Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.cer
File: 157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.cer (raw, json)
Hash identifier: 3ua1K88zYox4uFkuNhZ+0O2JqfIpbWDjJVbQRhUx0v0=
Subject key identifier: 15:7A:1A:A8:78:EF:7E:6D:1D:53:43:28:AA:B6:FD:83:3E:1D:BE:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7345E18F7BA80088FC96C3CC8F59668314A52156
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.mft
caRepository: rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 14 Jun 2024 14:15:15 +0000
Certificate not after: Fri 13 Jun 2025 14:20:15 +0000
Subordinate resources: AS: 268402
IP: 45.160.16.0/22
IP: 2804:50a8::/32
Validation: Failed, certificate revoked on Tue 09 Jul 2024 19:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:45:e1:8f:7b:a8:00:88:fc:96:c3:cc:8f:59:66:83:14:a5:21:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 14 14:15:15 2024 GMT
Not After : Jun 13 14:20:15 2025 GMT
Subject: CN=157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:dc:ca:7c:4c:cf:cd:e1:c6:33:f2:b5:6a:
01:9b:63:27:4d:ac:4c:90:b9:a8:3c:d5:29:97:5e:
5c:5b:4c:53:18:03:9e:f2:6b:60:94:d5:5a:65:15:
78:52:db:40:e8:b1:0d:2e:82:83:da:fd:bd:24:30:
85:a5:10:1a:fc:49:50:c6:24:b6:f8:71:56:4f:c1:
a5:ae:7a:fa:80:a5:7f:f7:d1:9b:eb:4f:af:ea:c9:
1e:89:27:fe:57:1e:ea:6c:ba:34:2b:b6:02:fd:62:
dc:50:4d:df:c2:7c:c4:82:fc:06:1a:a6:09:b7:20:
e9:35:29:43:e8:8d:9e:9f:29:1f:2a:02:ed:91:f3:
87:73:d6:cf:df:46:13:79:69:23:b1:d6:a1:61:ab:
41:a5:e1:49:6b:8e:34:ad:6d:7e:d0:54:37:0c:37:
f1:fa:3c:51:f0:6b:22:ef:83:70:9d:58:b8:ca:56:
7a:34:95:5f:79:28:a1:33:41:16:fb:c3:bf:bc:8d:
d0:09:e9:9d:45:b4:8c:ee:92:ec:3c:7b:9a:3f:b9:
01:5b:23:5f:12:bc:5d:8f:0a:6b:cc:bf:a8:5f:5e:
91:ed:4d:08:5c:2d:08:23:ac:35:1c:92:68:2d:5a:
b1:57:49:ca:f2:ce:78:7e:34:02:c7:de:33:81:2b:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
15:7A:1A:A8:78:EF:7E:6D:1D:53:43:28:AA:B6:FD:83:3E:1D:BE:6A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.16.0/22
IPv6:
2804:50a8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268402
Signature Algorithm: sha256WithRSAEncryption
10:f7:9d:21:66:b8:a1:2b:21:58:79:37:5e:34:ce:60:f8:42:
a5:76:0c:70:66:7e:cb:dd:a1:08:90:15:65:e3:7d:e1:81:32:
39:12:0e:59:e5:27:1b:23:69:a1:18:aa:27:78:5c:fd:6b:8a:
8d:71:6f:73:66:65:92:d8:9a:e4:3f:f0:69:dc:9d:57:cc:75:
2b:36:04:6c:6a:4e:70:48:7a:16:72:bb:2f:21:6a:ae:02:83:
c3:36:ec:a8:c8:c0:8d:b7:c9:04:42:23:fa:02:19:ad:d5:b6:
e8:99:79:c8:a4:48:5d:25:9b:2c:08:2e:7a:d4:62:28:1a:bb:
d3:aa:7e:fa:61:ce:c1:0e:52:62:89:00:b1:99:52:38:36:54:
de:38:c0:fd:68:03:5f:d9:4f:82:d2:b7:e3:20:d8:57:9c:65:
81:b6:6a:d1:20:cb:0c:2c:45:e4:ad:e1:8e:17:af:35:e1:31:
c3:77:53:db:af:73:b3:26:ec:87:00:ad:d6:c4:87:85:54:41:
c5:bc:57:d3:c7:e0:e2:3b:fa:d4:03:82:ba:e3:d5:76:d1:70:
fb:3b:58:ea:57:9e:d2:ed:67:eb:59:e6:15:c9:a5:5d:05:39:
a1:a3:0f:11:a8:9a:57:43:bc:23:6d:98:6c:ce:25:29:cb:ad:
af:0e:70:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 21:07:17 2024 by rpki-client on console-ams.rpki-client.org