Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21.cer
File: 0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21.cer (raw, json)
Hash identifier: xlGDGQ/VW/bUDcXWsLA5KTYsCwvmOohldjdcRs09gpU=
Subject key identifier: 0B:66:FC:EA:6E:34:B7:BC:A3:91:EA:15:59:5B:6C:DF:CE:89:FF:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7AF65203ACA22771591D61550181730806EEDBFD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21.mft
caRepository: rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 22 Jul 2024 14:07:54 +0000
Certificate not after: Mon 21 Jul 2025 14:12:54 +0000
Subordinate resources: AS: 264316
IP: 138.122.40.0/22
IP: 168.121.216.0/22
IP: 2804:25fc::/32
Validation: Failed, certificate revoked on Mon 21 Oct 2024 01:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f6:52:03:ac:a2:27:71:59:1d:61:55:01:81:73:08:06:ee:db:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 22 14:07:54 2024 GMT
Not After : Jul 21 14:12:54 2025 GMT
Subject: CN=0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:2c:12:34:54:1e:7a:19:46:b6:1e:df:6b:
8f:d7:de:67:e0:83:d2:df:41:4a:b4:0b:17:3e:f6:
4b:5c:c7:f6:1b:81:65:c2:d4:55:d2:64:89:13:95:
7d:20:47:6c:9e:58:b2:5c:66:dd:16:56:1b:74:72:
76:d9:dd:01:00:91:c3:5b:7d:de:e1:af:de:47:92:
db:71:25:95:d2:a9:30:9d:79:70:09:8f:21:5f:a7:
db:f0:15:80:92:b6:d7:b4:83:6f:13:d7:bf:b3:25:
8c:f5:5b:78:84:ef:80:c1:f9:c3:1f:8c:e4:bb:21:
c1:41:2c:5a:d4:d3:84:d0:3b:5b:3e:da:07:42:a2:
bb:8d:3b:03:d0:03:2f:34:61:bd:30:18:16:91:65:
99:db:67:fb:b9:52:14:b9:d0:55:06:3e:11:05:1b:
7e:76:66:4e:16:72:3e:61:e2:c5:e8:7d:a4:a3:fa:
23:d2:19:ce:56:1c:d2:fa:57:c5:ce:c2:fc:01:bd:
53:ac:b2:3c:d1:aa:14:ad:f2:c6:2a:d5:55:96:80:
d2:e6:b6:52:21:6c:02:7b:43:1e:5e:fa:9c:43:a6:
57:bb:14:07:76:2e:25:75:9d:5d:47:d6:43:15:c3:
21:f9:1b:96:a5:bb:d1:11:50:85:e3:7f:d5:a7:6d:
ea:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0B:66:FC:EA:6E:34:B7:BC:A3:91:EA:15:59:5B:6C:DF:CE:89:FF:21
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.40.0/22
168.121.216.0/22
IPv6:
2804:25fc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264316
Signature Algorithm: sha256WithRSAEncryption
6a:93:aa:c4:97:a2:16:47:a9:ba:5a:e4:20:15:5c:67:91:42:
22:25:14:f0:f4:81:8e:60:d3:1f:6d:36:3a:20:32:2f:d0:2f:
30:05:d7:81:82:3d:88:04:4e:f2:9a:e3:98:62:1d:cf:8a:4e:
0e:c5:6d:e6:10:9a:0b:92:8f:20:b6:2c:6f:e4:3d:bc:4a:3d:
79:1d:9d:76:01:ea:b6:0d:3d:99:33:c4:79:45:0f:72:38:70:
85:99:6b:63:cf:70:48:0c:7a:0a:13:b9:f1:d0:4d:28:43:58:
69:7a:ca:fa:a8:be:66:43:03:1c:16:b0:4d:41:cf:07:6c:30:
c3:ad:a8:f4:54:0e:46:f2:36:e6:cf:5e:71:2b:1b:e1:c0:20:
7f:2c:47:ee:be:a9:bf:df:79:96:d4:61:ce:22:07:a7:00:88:
1b:d8:e1:d9:3d:61:1a:a8:2e:d1:55:61:e4:2f:50:46:8f:40:
67:69:ab:fe:fb:12:56:92:84:5e:8e:19:d9:71:cd:b1:bf:b0:
67:3d:95:72:cc:99:28:28:b6:a9:f2:57:4e:5a:79:fa:ad:d5:
6a:63:ca:5a:e3:6e:ef:92:97:c3:34:a4:91:66:ac:41:7f:28:
2c:8c:27:d9:d9:da:bd:b0:de:e2:06:3b:93:26:05:41:28:30:
6b:04:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 03:36:13 2024 by rpki-client on console-fra.rpki-client.org