Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/03F423B5AD115B97222F90816CAADB8F732401CD.cer
File: 03F423B5AD115B97222F90816CAADB8F732401CD.cer (raw, json)
Hash identifier: DO5icbrg93DsaJvUDq1s0+lgO481DwDZvAFDy+a2bSw=
Subject key identifier: 03:F4:23:B5:AD:11:5B:97:22:2F:90:81:6C:AA:DB:8F:73:24:01:CD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1BEBEE8C2A6CF81EAAA9A74D7167197ED548F306
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/03F423B5AD115B97222F90816CAADB8F732401CD.mft
caRepository: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 15 Apr 2024 17:26:37 +0000
Certificate not after: Mon 14 Apr 2025 17:31:37 +0000
Subordinate resources: AS: 263913
IP: 138.204.240.0/22
IP: 170.231.216.0/22
IP: 2804:279c::/32
Validation: Failed, certificate revoked on Thu 07 Nov 2024 18:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:eb:ee:8c:2a:6c:f8:1e:aa:a9:a7:4d:71:67:19:7e:d5:48:f3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 15 17:26:37 2024 GMT
Not After : Apr 14 17:31:37 2025 GMT
Subject: CN=03F423B5AD115B97222F90816CAADB8F732401CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:63:40:fa:0d:17:31:f3:5d:9b:bf:59:da:
b5:93:9f:88:f3:00:bd:64:48:5a:27:07:20:fa:4a:
a1:e8:26:94:e2:a8:8d:63:cf:ec:68:bf:d3:6f:fd:
b2:ce:64:7e:f9:94:61:bc:7b:97:8c:46:59:bf:37:
27:47:74:d3:01:44:a7:19:73:c7:a6:a1:21:d7:2a:
53:85:0a:82:fd:8c:55:50:33:9c:70:f1:88:69:a2:
de:45:80:54:62:b2:8a:20:b1:ac:38:98:b3:23:d7:
94:eb:89:47:b9:65:d0:bd:57:a7:61:32:97:25:dd:
fa:3e:d1:c9:49:51:69:67:df:0d:e0:7e:b1:57:df:
b1:e9:66:be:13:91:df:1f:e1:e3:48:3d:6c:9b:19:
62:d0:bc:b8:34:94:1a:da:1d:4d:2f:af:af:2b:60:
a5:81:e9:6c:56:60:af:62:4c:45:a0:8a:fe:d8:39:
8a:bf:f5:d1:a0:53:33:52:0e:68:dd:b5:a5:54:4c:
23:53:1f:f1:19:d6:b8:2b:e0:3c:e6:53:5e:7c:33:
91:38:30:35:44:ed:90:26:96:86:a9:10:18:37:29:
03:a1:21:04:0a:ac:f0:32:bc:cf:72:dc:25:42:ec:
43:4e:6e:f1:cf:45:fb:20:38:da:ec:21:c7:c1:1a:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
03:F4:23:B5:AD:11:5B:97:22:2F:90:81:6C:AA:DB:8F:73:24:01:CD
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/03F423B5AD115B97222F90816CAADB8F732401CD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.240.0/22
170.231.216.0/22
IPv6:
2804:279c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263913
Signature Algorithm: sha256WithRSAEncryption
c2:e8:5b:ba:a4:74:87:ed:ad:ae:05:9b:66:f7:d6:15:ce:45:
ce:cd:f4:60:76:d1:10:cb:88:c9:55:9d:7a:8c:e6:2c:d0:60:
81:82:f7:14:a4:49:ff:4e:9c:87:2e:bb:ba:74:7b:70:51:89:
ec:dc:e3:9b:9c:c9:a5:93:8f:97:20:a6:41:ca:49:75:1a:5c:
20:7f:29:c8:d5:7f:0e:b6:b6:08:d5:36:db:fc:75:f2:7f:77:
c7:ec:12:82:46:fa:23:03:ba:f1:8d:e8:8d:db:08:72:18:3d:
b1:9e:40:16:3c:ba:73:00:76:c0:57:c4:ac:f1:76:b6:ad:7d:
df:90:2c:50:5a:e1:c3:fd:4f:54:99:70:67:df:a2:04:62:9e:
d9:70:0d:01:4c:9b:ba:03:09:35:9b:aa:c1:86:b0:f7:f1:a8:
20:36:42:d7:dc:1c:b3:91:ac:1f:72:8c:d9:aa:c8:a5:29:29:
ff:72:d0:e1:1b:6e:d3:1e:c0:98:f3:a2:46:11:86:4b:9e:07:
3c:50:ef:9c:c6:bc:32:b2:05:ef:59:5e:60:e2:5b:89:35:32:
f9:0c:60:fc:d7:1d:c4:5f:c9:ee:56:92:67:87:26:a2:28:49:
1e:52:3d:d2:8f:17:74:15:ba:45:a3:e2:4d:f7:5b:10:de:53:
9f:b6:ac:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 21:39:20 2024 by rpki-client on console-ams.rpki-client.org