Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
File: 2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer (raw, json)
Hash identifier: 2Cl+OClOkcxwKS50J9paR09x5/O88m8y11u0ZG5ae+U=
Subject key identifier: 22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6ED1CAEF8E16C2F989FA7EEFF209EFCA62435FB4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.mft
caRepository: rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 22 May 2024 15:37:09 +0000
Certificate not after: Wed 21 May 2025 15:42:09 +0000
Subordinate resources: AS: 268214
IP: 45.235.208.0/22
IP: 2804:4db4::/32
Validation: Failed, certificate revoked on Fri 19 Jul 2024 16:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d1:ca:ef:8e:16:c2:f9:89:fa:7e:ef:f2:09:ef:ca:62:43:5f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 22 15:37:09 2024 GMT
Not After : May 21 15:42:09 2025 GMT
Subject: CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:90:3f:bb:82:e7:20:1b:77:5a:e7:71:84:
70:80:97:93:2d:30:57:3a:d8:6c:ec:37:7a:c9:fa:
c8:c8:8b:72:69:e0:1e:d6:e9:4e:52:5b:86:ca:13:
07:c7:54:03:5e:51:de:75:18:e7:7d:b3:62:1b:13:
e7:50:81:0d:99:25:3c:5c:83:97:f5:6e:c8:fc:5f:
b7:8d:fd:5e:b4:6d:1d:5d:c5:06:6d:9d:c1:ea:98:
04:8b:ca:58:9e:c2:b0:e0:65:36:ca:77:98:19:5f:
57:76:cb:31:8b:fc:01:23:fd:72:e8:c6:d2:a7:57:
78:f5:29:fe:98:ed:06:4a:83:94:a7:2e:84:79:45:
81:47:a3:0f:ae:06:f6:52:5f:7f:c6:7b:71:4c:88:
8a:3c:c6:c0:3b:c2:38:7b:e9:f2:ff:a5:48:04:41:
33:19:b3:8d:45:65:38:28:a3:78:74:fb:ab:15:8d:
e2:57:f9:f4:b4:b2:48:e9:cd:b3:48:6f:50:a5:a3:
0b:d9:9d:03:2b:a6:b9:86:fa:5d:dc:cc:1c:b9:25:
b0:6a:f3:b4:9e:28:5a:2f:e6:c7:0b:13:22:ba:63:
fa:5e:1b:a3:10:0e:98:a4:90:18:69:63:3b:b0:0a:
e9:f8:f0:5a:4b:b9:be:c2:91:27:cb:d0:85:f4:fa:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.208.0/22
IPv6:
2804:4db4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268214
Signature Algorithm: sha256WithRSAEncryption
7e:53:a0:32:a9:0b:04:2b:64:c2:4d:5b:0f:c8:bd:73:7e:cb:
cd:15:04:b1:ce:e6:dc:29:31:d7:4b:44:b8:66:88:3a:5e:e2:
55:03:17:57:21:32:d8:c5:d3:49:c6:79:1b:38:58:a5:70:5e:
e9:40:78:8b:55:f2:51:ba:fc:fb:53:bf:f3:d0:fa:be:e3:85:
1e:7d:c0:9f:8e:91:15:1e:7c:68:be:f1:67:50:a0:ce:9c:28:
c2:e0:c1:f0:76:c1:fa:f5:0e:e4:63:1a:5c:9e:2d:42:e9:6e:
93:e4:76:e7:48:71:94:a3:5b:0a:6d:8b:27:96:d7:41:79:54:
e3:36:34:4c:84:a4:06:09:17:0a:84:f4:b1:c1:14:d2:7b:7e:
44:64:e5:53:94:44:8b:1d:a2:f3:02:78:c3:57:90:dc:94:b6:
06:40:ed:cc:cc:51:32:da:d7:53:62:5c:f1:01:d5:6b:da:c0:
f9:84:16:6a:c8:24:f9:47:99:f0:0c:30:35:12:0e:54:d0:d9:
8e:6f:9b:db:29:b8:6a:9b:57:e8:12:ae:30:1c:e2:05:ca:a4:
1d:3a:f8:04:64:c5:1e:d1:6d:73:72:7d:b0:82:89:0c:09:53:
2c:3d:b1:1d:9d:77:a8:f7:33:19:f5:7d:a8:85:93:d2:f3:f4:
23:34:54:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 19:56:54 2024 by rpki-client on console-fra.rpki-client.org