Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1.cer
File: 0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1.cer (raw, json)
Hash identifier: icXyANOiYpIRkEPGijN+cU7rXZ57xrOtdqd85wZjRxs=
Subject key identifier: 0D:D8:5C:2F:8C:29:A3:DD:A5:88:38:B7:64:1F:E7:06:A0:AA:8D:B1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 346C7510E390129BE6C832DC6153F5583BBC6DF4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1.mft
caRepository: rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 23 Jul 2024 20:43:43 +0000
Certificate not after: Tue 22 Jul 2025 20:48:43 +0000
Subordinate resources: AS: 267091
IP: 45.229.20.0/22
IP: 2804:4800::/32
Validation: Failed, certificate revoked on Tue 30 Jul 2024 11:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:6c:75:10:e3:90:12:9b:e6:c8:32:dc:61:53:f5:58:3b:bc:6d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 23 20:43:43 2024 GMT
Not After : Jul 22 20:48:43 2025 GMT
Subject: CN=0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:4b:b3:5a:16:f1:60:b1:35:54:eb:1e:db:
58:c2:d9:29:0d:d7:8a:4f:bb:3d:63:9a:a1:6d:0e:
14:cb:31:00:23:6f:80:bb:d4:91:06:8c:96:23:f5:
d4:9a:87:92:c1:ef:f3:73:bf:f3:d6:fc:98:63:8c:
de:61:27:5d:2a:82:97:5f:b8:33:c6:84:76:1f:c5:
c1:51:9a:f3:01:0e:45:d2:e5:b9:5f:79:43:67:19:
4e:9e:4d:84:64:4d:9a:e4:bc:78:9d:83:b8:27:5e:
d8:40:6e:19:17:b0:06:65:39:f4:be:03:06:4a:e4:
63:ed:11:ee:c6:a8:fa:45:79:4a:1d:fd:f9:e1:f7:
ac:59:f8:a6:3b:3f:60:72:c1:31:bb:75:eb:45:e8:
a4:93:41:5e:9c:6c:41:ef:1d:4d:06:c8:84:63:92:
44:1a:62:b8:ea:84:ed:32:35:f1:8c:02:60:2c:0f:
38:08:0f:03:1b:79:ce:e2:e3:fd:44:75:9e:c6:9c:
9c:03:8b:08:af:4e:2d:09:91:a9:d6:78:b8:4d:2d:
5a:c5:37:89:ad:07:46:6c:33:b1:c7:75:1b:36:41:
4a:4f:74:70:36:10:bb:38:75:6e:5b:57:12:91:64:
7b:af:75:a1:58:a4:10:4e:65:90:63:13:91:a7:b1:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0D:D8:5C:2F:8C:29:A3:DD:A5:88:38:B7:64:1F:E7:06:A0:AA:8D:B1
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.20.0/22
IPv6:
2804:4800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267091
Signature Algorithm: sha256WithRSAEncryption
34:c7:9f:dd:9e:c6:48:78:3d:b6:c6:0e:55:40:c3:a9:99:ea:
0e:fb:7d:85:d2:08:c8:8c:9a:45:ed:a3:48:4a:e2:e6:6e:cb:
ae:aa:fb:e5:30:26:94:9e:69:e1:62:30:d1:59:09:0e:f4:d6:
5c:b0:dd:41:7f:56:57:0e:53:cf:f6:44:cc:8e:1a:1a:ac:a2:
2d:14:5b:26:51:a9:b4:70:20:90:f1:5d:25:dc:44:d5:fd:28:
98:fa:79:cb:45:75:eb:6a:7f:60:34:79:a5:c5:0c:18:48:83:
23:7c:5e:b4:4b:da:e1:4e:54:ca:c0:a2:c1:69:84:4a:54:00:
b5:ce:88:3b:c4:ba:2d:62:28:cf:99:92:ee:dd:a6:14:52:fa:
2a:d0:95:a4:33:c7:f1:63:b2:76:be:c3:e5:8d:18:c5:16:d7:
f3:a3:3a:5d:d9:a9:03:2f:aa:39:08:47:c7:ed:03:96:3d:d6:
4e:7f:9e:8a:21:bb:dc:1c:e4:41:16:26:ba:3b:00:2a:2a:51:
c8:75:ac:44:fb:e7:2c:42:f1:9a:af:f5:11:83:61:83:30:9f:
c4:b7:c3:ed:41:a4:62:a1:a8:d8:cf:5e:37:b8:38:78:4a:73:
c9:68:e2:45:e2:4a:2b:d3:e5:d3:4f:07:73:0f:ad:21:9d:62:
7c:25:79:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 14:42:35 2024 by rpki-client on console-ams.rpki-client.org