Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.cer
File: 0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.cer (raw, json)
Hash identifier: 2c9PMVQudZA4Q/2beA06AZCzTRwcGC4zK9lSTlW1j3c=
Subject key identifier: 0C:4E:4F:4C:BB:3A:F7:3B:B2:EF:D9:65:2E:86:7C:8A:97:82:83:2E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 16599580827FD53692A39100E6A3FA768C2C32B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.mft
caRepository: rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 10 Oct 2024 08:35:45 +0000
Certificate not after: Thu 09 Oct 2025 08:40:45 +0000
Subordinate resources: AS: 61618
IP: 170.81.100.0/22
IP: 2804:376c::/32
Validation: Failed, certificate revoked on Thu 17 Oct 2024 15:34:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:59:95:80:82:7f:d5:36:92:a3:91:00:e6:a3:fa:76:8c:2c:32:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 10 08:35:45 2024 GMT
Not After : Oct 9 08:40:45 2025 GMT
Subject: CN=0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:a4:92:f2:fc:f2:e7:b3:e7:b4:95:63:e2:
14:23:39:9b:07:44:08:1d:74:5f:bc:f2:9a:70:15:
25:6a:88:79:ca:e6:75:eb:41:c7:bf:23:8f:66:cc:
1d:14:4d:67:1f:61:5e:74:9e:6f:98:0f:68:81:e0:
57:67:ea:a7:9f:73:76:b9:68:e9:c6:1e:74:04:a0:
bf:5b:14:db:9c:5a:a2:49:39:93:0d:3e:69:a9:a1:
a4:e1:67:d6:e0:b8:4d:42:7e:14:01:fe:7d:4f:b9:
ff:d7:12:25:a9:eb:ad:42:0a:19:45:8c:a1:59:04:
47:eb:02:70:2d:68:f2:64:ba:c9:33:98:51:22:af:
d9:98:2b:a5:b7:73:fa:a5:29:17:d9:be:fe:0d:77:
e6:98:6d:6b:37:28:f1:af:6f:6d:93:35:30:bd:64:
7c:46:73:73:07:ca:70:b6:0b:f0:bc:61:25:c5:b5:
7f:a3:7e:2e:d8:d3:3c:bc:73:92:c8:e9:05:2e:b7:
5a:d0:ad:64:ad:b7:65:08:9c:39:4a:2c:f2:21:83:
78:15:dc:01:3e:65:e6:c3:85:f8:ec:f7:7f:fc:ce:
2f:38:8b:51:e2:77:4f:e7:9d:e9:9e:fb:c8:1b:f3:
2d:d8:26:83:46:28:56:b9:22:0b:af:72:bd:ed:5c:
b9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0C:4E:4F:4C:BB:3A:F7:3B:B2:EF:D9:65:2E:86:7C:8A:97:82:83:2E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.100.0/22
IPv6:
2804:376c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61618
Signature Algorithm: sha256WithRSAEncryption
08:2f:6c:b2:c1:c9:89:6f:62:aa:ac:77:3d:92:63:60:f2:9a:
3e:ae:72:c2:74:27:a0:95:fe:b4:dc:8f:c6:c9:8d:de:fe:6c:
36:57:14:73:29:2f:0b:fb:42:f0:3f:41:9b:d9:9e:6c:74:d9:
c6:07:b4:00:82:25:00:6e:6d:ca:24:44:b9:9d:13:8d:8c:79:
ab:f0:54:c2:28:e8:d1:9c:77:25:8b:d3:af:b0:2a:93:95:3d:
21:04:3f:40:6c:71:35:58:c4:91:43:1a:a8:06:38:1b:27:42:
12:e2:b7:7f:e4:3a:4f:00:67:57:3c:6c:c9:a6:4e:f2:21:3f:
53:21:03:dd:56:03:d9:65:95:19:f3:ef:07:21:c2:3d:6e:84:
23:12:39:3f:73:26:4e:95:f5:5a:fc:05:c8:56:03:36:1e:1b:
94:1e:ea:1f:ed:40:5d:05:5b:59:10:38:3e:a3:53:30:46:3c:
10:7f:fe:1c:e5:3d:a6:36:51:43:8d:e5:26:b7:2c:d8:f4:57:
8f:fd:50:fb:94:63:e2:83:94:b2:aa:e9:67:eb:ab:4f:32:06:
3f:3d:1f:34:03:e6:1c:eb:2e:4a:04:91:55:b2:26:06:8c:67:
a3:83:5c:cd:62:87:82:f7:e3:80:67:b1:9c:cf:0b:a2:c2:6e:
39:11:d5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 17:19:20 2024 by rpki-client on console-fra.rpki-client.org