Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA.cer
File: 18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA.cer (raw, json)
Hash identifier: qgBxAkuZGWrDhxkbXxAbELlsluw/oYKqUS5L4ctvWDg=
Subject key identifier: 18:AA:0D:33:FE:0A:97:DC:3C:A2:85:6B:9A:CB:2E:74:8A:11:81:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4A9E4EA76AA2679B2F447C3B7468859B1F9DBD45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA.mft
caRepository: rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 24 Oct 2024 13:25:31 +0000
Certificate not after: Thu 23 Oct 2025 13:30:31 +0000
Subordinate resources: AS: 266021
IP: 170.245.36.0/22
IP: 2804:3940::/32
Validation: Failed, certificate revoked on Thu 31 Oct 2024 06:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:9e:4e:a7:6a:a2:67:9b:2f:44:7c:3b:74:68:85:9b:1f:9d:bd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 24 13:25:31 2024 GMT
Not After : Oct 23 13:30:31 2025 GMT
Subject: CN=18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:29:67:8a:be:5a:73:60:39:83:85:42:8a:
f5:10:d2:6c:48:ac:5b:d9:bc:6b:22:04:90:02:f2:
b7:eb:9a:78:1e:77:93:c9:5a:ea:31:80:37:ef:03:
f2:3f:93:29:4e:5d:71:c3:21:c0:63:5b:3f:12:ca:
31:3b:72:d1:30:6a:56:b8:f6:51:a2:9d:29:cf:64:
9a:6f:a3:70:64:be:ce:59:69:75:5d:b1:66:eb:9a:
b7:7c:e7:e4:40:9f:b3:ba:e7:93:7a:e6:96:79:1a:
ad:43:8b:c1:1c:c0:3a:8c:bc:a9:f1:6f:6f:33:46:
9f:fc:d4:30:49:83:fd:10:59:20:26:2c:99:d0:20:
a6:59:e2:17:04:05:41:1a:3b:50:94:e6:67:1d:54:
25:8e:1b:2f:21:fa:24:be:61:6f:a0:bb:31:49:c2:
36:a5:7b:e8:ab:0e:08:af:68:27:9c:17:b7:d9:c8:
2f:e9:a8:2f:2d:a2:c2:c0:fc:e7:f6:38:be:ba:30:
28:11:da:9a:14:f0:d4:17:8c:23:ca:30:37:71:39:
35:4b:42:50:3f:c4:ae:bb:0e:4c:ac:da:76:42:87:
1a:dd:1c:34:f9:49:1b:14:a4:15:ad:72:bc:c3:e5:
f6:d7:8e:d4:ed:17:71:7f:ac:e7:c5:33:b4:df:32:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
18:AA:0D:33:FE:0A:97:DC:3C:A2:85:6B:9A:CB:2E:74:8A:11:81:CA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.36.0/22
IPv6:
2804:3940::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266021
Signature Algorithm: sha256WithRSAEncryption
1a:10:ab:77:f8:6c:66:5f:2c:d6:13:6e:37:05:c7:a0:9e:34:
a6:7e:ef:f9:02:c6:60:f8:ec:b6:a3:40:d9:0b:f6:b0:31:03:
d0:e2:e1:a7:ea:d8:e3:8a:35:73:cd:63:cf:0e:1e:de:a9:46:
ac:7f:6f:90:2b:5e:dc:a1:ae:3f:42:f3:8b:26:6e:cf:59:65:
1e:55:5f:0b:f6:e3:08:0f:2f:5b:ab:1a:a6:c3:77:07:e9:d0:
e7:e7:30:f8:98:da:4f:56:42:95:2f:b4:90:47:21:a7:76:e5:
75:64:2d:d6:ef:1d:08:a8:4c:81:8d:03:ba:c9:e7:b1:12:8c:
75:3a:10:f9:94:77:bf:de:78:d2:73:5b:7f:72:7e:12:9d:d9:
aa:ac:16:64:30:d1:ea:be:76:91:2e:22:b2:65:95:a5:e4:66:
65:45:0c:b5:90:31:da:8d:80:3b:d9:ca:4a:18:c1:d5:12:61:
21:bd:5c:b2:0a:4d:0b:9b:b4:a1:19:b0:29:ed:6d:6a:be:a5:
28:5e:b7:c6:b5:ce:6e:07:76:d6:ca:17:e7:0b:2d:2d:c6:f9:
9d:4f:fb:76:50:00:cf:06:5b:5e:e7:de:22:7a:ae:24:5a:f6:
f8:78:1f:6d:0a:b6:ab:6b:1c:d2:cd:b1:07:0b:bf:d6:c5:00:
48:c3:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 09:32:27 2024 by rpki-client on console-fra.rpki-client.org