Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer
File: 10CB5B9501E835ABE33452149F17754A51CE36A4.cer (raw, json)
Hash identifier: KHBsL8e9nROo0i19JvXa+YlSEbrjsxnfj4vL0xJx42U=
Subject key identifier: 10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5EDF703AB3292C8B2DBE5D3F05F599D3CCF4013B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.mft
caRepository: rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 09 Sep 2024 17:00:07 +0000
Certificate not after: Mon 08 Sep 2025 17:05:07 +0000
Subordinate resources: AS: 61776
IP: 143.208.136.0/22
IP: 200.196.136.0/22
IP: 2804:192c::/32
Validation: Failed, certificate revoked on Sat 14 Sep 2024 17:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:df:70:3a:b3:29:2c:8b:2d:be:5d:3f:05:f5:99:d3:cc:f4:01:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 9 17:00:07 2024 GMT
Not After : Sep 8 17:05:07 2025 GMT
Subject: CN=10CB5B9501E835ABE33452149F17754A51CE36A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:2d:ee:fe:f5:5a:40:d6:b8:cd:59:f5:da:
9c:ee:ed:02:ff:f9:e4:db:29:74:81:e0:9b:5e:28:
44:61:4f:17:b2:0f:f1:2f:ff:69:41:5e:d6:e4:31:
ad:9f:c3:ea:e7:1f:b3:cc:ab:8b:25:bc:33:ff:90:
ff:16:cf:12:71:c1:d8:05:60:22:05:09:80:72:8b:
71:ec:d8:1b:17:1e:c6:0a:e5:3b:c4:f6:3e:de:c0:
dc:ef:87:5e:f9:b3:7a:c3:55:57:c7:44:68:59:9b:
3b:b6:0e:5c:77:31:b4:2a:7e:92:a7:22:64:d7:b3:
f5:95:8d:5b:c4:53:d8:0a:04:06:a5:16:92:14:91:
f5:9e:b7:6a:10:d7:ac:6f:57:0b:e5:be:85:80:17:
d5:c3:06:98:fa:a4:c2:5d:b4:ec:04:7f:20:21:80:
61:a6:6b:76:e3:0d:ef:d9:12:5e:06:6b:49:b8:81:
87:c2:1f:e2:0c:6b:bd:58:1c:d3:db:55:ff:11:18:
6c:06:85:6d:13:3a:10:ad:3f:d4:4b:35:ae:46:55:
de:77:f9:13:50:1a:c0:f6:49:ba:41:b0:0b:59:1d:
f0:33:e3:d9:ba:4d:cc:66:4b:81:5d:32:e5:91:2c:
c0:f9:c0:49:3e:4a:ea:7d:07:f5:03:74:9d:6a:81:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.136.0/22
200.196.136.0/22
IPv6:
2804:192c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61776
Signature Algorithm: sha256WithRSAEncryption
40:30:ca:b4:67:df:b5:d8:4b:5c:ed:2f:70:32:4c:80:6f:ac:
6b:99:9d:5d:43:a6:6e:02:2c:d0:ac:ca:03:eb:a0:74:23:f9:
67:d4:92:5d:85:50:10:f0:00:f9:66:aa:c7:69:f0:18:b6:9e:
2f:c8:6c:06:77:09:4c:f4:d9:9f:99:68:75:8e:4e:91:07:44:
1d:df:eb:0e:7f:19:ac:d7:75:1d:40:15:dc:83:7c:d4:14:73:
ae:99:aa:58:64:3d:d0:e6:d3:de:0d:ab:cc:f0:12:50:9c:66:
d5:37:3c:24:b7:f3:0a:22:8b:c6:b9:9d:79:f0:6a:88:e5:5d:
28:83:c4:d4:02:be:61:d0:95:3b:f6:15:2b:e6:76:2b:62:40:
dc:93:28:54:f8:ba:f3:d3:51:38:6d:dd:34:4e:3d:af:04:3b:
fb:a7:71:1b:58:67:b9:2b:ec:97:23:c3:65:6e:44:2b:d6:eb:
0d:ab:53:a4:7d:d3:f2:15:12:2a:27:a1:62:04:70:72:d8:20:
c1:eb:b8:d6:53:20:63:a9:d0:58:f2:3a:83:b3:3f:7d:22:74:
61:d4:24:28:69:31:65:b4:06:4d:0f:8b:41:40:60:8c:55:25:
9c:bb:0e:63:e6:ee:11:69:b4:6f:9d:11:c1:56:69:8d:d8:67:
03:31:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 20:32:26 2024 by rpki-client on console-fra.rpki-client.org