Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0F2A8848DF9CD1B8D2D2409ABE4D0BAA1A72C6B4.cer
File: 0F2A8848DF9CD1B8D2D2409ABE4D0BAA1A72C6B4.cer (raw, json)
Hash identifier: 8sHc+98JkNf4Q48WXrEBV8STArAL+g/cQt/AZ/hp+ic=
Subject key identifier: 0F:2A:88:48:DF:9C:D1:B8:D2:D2:40:9A:BE:4D:0B:AA:1A:72:C6:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 63830DA9FCF1551BB45788D51C369A4F26653D44
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/0F2A8848DF9CD1B8D2D2409ABE4D0BAA1A72C6B4.mft
caRepository: rsync://rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 11 Jul 2024 01:46:34 +0000
Certificate not after: Thu 10 Jul 2025 01:51:34 +0000
Subordinate resources: AS: 267621
IP: 45.71.164.0/22
IP: 186.250.80.0/21
IP: 2804:4444::/32
Validation: Failed, certificate revoked on Tue 08 Oct 2024 13:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:83:0d:a9:fc:f1:55:1b:b4:57:88:d5:1c:36:9a:4f:26:65:3d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 11 01:46:34 2024 GMT
Not After : Jul 10 01:51:34 2025 GMT
Subject: CN=0F2A8848DF9CD1B8D2D2409ABE4D0BAA1A72C6B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:a3:4b:c8:ed:a6:09:d8:62:49:38:fb:71:
04:66:04:0a:cc:57:3f:b2:0b:66:3c:88:ff:18:e6:
0f:c3:2a:7f:50:15:f2:92:dc:c0:32:bc:fe:72:2c:
0f:26:80:90:34:75:cc:c3:33:f0:24:a7:50:6b:3d:
e4:38:d6:a8:e6:be:f2:8a:ee:cc:e3:4b:ea:4d:3e:
b1:ab:1d:bf:35:aa:6d:e6:06:f9:ee:f2:7e:74:96:
94:d2:ff:4d:7b:d0:eb:1f:52:94:0d:1d:b6:17:3f:
7f:2b:ab:78:c9:cb:18:d5:8f:51:f3:0c:63:12:f2:
0f:b4:b3:fa:fe:29:bd:ae:a8:ee:93:13:92:88:01:
04:2d:8a:6f:32:65:45:b5:f9:81:6f:88:2a:a4:3e:
96:78:80:29:6e:0c:26:5e:4e:27:4f:93:d4:49:f4:
b9:4d:5c:11:3f:2f:27:b7:c1:2a:b8:5a:d9:94:db:
74:62:e2:dd:c9:5d:29:a8:29:df:ba:f6:42:40:9a:
71:6d:13:50:6a:7e:7e:a9:fe:68:f3:ba:70:29:45:
ec:cd:79:b0:4c:0f:09:89:6e:14:20:c4:35:ee:bf:
b0:0b:17:2e:d6:3d:d9:2d:fe:53:92:cd:c3:48:bf:
4c:fd:bc:9c:73:86:7a:4b:5b:f6:41:9d:73:9b:30:
79:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0F:2A:88:48:DF:9C:D1:B8:D2:D2:40:9A:BE:4D:0B:AA:1A:72:C6:B4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/0F2A8848DF9CD1B8D2D2409ABE4D0BAA1A72C6B4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.164.0/22
186.250.80.0/21
IPv6:
2804:4444::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267621
Signature Algorithm: sha256WithRSAEncryption
0c:af:aa:b0:9a:4d:b3:2f:ea:af:40:0d:30:9d:b1:61:78:72:
d4:c4:c2:f4:88:41:3f:cc:c4:14:c8:42:4b:32:d8:0b:bf:b3:
21:d7:2b:cd:e0:da:39:24:8b:1c:d0:e0:12:a6:cf:72:00:fd:
08:07:01:40:a6:9b:00:a5:95:1f:c8:eb:84:ac:c4:ae:1e:34:
b1:a3:7b:d1:03:eb:38:46:03:08:4a:78:b9:b6:b8:23:c6:c0:
e8:61:43:e1:cd:35:82:7d:90:12:08:d6:09:cf:1b:60:66:ab:
3d:e3:6c:5c:35:49:67:a1:08:ed:35:a4:ba:54:02:ff:15:f7:
23:e2:de:37:80:29:83:c1:8a:ef:d3:1b:72:14:86:68:fd:fc:
30:d1:48:f9:2e:ad:3e:8a:87:56:23:16:ca:b3:ca:e4:01:b4:
32:62:b9:6d:6b:75:a1:10:6e:22:ad:5d:51:f4:e9:d9:5a:73:
8d:a5:70:ec:fc:55:37:91:52:0d:35:1e:fb:89:e0:0f:3d:3d:
89:22:ee:50:2d:4c:96:73:19:eb:4a:fa:b1:be:85:b3:a8:7a:
2f:a9:11:b5:f8:37:64:e6:0f:25:25:df:a3:09:50:15:e4:f5:
0c:14:84:d9:a7:26:ea:18:a7:8f:4e:46:4e:d5:5a:57:9e:98:
39:53:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 18:03:45 2024 by rpki-client on console-ams.rpki-client.org