:ac:77:b6:5c:e6:df:e7:81:ba:65:a2:a8:
ab:a4:ba:9a:46:bc:62:e4:c7:06:dc:ad:a7:e7:70:
4b:7a:0f:ec:87:25:2c:ff:fb:0f:22:ff:41:21:c7:
2d:f9:aa:85:9e:58:7a:cd:f8:e5:26:72:21:43:4a:
07:5e:b7:09:47:f6:00:9b:c2:44:ec:17:af:2b:32:
09:a8:8b:96:be:29:95:a8:b5:d1:90:78:29:cb:20:
88:c9:e9:e8:38:55:94:02:ca:dc:8d:b0:54:a8:5e:
fc:8c:f6:52:9e:00:bc:6f:3c:90:6c:2f:5e:c8:e3:
21:81:11:b4:ed:76:32:27:65:7b:ff:d8:78:c7:7d:
82:ec:0b:7b:fc:e7:3c:41:f5:22:c5:49:e7:58:18:
09:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:50:85:6C:41:14:7A:29:0C:38:AB:A8:7D:80:BF:A5:22:EA:9D:A8
X509v3 Authority Key Identifier:
keyid:9E:7F:85:E6:64:5B:79:3C:FE:0D:1D:98:7C:09:FB:13:7B:FB:F7:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3232203d3e20323634343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.228.0/22
Signature Algorithm: sha256WithRSAEncryption
04:c9:61:6d:3b:4e:77:66:61:85:ff:46:89:e7:b2:77:9c:b8:
49:7e:ec:aa:aa:d8:ea:b8:49:3f:70:0b:2c:93:fd:ff:58:bc:
b7:4c:53:30:b9:b6:20:c4:08:43:ef:37:dc:f2:1f:ce:40:31:
a6:13:e2:94:94:c3:f5:bc:27:53:10:68:99:57:d1:41:ee:5d:
3f:a1:33:63:f0:e8:48:ba:fb:e0:8f:9b:30:5c:3e:3b:fb:cb:
86:68:fd:c3:bf:93:8e:ea:81:ef:8d:d6:bf:95:5f:6a:dc:45:
8b:d4:fe:38:9a:2c:43:76:4d:86:39:6d:f9:56:1f:f5:12:5f:
60:6a:6a:dc:1a:0b:e1:50:1e:b2:ad:8b:1c:b7:45:97:5d:9e:
26:9c:d5:88:cf:b5:25:60:ca:f9:1a:51:d1:a0:02:54:d0:3f:
3f:59:b8:0e:0a:a6:f3:8b:5b:dc:d5:f0:e9:ec:34:9a:5e:1d:
2c:6a:e9:d6:91:65:f6:fc:da:e1:7e:49:59:bc:c1:9e:a5:51:
c7:fd:e9:f4:11:2a:80:f6:d7:9e:3c:30:2a:4a:06:a8:e2:3c:
0e:c0:a6:ef:01:19:1b:a3:40:6a:5d:ff:7f:81:c0:68:34:9d:
5a:b0:2f:39:d7:97:9a:bb:c1:5a:3f:e1:ee:7f:29:d4:76:ad:
05:71:6e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 15:38:21 2023 by rpki-client on console-ams.rpki-client.org