Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.cer
File: 1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.cer (raw, json)
Hash identifier: MGdclLTb3QDagOhq1JEeq9PwF76lvDtaUeJ5QL7lxVY=
Subject key identifier: 1D:99:E9:AD:3D:63:7A:53:C8:5C:20:B4:68:2E:7B:A1:FB:03:F4:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1D3C72C6C1033A5CD1B6E7589FDDE7AD43B79BEC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.mft
caRepository: rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 08 Apr 2024 19:18:46 +0000
Certificate not after: Mon 07 Apr 2025 19:23:46 +0000
Subordinate resources: AS: 61882
IP: 131.0.48.0/22
IP: 2804:1abc::/32
Validation: Failed, certificate revoked on Wed 29 May 2024 07:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3c:72:c6:c1:03:3a:5c:d1:b6:e7:58:9f:dd:e7:ad:43:b7:9b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 8 19:18:46 2024 GMT
Not After : Apr 7 19:23:46 2025 GMT
Subject: CN=1D99E9AD3D637A53C85C20B4682E7BA1FB03F453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:f4:3a:0c:39:20:06:45:59:09:12:db:d2:
3f:77:78:6d:c7:2a:06:ae:d6:b2:8a:b8:19:72:d0:
a1:6b:34:47:c1:ac:07:42:2e:02:f7:aa:3d:66:47:
37:24:b5:5c:63:ce:d9:cc:2c:2f:c3:82:f8:06:68:
59:32:a4:55:15:45:c1:eb:c6:55:40:7e:1b:f8:e1:
42:21:3d:92:c0:22:8e:98:17:04:e5:cb:06:1e:96:
95:56:6f:22:f1:52:2d:7e:f7:89:2b:bb:77:16:55:
a3:49:a8:05:ec:a6:4c:b9:29:a6:1b:47:eb:88:67:
3b:c6:d1:db:03:51:aa:5f:ea:b9:e6:ab:ad:65:e0:
4d:a6:14:2c:fb:cd:83:d6:79:99:e4:e1:c3:64:7e:
79:ec:d5:f3:8d:5d:3c:20:ba:4f:a9:7c:43:65:5b:
f5:76:0f:15:ab:3a:e7:c3:1e:8f:7f:6c:e2:44:20:
5e:72:43:8f:26:b1:36:ad:50:98:8a:d6:35:e3:12:
e6:d2:dd:e8:1e:3c:c1:00:d3:02:fa:3f:bf:5c:b7:
57:ea:6f:e6:12:b8:02:3a:f1:40:2b:a3:d2:11:e8:
a4:36:30:da:04:9d:70:ab:c6:09:7d:1c:ec:2e:67:
ad:20:1e:c0:3f:17:e5:3a:a5:11:4c:c8:54:e5:56:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1D:99:E9:AD:3D:63:7A:53:C8:5C:20:B4:68:2E:7B:A1:FB:03:F4:53
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.48.0/22
IPv6:
2804:1abc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61882
Signature Algorithm: sha256WithRSAEncryption
2c:f7:2b:cf:a8:86:08:25:a8:23:8e:2f:59:7c:82:f9:43:05:
e2:38:97:4b:2b:54:ce:de:04:1c:79:47:54:5d:b5:f8:47:85:
09:72:46:1c:7b:9a:c3:67:7d:a0:69:67:b9:b5:42:11:72:b2:
f0:d0:2b:a1:23:b5:b8:3f:d6:7f:96:3d:01:51:07:14:87:fb:
d9:00:4b:d9:21:8c:b8:a0:22:73:2b:60:e9:bf:8c:bc:c5:61:
18:85:45:95:15:d0:9e:40:60:88:6c:81:65:76:b3:28:71:40:
b0:6f:9e:71:1d:fe:78:af:04:34:a1:e2:e3:09:f3:a4:7e:7d:
34:e5:b1:fe:3a:04:d6:fe:ce:17:08:ee:54:93:ba:e7:e5:67:
8a:51:f6:b2:15:f2:cd:7e:18:68:20:6c:99:ed:0d:31:8c:26:
fc:63:6c:85:49:6a:90:a6:4d:e4:7a:00:58:37:59:2f:1c:3d:
cb:49:78:ff:5e:63:d4:19:bf:da:1c:c3:c0:0a:35:8d:78:1b:
59:08:d2:85:6e:76:3a:d4:70:cf:4f:13:91:eb:60:17:fe:ab:
12:eb:fc:b6:dd:ea:5b:89:08:75:89:0a:7d:c2:58:fa:f7:80:
26:65:3f:93:e6:4c:b5:93:d8:92:7e:cc:6e:0a:6e:79:a1:08:
b9:f1:4d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org