Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0.cer
File: 1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0.cer (raw, json)
Hash identifier: KIEBj3w1afWbhpM6ntiyc4GwWRBkS5Cz5BxfWdn0gmE=
Subject key identifier: 1F:B4:A7:B0:6E:D8:1D:56:33:15:45:E9:4F:CC:5A:9F:0E:4E:6B:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0B1CC91E8019804F14D25F2B728C6512F17C8A5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/1/1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0.mft
caRepository: rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 05 Apr 2024 00:48:31 +0000
Certificate not after: Fri 04 Apr 2025 00:53:31 +0000
Subordinate resources: AS: 52612
IP: 138.94.116.0/22
IP: 170.79.248.0/22
IP: 177.124.20.0/22
IP: 2804:22fc::/32
Validation: Failed, certificate revoked on Thu 02 May 2024 01:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:1c:c9:1e:80:19:80:4f:14:d2:5f:2b:72:8c:65:12:f1:7c:8a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 5 00:48:31 2024 GMT
Not After : Apr 4 00:53:31 2025 GMT
Subject: CN=1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:ba:92:9f:67:d2:6b:32:32:d0:40:a0:d6:
6a:e4:29:94:89:73:09:ea:e3:de:e7:17:0a:a9:a4:
67:0a:77:3b:f8:e4:44:2d:5e:e5:65:b3:4b:58:36:
d8:d5:c8:bd:6b:06:fc:57:01:d3:33:7e:e4:4c:54:
64:a7:84:c9:0a:ca:99:e3:e1:4f:14:7a:d3:a8:70:
67:7f:1b:c8:23:69:ce:a4:8a:9e:d5:3d:34:c6:e8:
8b:ca:a8:d1:c8:31:f6:cc:19:8c:ea:fa:6a:6a:41:
9b:f1:98:83:b3:47:fd:ee:e9:5f:c7:6d:12:fb:d9:
6b:a8:15:f6:a8:6f:6d:89:e6:e3:cc:fc:d7:21:d2:
0d:7d:ec:68:dc:fb:a1:00:37:7f:3e:24:18:a1:07:
c2:b5:12:90:74:a1:72:90:b1:d9:a8:11:3e:4a:50:
9b:be:ee:a8:6a:77:52:92:ae:51:b6:c0:67:05:ff:
63:24:20:7a:fa:ad:e6:6f:10:42:21:91:3d:59:ba:
0f:06:e7:2d:69:67:96:e6:de:e6:53:2d:c3:fd:78:
4e:13:81:2d:9c:72:a0:66:2c:5d:cd:f5:71:24:08:
3e:ca:36:ac:b2:02:d1:fd:08:53:ed:c6:09:6e:e8:
b1:11:8f:e1:4f:b1:f4:80:27:4a:e4:9f:69:c3:6e:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1F:B4:A7:B0:6E:D8:1D:56:33:15:45:E9:4F:CC:5A:9F:0E:4E:6B:D0
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/1/1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.116.0/22
170.79.248.0/22
177.124.20.0/22
IPv6:
2804:22fc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52612
Signature Algorithm: sha256WithRSAEncryption
a4:60:a3:53:a1:09:60:e1:33:de:e0:fd:6d:e3:1a:cb:76:22:
b7:70:7a:b9:64:52:97:08:5c:d7:04:98:dd:e2:80:08:8e:51:
dc:00:e1:e8:30:a6:9b:df:af:29:83:36:4f:fe:65:4c:51:ff:
f3:0a:7f:96:39:46:64:c3:bc:73:c8:82:91:65:f3:9a:e4:01:
5e:98:d5:28:52:64:0e:99:2b:d5:43:6f:a0:24:7e:09:2c:24:
09:3a:74:f7:4f:32:b7:a9:5b:ae:32:c0:5d:8f:e2:0d:25:71:
9e:9b:38:6f:65:d8:88:ef:46:db:8e:42:5b:93:e4:43:ed:c6:
50:7b:08:c2:7a:a5:e7:e3:f6:65:c2:41:e6:27:cb:a5:c7:0c:
56:a2:c5:e6:4a:28:1a:06:eb:ca:4e:49:ff:bf:f4:70:7a:7e:
00:88:6d:3b:d9:f3:97:dc:95:07:20:55:2c:11:59:5a:5f:63:
a2:9b:62:e4:fb:32:1b:2f:2f:61:f0:55:d0:99:9f:a7:13:47:
1e:ba:b4:05:ab:23:a5:ef:74:83:e7:65:01:f6:20:21:1a:6b:
6a:9b:dd:64:03:cf:43:fc:26:e3:13:87:b8:04:a3:e9:4e:fe:
7f:08:f0:87:3d:80:d2:71:88:b0:de:8f:70:c2:56:d5:be:ea:
98:ce:4c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org