Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
File: 2288FF0341950A63A6215C01F2FF9D9291FEB946.cer (raw, json)
Hash identifier: 8jKNwlM/LUtdo+VBgEdfRbZTiNtiIDlPW6dpClro56Y=
Subject key identifier: 22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6AA61A917E5B807EDC3EAA5AF5B934C5263832FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.mft
caRepository: rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 01 Jul 2024 17:58:15 +0000
Certificate not after: Mon 30 Jun 2025 18:03:15 +0000
Subordinate resources: AS: 28587
IP: 177.128.184.0/21
IP: 2804:da0::/32
Validation: Failed, certificate revoked on Thu 25 Jul 2024 16:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a6:1a:91:7e:5b:80:7e:dc:3e:aa:5a:f5:b9:34:c5:26:38:32:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 1 17:58:15 2024 GMT
Not After : Jun 30 18:03:15 2025 GMT
Subject: CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:a6:bb:d8:af:fa:30:1f:3a:af:08:bd:5b:
2a:b9:61:b8:a1:14:93:d8:52:99:8a:8c:6d:dd:ce:
07:11:3e:3b:1f:31:0d:39:a9:2e:89:49:00:8d:6a:
3f:84:01:c7:80:34:ed:09:13:e6:da:d9:76:05:b3:
d8:a2:ca:2c:f9:5e:86:60:dc:6e:aa:01:7c:fd:e5:
21:71:67:3f:b2:8b:b0:05:a5:a0:74:11:58:15:bb:
7f:51:aa:90:f5:3d:5e:bc:11:64:c2:dd:92:47:bc:
37:3b:3f:53:82:a2:a2:13:7f:08:5b:4e:b0:a3:29:
1e:62:e6:df:4c:1a:7f:16:c8:9e:56:62:73:62:20:
16:d9:66:ba:43:ee:0b:42:f7:86:e5:af:bc:41:9c:
74:bd:e1:3f:7c:61:47:79:b7:ae:6b:8e:fc:a4:5d:
27:6e:ca:0d:8e:ce:bf:83:67:f7:79:26:a5:62:9f:
09:60:a0:d0:ec:a9:f6:45:e6:75:08:51:a0:3e:8e:
9e:c0:79:3d:05:f8:89:3f:29:90:95:c0:90:1f:36:
5f:2c:f9:99:dd:47:fe:af:b3:b7:f3:ce:cb:98:85:
dc:e3:b9:b1:56:f3:05:b4:cc:28:8c:34:a5:1a:58:
e8:23:59:75:8d:80:f4:22:17:a9:0e:39:e6:9b:bf:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.184.0/21
IPv6:
2804:da0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28587
Signature Algorithm: sha256WithRSAEncryption
74:44:da:c3:71:23:a8:62:1e:4e:be:b1:ca:ce:5a:a3:39:e2:
57:2b:df:2f:45:3f:7a:d3:b8:8f:d2:7a:05:d8:6d:7b:e6:8a:
ea:be:56:34:ba:c4:2d:f1:b8:0e:83:a1:aa:aa:7f:4e:15:ab:
5a:d3:ca:ac:cf:22:33:35:60:c3:12:34:60:75:f4:f8:46:b8:
83:1b:d8:d1:02:93:c1:f4:46:2e:7e:fd:58:43:81:38:97:74:
76:75:5a:79:08:81:e1:0b:b9:70:0e:72:e7:c8:53:a3:30:57:
81:99:27:9a:c4:1a:66:fc:fa:7c:42:1b:b8:98:60:4d:cf:ed:
d6:b5:2a:18:5b:e9:81:c2:1f:bd:8c:39:25:30:f7:c4:c6:5f:
00:fb:9a:e6:aa:3f:0f:f0:82:f2:9d:e5:ff:70:36:aa:75:da:
18:dc:5e:53:41:e9:2d:da:6d:ed:a2:4e:74:ee:7d:2c:56:a6:
93:04:e1:6c:cd:b5:4a:f0:0e:4d:b2:ca:99:3a:cb:75:63:eb:
9d:47:c4:8e:eb:1a:23:bd:78:ea:6e:f7:04:82:53:f3:bd:8c:
e3:84:a5:43:43:49:3e:8e:96:8b:fa:a2:de:54:95:a8:7d:c7:
a0:5b:03:fe:d3:bb:66:4a:65:fc:67:17:4d:37:84:f9:b9:2f:
58:9e:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 19:18:50 2024 by rpki-client on console-ams.rpki-client.org