Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D3A665A6A6DCA718FAB45B8CF6A7EDB38D825EF.cer
File: 0D3A665A6A6DCA718FAB45B8CF6A7EDB38D825EF.cer (raw, json)
Hash identifier: IZndmQRUCn+JcqslOj/z2OKhQtLQuyzTiQaqiE2GrwI=
Subject key identifier: 0D:3A:66:5A:6A:6D:CA:71:8F:AB:45:B8:CF:6A:7E:DB:38:D8:25:EF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1131B54722C85E5CAEDB53314311CF6B3689B71D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/1/0D3A665A6A6DCA718FAB45B8CF6A7EDB38D825EF.mft
caRepository: rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:25:59 +0000
Certificate not after: Wed 02 Apr 2025 18:30:59 +0000
Subordinate resources: AS: 270824
IP: 190.115.196.0/22
IP: 2804:71fc::/32
Validation: Failed, certificate revoked on Tue 16 Jul 2024 23:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:31:b5:47:22:c8:5e:5c:ae:db:53:31:43:11:cf:6b:36:89:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:25:59 2024 GMT
Not After : Apr 2 18:30:59 2025 GMT
Subject: CN=0D3A665A6A6DCA718FAB45B8CF6A7EDB38D825EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:e4:34:8c:6b:8a:b2:a0:a4:44:c5:4d:73:
15:75:4f:fc:63:7c:f3:b5:d1:ed:aa:99:d8:0b:33:
20:b7:dc:85:b3:ed:82:57:b6:2a:1f:7c:85:c7:10:
3e:67:31:9f:a3:9e:52:58:b5:de:83:3e:ce:08:c6:
00:36:4c:1f:47:eb:31:bb:9e:55:3e:43:d6:64:04:
60:8e:2d:5d:f9:84:63:4e:29:d4:cb:5a:27:a5:f5:
95:9e:bd:01:5c:7b:0b:29:cb:78:d7:0c:49:c9:3d:
12:f6:14:2c:72:91:27:b4:4b:94:6c:38:5c:bd:fd:
df:c9:72:ea:c4:71:ef:e6:56:2e:d5:e1:d5:5d:2f:
b9:55:01:aa:b9:38:64:e3:e8:92:19:ad:0b:33:66:
9b:b8:34:86:80:2f:87:6e:ec:15:35:ef:90:33:2f:
4c:40:c5:fd:e2:54:0c:3c:6e:3a:fc:aa:8f:cb:40:
5b:c3:86:08:72:d2:12:a1:0d:26:b5:9b:93:4c:ec:
c9:21:5c:3b:ef:61:e4:89:0a:51:2f:17:66:d2:9b:
4b:0e:6a:bc:b6:de:f5:d4:7f:ff:4f:47:44:6a:75:
79:0b:a5:4f:cc:9e:21:65:70:8c:56:fc:5d:38:41:
5c:68:ae:cd:bf:ed:02:1f:59:39:86:15:75:3d:37:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0D:3A:66:5A:6A:6D:CA:71:8F:AB:45:B8:CF:6A:7E:DB:38:D8:25:EF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/1/0D3A665A6A6DCA718FAB45B8CF6A7EDB38D825EF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.115.196.0/22
IPv6:
2804:71fc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270824
Signature Algorithm: sha256WithRSAEncryption
31:f7:92:3a:8d:09:84:85:f5:9e:5a:c9:14:80:14:ba:9e:b8:
3f:45:48:6b:ad:64:a3:46:f6:7c:0e:cb:e9:d1:27:ff:ad:5b:
c7:d3:49:f2:0c:31:8a:88:15:fa:2b:ff:1d:70:40:6b:a5:f8:
b7:d5:28:c3:b9:24:f2:dc:17:45:33:12:8c:0e:64:f2:a1:4b:
42:8b:c9:a1:14:4c:74:71:28:2b:05:78:17:8b:68:66:82:80:
27:91:87:65:f1:7b:1a:ec:db:c3:d5:32:27:7d:6a:b5:d2:f9:
f0:62:29:24:89:3c:67:1b:bc:a6:dc:dc:e1:1f:62:0a:ac:3c:
9b:92:56:e6:04:80:94:5c:c4:32:8b:31:ff:3f:b3:71:cd:56:
df:e4:00:b2:3c:5a:26:16:c6:84:21:75:50:0d:24:18:c4:9f:
66:c9:20:d2:93:be:a1:05:87:f7:de:a5:11:e8:c6:c7:c6:26:
65:fe:62:bc:27:37:d9:6e:80:a4:2e:34:ac:a8:db:6a:c7:2f:
44:68:46:7e:7f:04:fd:a6:94:42:4d:2d:01:ec:02:ae:f4:47:
d2:76:49:9f:ba:2e:42:30:bc:d2:12:b1:12:c6:e5:b7:1c:f1:
f6:1b:07:bf:c1:96:c2:df:e4:62:46:20:f4:bb:7d:32:65:f1:
bb:02:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 01:58:22 2024 by rpki-client on console-ams.rpki-client.org