Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3230312e32302e3136302e302f32302d3231203d3e203238363036.roa
File: 3230312e32302e3136302e302f32302d3231203d3e203238363036.roa (raw, json)
Hash identifier: VouFXSKZOw8B68z5ln1J9fAUGk/eMdfOFU/7yhRAscQ=
Subject key identifier: 96:4B:8C:16:45:84:2D:10:62:FA:32:1D:A9:02:3A:DD:71:E4:CF:1F
Certificate issuer: /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Certificate serial: 538554A72E06F2AF29A86AF79AD4A90C677B9D5A
Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3230312e32302e3136302e302f32302d3231203d3e203238363036.roa
Signing time: Thu 30 May 2024 15:20:24 +0000
ROA not before: Thu 30 May 2024 15:15:24 +0000
ROA not after: Thu 29 May 2025 15:20:24 +0000
asID: 28606
IP address blocks: 201.20.160.0/20 maxlen: 21
Validation: Failed, certificate revoked on Mon 03 Jun 2024 18:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:85:54:a7:2e:06:f2:af:29:a8:6a:f7:9a:d4:a9:0c:67:7b:9d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Validity
Not Before: May 30 15:15:24 2024 GMT
Not After : May 29 15:20:24 2025 GMT
Subject: CN=964B8C1645842D1062FA321DA9023ADD71E4CF1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:46:bd:d1:20:82:ea:aa:e8:94:d4:07:f7:
db:79:9e:d6:dd:25:b2:2a:7f:13:80:a7:b8:33:ff:
42:d7:11:19:b4:cf:fd:da:9f:0c:23:f0:03:93:5c:
3a:b0:98:91:7e:03:1d:77:a9:92:2a:41:25:cd:00:
f7:4d:dd:17:22:af:d0:f1:68:ad:6b:5c:83:56:9b:
d7:0c:0b:2e:1d:2f:c5:83:e9:65:e4:26:cc:43:6f:
47:64:af:1d:d5:d7:8e:1e:11:7e:6f:12:8f:28:9e:
7c:d9:12:b6:e5:51:a8:41:c0:66:0d:3f:47:08:27:
0e:9a:6c:ab:e5:49:91:c7:da:1c:2d:24:de:b3:43:
c1:50:88:32:50:a4:bc:a4:3e:ce:1c:03:be:2e:08:
e1:c6:d3:c8:a1:2b:c5:5e:70:fd:75:9f:50:c9:f5:
ea:c4:2b:22:b0:71:ba:86:ce:3e:ae:d6:bd:68:d1:
a2:76:50:4b:5d:0d:89:1a:0f:de:0e:cf:e7:78:11:
04:ac:d8:d4:31:40:88:b6:6e:ee:f4:bf:4c:85:6e:
75:ab:90:7f:13:4a:ae:9e:c4:17:8b:e0:89:84:1f:
77:07:f7:38:d0:5c:5f:e2:61:b5:d6:9b:53:c2:e7:
2a:8d:e3:a3:ac:3c:1e:20:9e:42:ca:e8:82:36:03:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:8C:16:45:84:2D:10:62:FA:32:1D:A9:02:3A:DD:71:E4:CF:1F
X509v3 Authority Key Identifier:
keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3230312e32302e3136302e302f32302d3231203d3e203238363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.20.160.0/20
Signature Algorithm: sha256WithRSAEncryption
bb:bd:2b:4b:5c:4e:92:ec:8f:28:67:d5:17:e3:92:4d:e1:d6:
c4:0c:da:c2:57:58:8c:a4:54:a4:b2:82:1f:33:84:64:80:c8:
09:bf:ba:6b:bd:a6:5f:8f:08:dc:dc:85:7d:51:5f:81:e0:1d:
aa:23:a4:52:5d:5f:d9:57:84:d6:9a:ef:d4:d6:81:df:f4:64:
5d:8e:ca:8d:97:21:20:ba:10:8a:92:37:12:1e:e3:ed:9e:e6:
16:6b:d0:10:d5:f9:07:29:00:a1:6f:03:98:48:5f:59:e1:db:
53:45:7b:a3:d7:5d:88:0f:54:47:7b:4b:c4:e7:d3:68:44:b1:
52:c4:af:8c:be:24:3b:1a:cb:1f:be:25:6d:c9:63:09:b6:66:
c1:db:a5:a9:37:61:c2:06:1c:ef:44:23:64:aa:69:ab:6d:a8:
f3:ed:8e:22:cb:48:9f:b4:1e:4d:ea:80:30:47:d2:fa:31:8c:
72:7d:0b:92:e6:55:ff:d9:62:3b:c0:24:ba:80:05:18:c7:e4:
0d:0c:46:9f:3d:61:d6:da:64:6f:82:87:8b:a4:d6:66:01:09:
a7:d2:fc:c7:56:fa:70:07:82:e0:cc:a4:6b:18:a5:05:98:07:
ca:14:fa:d1:79:51:d9:99:a4:8b:48:fc:d8:94:53:75:b1:2c:
f9:ca:05:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org