Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer
File: 04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer (raw, json)
Hash identifier: GytZHoqT1O6NQfi8+wN+Eavh8YaQ67XipaY/4/lKLhc=
Subject key identifier: 04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 11EBC598CD1675BE7EBD0F21986BFB5C7957BBF2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.mft
caRepository: rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 29 Apr 2024 02:32:45 +0000
Certificate not after: Mon 28 Apr 2025 02:37:45 +0000
Subordinate resources: AS: 265943
IP: 131.196.160.0/22
IP: 2804:4030::/32
Validation: Failed, certificate revoked on Wed 06 Nov 2024 14:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:eb:c5:98:cd:16:75:be:7e:bd:0f:21:98:6b:fb:5c:79:57:bb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 29 02:32:45 2024 GMT
Not After : Apr 28 02:37:45 2025 GMT
Subject: CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:7e:46:2c:de:99:b3:2b:a5:30:53:65:6f:
19:38:12:95:ec:5e:cc:46:ea:be:fe:b0:32:71:f6:
44:b1:18:21:04:80:ef:a5:37:8b:a2:4f:68:08:b2:
d7:66:dc:6c:34:d0:1c:e2:dc:32:88:1b:c2:73:31:
9c:44:40:43:47:ff:16:f8:eb:fe:61:81:f6:06:0b:
49:f2:1d:51:cf:fb:df:c4:37:e9:6b:4b:5a:5c:bd:
9a:e6:b6:00:e4:84:cd:8e:aa:24:55:f5:0f:cf:de:
c1:cd:27:50:d1:a8:e1:14:69:ff:b9:20:e5:f8:e3:
1f:28:a8:ac:d4:e2:a1:dc:de:e2:6b:33:8f:d3:d2:
6a:9e:f9:dd:92:2d:db:05:5a:1a:a4:9e:7c:f4:98:
70:4e:e2:82:45:a8:a6:36:ef:74:4e:ad:39:41:c8:
0e:39:91:c5:ed:ec:58:5c:24:8a:e6:df:ff:af:5b:
74:8b:15:69:4e:ea:4d:26:11:93:1c:7a:63:5d:50:
c4:fb:ce:91:e3:80:f3:3c:68:5a:17:5f:0f:fc:04:
61:e4:22:c6:86:2a:ea:fd:7c:e1:ea:35:9a:e8:19:
82:75:7d:39:43:2b:e5:72:83:da:cf:4f:25:73:0a:
53:c4:2f:06:9a:ab:5e:e8:32:fd:ca:fd:1b:d5:bf:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.160.0/22
IPv6:
2804:4030::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265943
Signature Algorithm: sha256WithRSAEncryption
d4:48:9d:47:2c:a9:1d:a3:f7:b1:ed:00:20:72:87:3a:41:4e:
e9:12:32:22:e5:ee:f3:55:55:5b:bd:ca:b0:c2:e1:a2:3a:33:
e2:e5:2f:27:8e:09:0a:35:e2:b6:ee:e7:be:71:e9:07:23:ed:
42:eb:b5:49:16:23:58:7e:46:05:1a:c9:58:e5:f2:09:e0:9f:
bc:cb:a1:44:b2:1c:e1:8a:40:47:c1:46:ce:f5:d3:62:c1:78:
24:43:33:7b:62:86:8e:d8:99:2c:70:e3:ce:91:bc:fa:6c:9a:
ba:29:6d:6e:d0:1f:e3:e5:9c:d6:ad:bf:2c:72:d4:cb:59:ae:
68:20:05:b9:9e:76:6e:6c:59:8c:66:c2:fd:28:f8:b3:94:5f:
2b:23:09:79:05:cb:db:b4:17:28:8d:3d:bb:3b:d9:9b:4a:b0:
d9:df:60:0f:d9:13:b9:e3:37:01:94:c5:4b:39:e1:f0:dd:15:
82:13:f8:32:1f:96:27:3b:61:8e:09:11:df:0d:0e:07:a5:02:
d2:aa:42:9c:23:94:66:d8:f4:08:5e:a8:93:f2:1e:d4:3f:bc:
11:08:81:30:2e:f5:42:2f:ab:e4:06:24:47:60:42:b9:56:3a:
89:4d:5c:50:f8:67:fd:84:1e:bb:00:6e:e0:51:3a:e2:e7:be:
27:cc:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 19:54:06 2024 by rpki-client on console-ams.rpki-client.org