Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.cer
File: 0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.cer (raw, json)
Hash identifier: 4NCDz0icSzNDNH2F+sXA/LZey6V27w8tGn/lzk0L7Fc=
Subject key identifier: 04:43:FC:FC:D1:3B:EA:6D:91:E1:CD:71:54:46:13:BD:4E:2A:69:F5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 08A631DD85A6C647910269A51698A36D955DF280
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.mft
caRepository: rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 19 Aug 2024 14:44:11 +0000
Certificate not after: Mon 18 Aug 2025 14:49:11 +0000
Subordinate resources: AS: 263931
IP: 138.219.136.0/22
IP: 2804:27f4::/32
Validation: Failed, certificate revoked on Wed 11 Sep 2024 07:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a6:31:dd:85:a6:c6:47:91:02:69:a5:16:98:a3:6d:95:5d:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 19 14:44:11 2024 GMT
Not After : Aug 18 14:49:11 2025 GMT
Subject: CN=0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:25:f0:66:bc:63:8e:0e:eb:03:24:d6:c9:
07:78:75:dc:69:86:95:06:54:c3:74:5b:29:31:69:
97:f0:14:75:26:f6:5c:2d:05:0b:80:d9:b7:5e:c7:
d2:da:61:34:a4:bd:85:cd:26:d7:6d:26:37:93:1c:
36:b0:cf:27:d6:60:25:2b:1f:f3:2b:da:60:7c:3e:
b3:d9:c9:5d:f3:c3:7d:9a:7f:0a:bf:71:11:15:c3:
39:74:58:0a:de:bc:15:54:23:73:13:a0:39:a7:0d:
aa:7f:78:58:82:3f:6c:08:46:f5:50:a0:b6:3b:1e:
4b:da:98:d9:3c:c7:91:e5:33:58:43:b1:02:07:09:
56:4a:6c:5e:66:6f:8b:22:99:33:91:79:6a:ea:57:
27:a7:44:89:da:41:49:f4:72:65:83:e0:ed:2a:c7:
73:3c:c8:2f:6f:6d:0e:b3:46:ff:36:38:7c:7f:66:
5f:1b:63:e2:78:c5:93:ec:2d:11:a5:fc:4f:3a:03:
24:29:c4:3a:25:89:53:70:c7:03:46:08:d1:41:10:
75:ac:2e:83:32:40:78:a4:79:6f:c5:51:92:aa:b0:
bc:d0:97:7b:f4:e3:e1:56:f7:5a:82:8a:d9:35:65:
6b:e2:85:31:eb:2c:5f:70:11:46:75:37:c6:67:fd:
d0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
04:43:FC:FC:D1:3B:EA:6D:91:E1:CD:71:54:46:13:BD:4E:2A:69:F5
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.136.0/22
IPv6:
2804:27f4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263931
Signature Algorithm: sha256WithRSAEncryption
02:ef:54:f1:f1:25:4c:e6:27:df:b6:fd:c4:d3:98:0e:46:75:
b1:a7:18:32:d6:72:1a:90:23:bb:6c:b0:de:e9:c3:54:59:a3:
3c:2e:f2:6f:66:37:3c:2b:72:42:73:20:f2:fd:37:e4:a6:38:
0e:57:0f:b6:71:d1:d4:ad:e2:89:b8:10:17:67:2e:79:28:3b:
ee:b9:37:83:6f:f9:34:a0:5f:8f:95:dc:e1:f6:8c:ba:03:d6:
47:5f:6a:32:4d:2b:f8:1a:0c:36:06:5a:80:3c:17:e8:d2:32:
aa:85:9d:77:7d:d8:39:39:54:d6:dc:57:57:90:be:72:a0:85:
f4:3f:3d:f2:00:2e:89:23:c0:06:fd:20:b0:e0:b6:d0:c5:e0:
f7:9f:87:59:71:a0:f4:23:60:45:95:77:b4:7b:e6:6a:14:4d:
f2:c5:90:15:f6:59:3f:86:41:15:20:83:49:ef:8d:10:7f:8e:
80:5e:72:f5:44:4e:1d:db:55:a3:20:d2:35:10:b3:45:69:a7:
bf:21:35:af:4d:63:9f:ed:a6:8d:06:fa:61:1f:b0:e1:c0:95:
a9:67:d5:bb:1a:7d:41:9f:8b:5e:f1:41:e5:c8:03:7f:0d:d7:
83:9b:f0:06:92:d1:f7:af:b9:54:a2:d4:33:c9:28:7b:71:c6:
3d:23:a9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 10:41:58 2024 by rpki-client on console-ams.rpki-client.org