Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/097A379238840A51C27C092F1F3A3CA34B8AD37B.cer
File: 097A379238840A51C27C092F1F3A3CA34B8AD37B.cer (raw, json)
Hash identifier: V2u4yz8jGE/7/7TrBOMc6UpeVx/X5udQOeqiL0NhQN0=
Subject key identifier: 09:7A:37:92:38:84:0A:51:C2:7C:09:2F:1F:3A:3C:A3:4B:8A:D3:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 34ED4824CC078C59D605FEE52FDCB5994A417F74
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/097A379238840A51C27C092F1F3A3CA34B8AD37B.mft
caRepository: rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 03 May 2024 18:07:31 +0000
Certificate not after: Fri 02 May 2025 18:12:31 +0000
Subordinate resources: AS: 264299
IP: 138.121.152.0/22
IP: 170.254.20.0/22
IP: 2804:25bc::/32
Validation: Failed, certificate revoked on Mon 03 Jun 2024 15:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ed:48:24:cc:07:8c:59:d6:05:fe:e5:2f:dc:b5:99:4a:41:7f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 3 18:07:31 2024 GMT
Not After : May 2 18:12:31 2025 GMT
Subject: CN=097A379238840A51C27C092F1F3A3CA34B8AD37B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5e:38:f2:43:cf:df:8b:3e:ca:86:46:96:cc:
39:61:9f:04:b1:0f:a3:e4:be:55:a1:ae:20:31:e3:
af:b5:ff:a0:88:57:1b:9e:93:0a:4a:28:d3:12:80:
ca:66:6d:0a:32:48:b9:5d:ed:11:b5:a7:48:d6:c9:
83:11:66:ca:4a:7a:1a:93:3c:fb:07:29:54:ec:6a:
84:e4:bd:69:80:14:be:80:77:97:30:25:8c:a1:c2:
ce:32:e5:5e:d0:ba:be:0f:8d:29:db:5a:08:c6:46:
a8:81:d3:69:02:46:d8:48:db:2b:3e:f4:2a:ee:2f:
8f:58:e8:1b:e0:c5:9d:31:56:ea:77:ad:ac:cc:01:
07:b9:28:59:db:9a:61:8b:8c:d5:64:b1:91:d1:d1:
29:18:2f:61:93:a3:22:1e:bd:66:ef:eb:1d:0f:90:
d2:f0:a0:a6:62:76:47:68:60:91:30:da:e3:8d:da:
08:34:ff:7a:41:a6:4a:89:1e:47:e6:d9:82:07:20:
a4:e4:0c:b2:84:2f:76:ea:e9:f8:bd:59:60:d2:d0:
33:51:7a:60:3f:e4:74:08:97:3c:1a:c0:10:bd:8b:
9e:c1:ac:fa:b0:d4:de:be:7f:4b:5b:14:60:f8:9a:
32:6e:19:e1:75:95:cf:35:d2:fe:7c:ce:17:94:a8:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
09:7A:37:92:38:84:0A:51:C2:7C:09:2F:1F:3A:3C:A3:4B:8A:D3:7B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/097A379238840A51C27C092F1F3A3CA34B8AD37B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.152.0/22
170.254.20.0/22
IPv6:
2804:25bc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264299
Signature Algorithm: sha256WithRSAEncryption
d0:ef:31:51:25:c6:b1:9e:12:30:35:a5:3f:d9:13:dd:38:65:
10:67:55:5e:d4:7d:b4:28:aa:a9:da:0e:ec:1c:f1:0e:12:21:
75:b2:73:7b:15:af:27:ae:ef:41:64:34:86:ba:36:ff:e1:5a:
b2:78:99:6c:3e:49:43:17:5c:47:de:77:7b:a2:e9:20:f0:71:
b6:49:60:0b:70:47:dd:9d:1d:ed:6c:6e:93:18:04:69:ad:ed:
66:93:ac:18:b3:d3:64:ac:2b:3f:79:5b:64:15:0f:d7:09:64:
60:8a:45:4b:00:37:ff:e5:77:9b:77:ac:90:84:36:bf:2f:75:
34:95:f8:a6:0f:c9:81:39:15:7b:01:13:94:be:ba:66:dd:b0:
5c:d0:8d:9d:ef:8d:c0:af:14:b9:95:ee:76:8a:4d:e2:bd:58:
52:47:dc:e1:05:09:aa:a8:f3:b7:d2:6f:5b:76:7b:b5:fd:f4:
0d:cb:0f:57:cb:53:43:3d:5a:b8:c6:e6:28:0b:96:ec:05:0f:
65:e6:81:aa:9b:60:c8:74:64:91:4b:65:7c:48:a8:63:9d:92:
98:63:59:c5:4d:9f:35:0e:b8:ab:70:00:2a:41:41:f2:74:69:
c5:82:2e:7c:30:33:66:20:fe:0a:77:27:1d:4f:82:09:a6:25:
ef:90:5a:61
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUNO1IJMwHjFnWBf7lL9y1mUpBf3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MDMxODA3MzFaFw0yNTA1MDIxODEyMzFaMDMxMTAvBgNV
BAMTKDA5N0EzNzkyMzg4NDBBNTFDMjdDMDkyRjFGM0EzQ0EzNEI4QUQzN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTXjjyQ8/fiz7KhkaWzDlhnwSx
D6PkvlWhriAx46+1/6CIVxuekwpKKNMSgMpmbQoySLld7RG1p0jWyYMRZspKehqT
PPsHKVTsaoTkvWmAFL6Ad5cwJYyhws4y5V7Qur4PjSnbWgjGRqiB02kCRthI2ys+
9CruL49Y6BvgxZ0xVup3razMAQe5KFnbmmGLjNVksZHR0SkYL2GToyIevWbv6x0P
kNLwoKZidkdoYJEw2uON2gg0/3pBpkqJHkfm2YIHIKTkDLKEL3bq6fi9WWDS0DNR
emA/5HQIlzwawBC9i57BrPqw1N6+f0tbFGD4mjJuGeF1lc810v58zheUqHtpAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJejeSOIQKUcJ8
CS8fOjyjS4rTezAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQm1X
YWE3YlZzQm1OcExlTXRDWEx2Y0F1TGNackh2SkhOcjFUWUdmZ01zUzMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jt
V2FhN2JWc0JtTnBMZU10Q1hMdmNBdUxjWnJIdkpITnIxVFlHZmdNc1MzLzEvMDk3
QTM3OTIzODg0MEE1MUMyN0MwOTJGMUYzQTNDQTM0QjhBRDM3Qi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCinmYAwQCqv4UMA0EAgACMAcDBQAoBCW8MBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQIazANBgkqhkiG9w0BAQsFAAOCAQEA0O8xUSXG
sZ4SMDWlP9kT3ThlEGdVXtR9tCiqqdoO7BzxDhIhdbJzexWvJ67vQWQ0hro2/+Fa
sniZbD5JQxdcR953e6LpIPBxtklgC3BH3Z0d7WxukxgEaa3tZpOsGLPTZKwrP3lb
ZBUP1wlkYIpFSwA3/+V3m3eskIQ2vy91NJX4pg/JgTkVewETlL66Zt2wXNCNne+N
wK8UuZXudopN4r1YUkfc4QUJqqjzt9JvW3Z7tf30DcsPV8tTQz1auMbmKAuW7AUP
ZeaBqptgyHRkkUtlfEioY52SmGNZxU2fNQ64q3AAKkFB8nRpxYIufDAzZiD+Cncn
HU+CCaYl75BaYQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org