Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/01695794268D7D9A025FD7E9DFE19E3F00AACA35.cer
File: 01695794268D7D9A025FD7E9DFE19E3F00AACA35.cer (raw, json)
Hash identifier: HNOb0W5bhIUfFyJI+1wboNMNXAGIGNu/wqQzMT8mZWE=
Subject key identifier: 01:69:57:94:26:8D:7D:9A:02:5F:D7:E9:DF:E1:9E:3F:00:AA:CA:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 698ECABA859AD449F868A494C72CE89C4E42E2EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/1/01695794268D7D9A025FD7E9DFE19E3F00AACA35.mft
caRepository: rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 17:38:09 +0000
Certificate not after: Thu 03 Apr 2025 17:43:09 +0000
Subordinate resources: AS: 263985
IP: 143.0.20.0/22
IP: 168.227.152.0/22
IP: 2804:28dc::/32
Validation: Failed, certificate revoked on Wed 17 Apr 2024 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:8e:ca:ba:85:9a:d4:49:f8:68:a4:94:c7:2c:e8:9c:4e:42:e2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 17:38:09 2024 GMT
Not After : Apr 3 17:43:09 2025 GMT
Subject: CN=01695794268D7D9A025FD7E9DFE19E3F00AACA35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:2d:c9:38:d5:f5:69:7a:48:53:e4:2c:47:
be:f9:22:a8:9b:41:ca:d7:87:41:5c:ff:b0:80:8c:
62:db:43:50:a5:a4:db:24:b9:89:8c:c5:b0:f1:ad:
98:2c:a9:25:c5:34:3b:65:b4:4a:07:cb:9e:e3:28:
5f:10:56:c7:88:df:53:02:90:94:7b:cd:47:5d:36:
43:00:d7:88:c6:1e:6b:3d:7a:35:83:e7:d9:ce:a7:
ef:fc:d1:98:7c:be:7d:a9:38:54:e8:05:69:3f:b4:
f9:fc:91:cd:9e:f5:d6:95:d8:9b:06:d4:01:8b:7e:
42:67:27:c9:a1:2e:82:1d:47:ef:1f:aa:f6:a1:24:
e9:23:aa:89:a7:40:ef:32:5d:49:c1:cc:13:ef:ae:
a3:f6:e5:ff:ad:35:cf:ce:48:8d:b6:07:81:43:31:
c4:4d:11:d0:15:96:45:a9:57:2d:b4:8d:93:61:fe:
d6:45:52:8a:52:fd:c1:25:b6:12:37:e4:36:53:13:
87:eb:16:69:35:1e:83:68:d8:21:40:98:8c:ea:6e:
3b:ac:a1:64:44:91:ec:9b:e9:d2:e7:99:cb:06:fd:
f3:ec:91:19:3a:12:8b:14:d1:18:13:34:72:ee:8c:
dd:23:e3:2a:a6:92:ed:46:3e:cd:d0:61:9b:2e:50:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
01:69:57:94:26:8D:7D:9A:02:5F:D7:E9:DF:E1:9E:3F:00:AA:CA:35
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/1/01695794268D7D9A025FD7E9DFE19E3F00AACA35.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.20.0/22
168.227.152.0/22
IPv6:
2804:28dc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263985
Signature Algorithm: sha256WithRSAEncryption
bd:24:b2:c3:94:bb:b0:cd:c6:53:66:8f:1a:f3:b2:3e:2c:21:
be:d7:1d:98:1a:b3:21:75:05:4a:da:24:b4:ba:d0:3a:13:6d:
88:3a:cb:e7:2a:d4:c8:e2:97:1d:6a:d0:4d:20:8f:d0:e4:b3:
00:e0:6d:41:17:e4:34:bd:24:62:73:a3:32:e9:ae:75:ab:86:
4e:29:9a:d3:c7:36:c8:87:bf:84:6c:07:ac:bd:ed:61:c0:18:
44:85:de:33:ef:11:bf:ed:a2:55:d0:48:90:e7:ee:3e:18:cd:
a6:1a:a0:78:77:f6:80:71:f1:9f:cd:f1:00:ff:31:30:a8:90:
66:97:3f:4f:2e:57:17:3a:e7:a0:c8:c1:7e:6e:8c:41:87:78:
a5:df:4a:21:4e:3f:52:19:06:3c:ff:68:b7:20:cf:34:45:bf:
93:98:c0:aa:a6:20:06:bb:bd:e9:47:90:b2:89:07:50:c3:3c:
f3:7f:ce:22:d3:50:07:36:70:36:a8:60:f5:a6:0b:5b:69:11:
3a:11:01:e9:25:13:86:26:a7:0e:59:90:29:cc:10:71:8d:55:
56:25:17:e4:ce:3f:73:4c:a4:69:b4:e8:fd:71:b6:95:c1:0e:
79:60:b0:cb:b1:d7:81:1e:ed:37:98:ca:7e:d8:79:ee:6f:37:
02:b4:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org