Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.cer
File: 1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.cer (raw, json)
Hash identifier: XCjxaFx7RG+MVZfFw7PB8ix2Gg67hMYBmH4YHqGs07I=
Subject key identifier: 1B:DF:FD:C9:E6:2C:A5:8F:E7:D6:BC:AB:0C:4F:21:8A:40:0A:5D:56
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 61C5B6EB14B135C4618F3FEE853CD06C3C9DF845
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.mft
caRepository: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 20 Apr 2024 23:50:29 +0000
Certificate not after: Sat 19 Apr 2025 23:55:29 +0000
Subordinate resources: AS: 267991
IP: 45.167.52.0/22
IP: 2804:5654::/32
Validation: Failed, certificate revoked on Fri 24 May 2024 07:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c5:b6:eb:14:b1:35:c4:61:8f:3f:ee:85:3c:d0:6c:3c:9d:f8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 20 23:50:29 2024 GMT
Not After : Apr 19 23:55:29 2025 GMT
Subject: CN=1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:0c:1a:53:d5:9a:8b:1e:ed:5c:9f:78:8c:
5d:d0:65:a1:cb:bd:db:c6:57:91:08:c6:26:d2:f0:
2a:83:97:d6:0a:de:65:44:ef:bf:d1:07:92:73:f1:
0c:a7:8a:62:fd:46:fb:33:a4:cc:28:75:ca:70:a9:
b9:62:b5:67:0e:2b:3f:7e:30:20:dc:a3:a9:63:4a:
f3:41:ab:d8:77:ba:be:09:be:2c:d5:bd:86:16:b2:
92:0f:63:15:25:42:2a:46:4c:ab:09:4e:7b:a4:47:
c4:60:0c:33:82:d9:72:ab:37:37:0c:24:e6:87:ec:
73:d5:c5:f2:67:bf:f6:c1:88:96:fb:32:8c:ad:91:
39:67:2e:ef:6c:98:87:ac:41:ce:20:2d:8a:c2:27:
a0:33:59:78:57:b3:51:0c:4f:84:39:48:de:7e:81:
a1:b4:24:43:7c:e0:f1:8f:08:f1:65:f4:23:d4:d2:
a5:59:ef:7c:e1:57:c1:0d:3c:4b:b7:d0:0f:d8:50:
7f:17:37:ff:70:88:25:b1:7e:2d:8e:6c:29:53:aa:
86:36:c1:49:23:33:db:69:a4:59:b8:a4:29:97:34:
44:07:db:34:b4:73:86:bf:1b:6c:97:f6:60:35:7c:
ee:6e:89:af:d4:e3:53:e9:e5:98:07:12:93:ed:52:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1B:DF:FD:C9:E6:2C:A5:8F:E7:D6:BC:AB:0C:4F:21:8A:40:0A:5D:56
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.52.0/22
IPv6:
2804:5654::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267991
Signature Algorithm: sha256WithRSAEncryption
d1:04:92:e3:01:99:95:6e:16:bd:4f:31:84:5c:1f:b1:29:a2:
9c:6d:cb:2f:5f:c2:58:59:b4:c5:11:85:11:b3:4f:18:06:aa:
0f:bf:99:cb:28:b3:d1:be:cb:d7:29:10:14:07:d3:66:c4:8d:
17:49:4b:38:0d:1e:91:d5:7e:50:62:49:a9:b4:3b:a4:56:3a:
e3:ad:6f:73:f8:9c:d1:af:74:88:12:c4:9c:b9:24:30:36:fb:
8e:7b:a5:7c:30:8f:eb:a8:a7:95:40:37:80:59:e3:e9:d5:1d:
f7:b5:e0:e0:41:42:62:07:4e:ea:84:eb:ca:12:75:60:b4:f2:
a6:46:3b:74:5b:a0:b0:a0:50:0f:43:ab:e2:d1:d7:37:61:f6:
28:ab:32:0b:7a:78:2d:e5:cb:7a:9b:ae:8e:b5:6d:25:1c:f4:
8a:d1:93:d4:74:a4:8d:ef:d3:18:01:22:33:1d:66:d2:4d:13:
3d:65:54:7b:7b:3a:ba:c3:c8:dc:88:d2:0c:a1:ef:6d:91:0b:
81:b2:f8:f3:eb:9e:44:bd:81:f4:35:c4:05:25:67:6f:4a:14:
cf:1e:b5:d5:aa:32:ad:2d:28:86:11:c9:e0:58:3d:40:87:cc:
27:53:12:3e:9a:da:b5:56:f7:01:b3:0f:a3:9e:b4:46:ab:7a:
6f:af:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 10:46:32 2024 by rpki-client on console-fra.rpki-client.org